1 INFORMATION ON THE PROCESSING OF PERSONAL DATA (hereinafter referred to as “PO”)
Information and instruction on rights within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, and also according to the provisions of Act No. 18/2018 Coll. of November 29, 2017 on the protection of personal data and on the amendment of certain laws as amended.
Operator strane.venezia.sk
Kamil Podhorský
registered in the commercial register of the Martin Regional Office under reg. no. 506-10685
with place of business 03802 Dolný Kalník 61
Offices: Martin, Tolstého 35
ID: 35392584
We follow the rules and therefore the protection of your OU is important to us. We process OU in accordance with these conditions. By giving your consent to the processing of personal data on the www.venezia.sk portal, you are giving your consent as a serious and freely given, specific, informed and unambiguous expression of the will of the person concerned in the form of an unambiguously confirming act in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, dated 27 of April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, and also according to the provisions of Act no. 18/2018 Coll. of November 29, 2017 on the protection of personal data and on the amendment of certain laws as amended by the operator (hereinafter referred to as “GDPR and the LAW”).
2 PURPOSE OF PROCESSING Ú
If you contacted us, used one of our services, or are a visitor to our website www.venezia.sk. We hereby inform you what we are doing with your OU.
2.1 Contact form
We work with personal data: first and last name, email, phone number
2.2. Online environment
We operate our own profiles on social networks. The purpose of processing personal data is to communicate with you on social networks, e.g. LinkedIn/Facebook. The operating and contractual conditions of the mentioned companies apply to the protection of personal data of the persons concerned. We can obtain anonymous statistical data about your visits through a function called Facebook Insight, which is provided to us free of charge by Facebook under the unchangeable conditions of use. This data is collected through hidden files (hereinafter referred to as “cookies (ID) files”), each of which contains a unique user code that is active for a period of two years and which Facebook stores on the hard drive of a computer or other device fan site visitors. The user code, which can be assigned to the connection data of users registered on Facebook, is collected and processed when opening fan pages. – the website also contains the logos of individual social networks, the so-called plugins. If you do not click on the logos, no data will be transferred to social networks. By clicking on these logos, you accept communication with the servers of the social network, creating a link. The legal basis for processing personal data is the consent of the person concerned – Art. 6 par. 1 letter a) GDPR. For information on the purposes and scope of data collection, on the further processing and use of data by the relevant social network, and on the rights and settings of personal data protection, please refer to the information provided by the following social media sites: Facebook: http://www.facebook.com/about/privacy INSTAGRAM: https://help.instagram.com/285881641526716?helpref=page_content LinkedIN:https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy Google:http: //www.google.com/intl/de/policies/privacy
If you do not want social networks to collect data about you, do not click on the mentioned logos. The operator processes the personal data of the affected persons to the extent specified in the relevant legal regulations, contracts and other documents of the operator.
3 THIRD PARTIES
Your personal data may be provided to third parties such as courts, state and public authorities, notaries, or our intermediaries, technical support providers, providers of tools for analysis, processing and data storage
(Google Analytics, Adwords), software equipment (Microsoft, Google), social networks such as Facebook, Instagram, LinkedIn. In the company, we take care to minimize the provision of your personal data. In the event that we process Personal Data through intermediaries, we make sure that we choose intermediaries that meet the requirements of the GDPR, i.e. technical, organizational and personnel.
4 PROCESSING TIME
The person concerned agrees to the processing of personal data from the date of granting consent in accordance with these conditions. During a period of 5 years and pursuant to special regulations (Accounting Act).
5 TRANSFER TO A THIRD COUNTRY
The operator does not intend to transfer the OU to a third country or international organization, including the identification of the country or international organization. However, some of the recipients may have servers located outside the EU (Google, LinkedIn, Facebook). These servers may be located in the United States of America (USA). Companies based in the USA that have access to the OU are certified according to the so-called privacy protection system. in Private Shields and consider the companies to provide an adequate level of protection. This transfer only takes place subject to strict compliance with the GDPR.
6 AUTOMATED PROFILING
The operator processes the OU in paper and electronic form. In order to improve the quality of marketing campaigns, the operator uses automated profiling. By profiling, we segment the offer/s that may interest you and are more advantageous for you. In the case of profiling, we use the following Google Adwords, Facebook Pixel systems. Consent is not required for the basic collection of statistical data, e.g. by using the Google Analytics measurement code.
7 IP ADDRESS
It is a set of numbers uniquely identifying a device in a computer network. From the point of view of personal data protection, the IP address can be classified as data relating to an identifiable person. An IP address becomes personal data if:
• IP address is personal data if it is processed by the internet connection provider together with other identification (name, email…),
• static IP addresses used by natural persons/individuals must be considered as personal data,
• a dynamic IP address will be considered personal data in the event that the online service provider processes other identifiers considered personal data (e.g. name, surname, e-mail, etc.) together with the dynamic IP address.
In the case of storing the IP address on the website (e.g. the WordPress editorial system for comments), it is necessary to choose a suitable processing purpose or use pseudonymization.
8. SECURE TRANSMISSION OF DATA
Your personal data is transmitted securely thanks to encryption. The SSL (Secure Socket Layer) coding system is most often used for secure communication with web servers. Personal data in our systems as well as the website are secured by appropriate technical and organizational measures against loss, destruction, alteration and further dissemination of data by unauthorized persons.
9 RIGHTS OF THE PERSON CONCERNED
The data subject has the right under the GDPR to (i) the right to rectification, (ii) the right to erasure, (iii) the right to data portability, (iv) the right to object, (v) the right to withdraw consent, (vi) the right to access for information.
Right to rectification.
The affected person has the right to have the operator correct, without undue delay, incorrect personal data relating to him or her and to complete incomplete
Right to erasure.
The affected person has the right to have the operator delete the personal data relating to him without undue delay. The operator is obliged to delete these OUs without undue delay if any of the following reasons are met:
• Personal data are no longer necessary for the purpose for which they were obtained or processed,
• the person concerned revokes the consent to the processing of personal data for at least 1 specific purpose or the consent is invalid if its provision is excluded by a special regulation,
• the affected person objects to the processing of personal data for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing,
• Personal data are processed illegally,
• the reason for erasure is the fulfillment of an obligation under this Act, a special regulation or an international treaty to which the Slovak Republic is bound,
• personal data were obtained in connection with the offer of information society services and the person concerned is under 16 years of age. If the operator has published OÚ and is obliged to delete them, he is also obliged to take adequate security measures, including technical measures, taking into account the available technology and the costs of their implementation.
For this purpose, it also informs other operators who process the personal data of the person concerned about her request that these operators delete references to her personal data and their copies or write-offs.
Right to data portability.
The person concerned has the right to obtain personal data concerning him and which he provided to the operator in a structured, commonly used and machine-readable format and has the right to transfer these personal data to another operator, if it is technically possible and if: – the personal data are processed based on the consent of the data subject person, on the basis of the contract and on the basis of the consent of the person concerned, which is only valid if its provision is excluded by a special regulation, – the processing of the OI is carried out by automated means
The right to object
The affected person has the right to object to the processing of personal data relating to him/her for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing, the operator is obliged to explicitly inform the affected person of his/her rights at the latest during the first communication with him/her, while information about this right must be provided clearly and separately from any other information. The affected person can exercise his right to object by automated means using technical specifications.
Withdrawal of consent
The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The affected person can withdraw the consent in the same way as he gave the consent.
Right of access to information
The affected person has the right to obtain from the operator a confirmation as to whether personal data relating to him or her are being processed. If the operator processes such personal data, the data subject has the right to obtain access to these personal data and information about:
• the purpose of processing the OI,
• the category of OUs processed – in our case, they are ordinary OUs, the operator does not process a special category of OUs,
• the identification of the recipient or the category of the recipient to whom the IDs were or are to be provided, especially the recipient in a third country or an international organization, if possible, • the retention period of the IDs; if this is not possible, information on the criteria for its determination,
• the right to request from the operator the correction of personal data relating to the person concerned, their deletion or limitation of their processing, or the right to object to the processing of personal data,
• just submit a proposal for the initiation of proceedings, sources OU, if personal data were not obtained from the person concerned,
• the existence of automated individual decision-making, including profiling, in these cases, the operator will provide the data subject with information, in particular, about the procedure used, as well as the significance and expected consequences of such processing of personal data for the data subject
Based on this request, the operator is obliged to provide information within 30 days from the delivery of this request. The operator can extend this period by another 60 days, and will inform about the postponement. The operator may charge a reasonable fee corresponding to the administrative costs for the repeated provision of the personal data requested by the data subject. The operator is obliged to provide the affected person with an answer in the manner requested by the affected person or according to his/her request
The right to file a motion to initiate proceedings by the person concerned
The affected person can file a motion to initiate proceedings in accordance with § 100 of the Act, if he feels that his rights have been violated. The proposal must contain: – information about the proposer – against whom the proposal is directed with the subject of the proposal, indicating the rights that should have been violated during the processing of personal data – evidence to support the claims. The sample proposal will be published on the website of the Office for Personal Data Protection, Hraničná 12, 820 02 Bratislava. The Office assesses the initiative within 30 days, makes a decision within 90 days, or may extend the deadline accordingly.
10 DO YOU HAVE QUESTIONS?
In case of any questions or comments regarding the processing of personal data, you can contact us
Operator strane.venezia.sk
Kamil Podhorský
registered in the commercial register of the Martin Regional Office under reg. no. 506-10685
with place of business 03802 Dolný Kalník 61
Offices: Martin, Tolstého 35
ID: 35392584
Contact information: e-mail/tel. number: strane@venezia.sk / 043 4221100
11 FINAL PROVISIONS
This information becomes valid and effective on November 1, 2018. The operator reserves the right to change these conditions in the event of a change in the company’s processing of personal data and in the event of a legislative change.
[/vc_column_text][/vc_column][/vc_row]
1 INFORMATION ON THE PROCESSING OF PERSONAL DATA (hereinafter referred to as “PO”)
Information and instruction on rights within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, and also according to the provisions of Act No. 18/2018 Coll. of November 29, 2017 on the protection of personal data and on the amendment of certain laws as amended.
Operator strane.venezia.sk
Kamil Podhorský
registered in the commercial register of the Martin Regional Office under reg. no. 506-10685
with place of business 03802 Dolný Kalník 61
Offices: Martin, Tolstého 35
ID: 35392584
We follow the rules and therefore the protection of your OU is important to us. We process OU in accordance with these conditions. By giving your consent to the processing of personal data on the www.venezia.sk portal, you are giving your consent as a serious and freely given, specific, informed and unambiguous expression of the will of the person concerned in the form of an unambiguously confirming act in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, dated 27 of April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, and also according to the provisions of Act no. 18/2018 Coll. of November 29, 2017 on the protection of personal data and on the amendment of certain laws as amended by the operator (hereinafter referred to as “GDPR and the LAW”).
2 PURPOSE OF PROCESSING Ú
If you contacted us, used one of our services, or are a visitor to our website www.venezia.sk. We hereby inform you what we are doing with your OU.
2.1 Contact form
We work with personal data: first and last name, email, phone number
2.2. Online environment
We operate our own profiles on social networks. The purpose of processing personal data is to communicate with you on social networks, e.g. LinkedIn/Facebook. The operating and contractual conditions of the mentioned companies apply to the protection of personal data of the persons concerned. We can obtain anonymous statistical data about your visits through a function called Facebook Insight, which is provided to us free of charge by Facebook under the unchangeable conditions of use. This data is collected through hidden files (hereinafter referred to as “cookies (ID) files”), each of which contains a unique user code that is active for a period of two years and which Facebook stores on the hard drive of a computer or other device fan site visitors. The user code, which can be assigned to the connection data of users registered on Facebook, is collected and processed when opening fan pages. – the website also contains the logos of individual social networks, the so-called plugins. If you do not click on the logos, no data will be transferred to social networks. By clicking on these logos, you accept communication with the servers of the social network, creating a link. The legal basis for processing personal data is the consent of the person concerned – Art. 6 par. 1 letter a) GDPR. For information on the purposes and scope of data collection, on the further processing and use of data by the relevant social network, and on the rights and settings of personal data protection, please refer to the information provided by the following social media sites: Facebook: http://www.facebook.com/about/privacy INSTAGRAM: https://help.instagram.com/285881641526716?helpref=page_content LinkedIN:https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy Google:http: //www.google.com/intl/de/policies/privacy
If you do not want social networks to collect data about you, do not click on the mentioned logos. The operator processes the personal data of the affected persons to the extent specified in the relevant legal regulations, contracts and other documents of the operator.
3 THIRD PARTIES
Your personal data may be provided to third parties such as courts, state and public authorities, notaries, or our intermediaries, technical support providers, providers of tools for analysis, processing and data storage
(Google Analytics, Adwords), software equipment (Microsoft, Google), social networks such as Facebook, Instagram, LinkedIn. In the company, we take care to minimize the provision of your personal data. In the event that we process Personal Data through intermediaries, we make sure that we choose intermediaries that meet the requirements of the GDPR, i.e. technical, organizational and personnel.
4 PROCESSING TIME
The person concerned agrees to the processing of personal data from the date of granting consent in accordance with these conditions. During a period of 5 years and pursuant to special regulations (Accounting Act).
5 TRANSFER TO A THIRD COUNTRY
The operator does not intend to transfer the OU to a third country or international organization, including the identification of the country or international organization. However, some of the recipients may have servers located outside the EU (Google, LinkedIn, Facebook). These servers may be located in the United States of America (USA). Companies based in the USA that have access to the OU are certified according to the so-called privacy protection system. in Private Shields and consider the companies to provide an adequate level of protection. This transfer only takes place subject to strict compliance with the GDPR.
6 AUTOMATED PROFILING
The operator processes the OU in paper and electronic form. In order to improve the quality of marketing campaigns, the operator uses automated profiling. By profiling, we segment the offer/s that may interest you and are more advantageous for you. In the case of profiling, we use the following Google Adwords, Facebook Pixel systems. Consent is not required for the basic collection of statistical data, e.g. by using the Google Analytics measurement code.
7 IP ADDRESS
It is a set of numbers uniquely identifying a device in a computer network. From the point of view of personal data protection, the IP address can be classified as data relating to an identifiable person. An IP address becomes personal data if:
• IP address is personal data if it is processed by the internet connection provider together with other identification (name, email…),
• static IP addresses used by natural persons/individuals must be considered as personal data,
• a dynamic IP address will be considered personal data in the event that the online service provider processes other identifiers considered personal data (e.g. name, surname, e-mail, etc.) together with the dynamic IP address.
In the case of storing the IP address on the website (e.g. the WordPress editorial system for comments), it is necessary to choose a suitable processing purpose or use pseudonymization.
8. SECURE TRANSMISSION OF DATA
Your personal data is transmitted securely thanks to encryption. The SSL (Secure Socket Layer) coding system is most often used for secure communication with web servers. Personal data in our systems as well as the website are secured by appropriate technical and organizational measures against loss, destruction, alteration and further dissemination of data by unauthorized persons.
9 RIGHTS OF THE PERSON CONCERNED
The data subject has the right under the GDPR to (i) the right to rectification, (ii) the right to erasure, (iii) the right to data portability, (iv) the right to object, (v) the right to withdraw consent, (vi) the right to access for information.
Right to rectification.
The affected person has the right to have the operator correct, without undue delay, incorrect personal data relating to him or her and to complete incomplete
Right to erasure.
The affected person has the right to have the operator delete the personal data relating to him without undue delay. The operator is obliged to delete these OUs without undue delay if any of the following reasons are met:
• Personal data are no longer necessary for the purpose for which they were obtained or processed,
• the person concerned revokes the consent to the processing of personal data for at least 1 specific purpose or the consent is invalid if its provision is excluded by a special regulation,
• the affected person objects to the processing of personal data for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing,
• Personal data are processed illegally,
• the reason for erasure is the fulfillment of an obligation under this Act, a special regulation or an international treaty to which the Slovak Republic is bound,
• personal data were obtained in connection with the offer of information society services and the person concerned is under 16 years of age. If the operator has published OÚ and is obliged to delete them, he is also obliged to take adequate security measures, including technical measures, taking into account the available technology and the costs of their implementation.
For this purpose, it also informs other operators who process the personal data of the person concerned about her request that these operators delete references to her personal data and their copies or write-offs.
Right to data portability.
The person concerned has the right to obtain personal data concerning him and which he provided to the operator in a structured, commonly used and machine-readable format and has the right to transfer these personal data to another operator, if it is technically possible and if: – the personal data are processed based on the consent of the data subject person, on the basis of the contract and on the basis of the consent of the person concerned, which is only valid if its provision is excluded by a special regulation, – the processing of the OI is carried out by automated means
The right to object
The affected person has the right to object to the processing of personal data relating to him/her for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing, the operator is obliged to explicitly inform the affected person of his/her rights at the latest during the first communication with him/her, while information about this right must be provided clearly and separately from any other information. The affected person can exercise his right to object by automated means using technical specifications.
Withdrawal of consent
The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The affected person can withdraw the consent in the same way as he gave the consent.
Right of access to information
The affected person has the right to obtain from the operator a confirmation as to whether personal data relating to him or her are being processed. If the operator processes such personal data, the data subject has the right to obtain access to these personal data and information about:
• the purpose of processing the OI,
• the category of OUs processed – in our case, they are ordinary OUs, the operator does not process a special category of OUs,
• the identification of the recipient or the category of the recipient to whom the IDs were or are to be provided, especially the recipient in a third country or an international organization, if possible, • the retention period of the IDs; if this is not possible, information on the criteria for its determination,
• the right to request from the operator the correction of personal data relating to the person concerned, their deletion or limitation of their processing, or the right to object to the processing of personal data,
• just submit a proposal for the initiation of proceedings, sources OU, if personal data were not obtained from the person concerned,
• the existence of automated individual decision-making, including profiling, in these cases, the operator will provide the data subject with information, in particular, about the procedure used, as well as the significance and expected consequences of such processing of personal data for the data subject
Based on this request, the operator is obliged to provide information within 30 days from the delivery of this request. The operator can extend this period by another 60 days, and will inform about the postponement. The operator may charge a reasonable fee corresponding to the administrative costs for the repeated provision of the personal data requested by the data subject. The operator is obliged to provide the affected person with an answer in the manner requested by the affected person or according to his/her request
The right to file a motion to initiate proceedings by the person concerned
The affected person can file a motion to initiate proceedings in accordance with § 100 of the Act, if he feels that his rights have been violated. The proposal must contain: – information about the proposer – against whom the proposal is directed with the subject of the proposal, indicating the rights that should have been violated during the processing of personal data – evidence to support the claims. The sample proposal will be published on the website of the Office for Personal Data Protection, Hraničná 12, 820 02 Bratislava. The Office assesses the initiative within 30 days, makes a decision within 90 days, or may extend the deadline accordingly.
10 DO YOU HAVE QUESTIONS?
In case of any questions or comments regarding the processing of personal data, you can contact us
Operator strane.venezia.sk
Kamil Podhorský
registered in the commercial register of the Martin Regional Office under reg. no. 506-10685
with place of business 03802 Dolný Kalník 61
Offices: Martin, Tolstého 35
ID: 35392584
Contact information: e-mail/tel. number: strane@venezia.sk / 043 4221100
11 FINAL PROVISIONS
This information becomes valid and effective on November 1, 2018. The operator reserves the right to change these conditions in the event of a change in the company’s processing of personal data and in the event of a legislative change.