Vila Pri Váhu

Privacy Policy

Information on the processing of personal data

1. Identity and contact details of the operator

Dagmar Pepuchová ,  Liptovská Teplá 51, 034 83 Liptovská Teplá
IČO:  40397301  DIČ:  1048073642  IČ DPH: SK1048073642
company registered in the Trade Register in Ružomberok number: 508-6712 
e-mail:  info@vilaprivahu.sk
tel .: +421 905 131 282
web:  www.vilaprivahu.sk

2. Purpose of personal data processing and legal basis

• The purpose of processing your personal data is to order / book an appointment online in order to undergo the treatment you have chosen.
• The purpose of processing is also marketing purposes (marketing addressing – direct marketing) t. j. providing comprehensive information about our products and services, sending news by electronic means – newsletter.

The legal basis for processing for those purposes is the consent of the data subject. 

3. Recipients or categories of recipients of personal data

• Dagmar Pepuvhová  with registered office in  Liptovská Teplá 51, 034 83 Liptovská Teplá

4. Retention period of personal data

The period of retention of personal data is eight (8) years from the date of granting the consent (if the obligation to retain your personal data for a longer period does not follow from generally binding legal regulations) or until the revocation of the consent.

5. Information on the rights of the persons concerned

The data subject (the person whose personal data are being processed) has the right to:

• for access to data pursuant to Art. 15 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016  on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) ( “ Regulation “), in particular ( i ) the right to confirm whether personal data concerning him are being processed and, if so, the right of access to such personal data, and ( ii)) information on the purpose of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data were or will be provided, in particular recipients in third countries or international organizations, if possible, the intended retention period or if this is not possible, the criteria for determining it, the existence of the right to request the controller to correct or delete or restrict processing of personal data concerning the data subject, or the right to object to such processing, the right to complain to the supervisory authority if personal data have not been obtained from the person concerned, any available information as to its source, the existence of automated decision-making, including the profiling referred to in Article 22 (2).1 and 4 of the Regulation and in these cases at least meaningful information on the procedure used as well as the meaning and foreseeable consequences of such processing for the person concerned, ((iii ) the right to be informed of the adequate safeguards under Article 46 of the Transfer Regulation if personal data are transferred to a third country or international organization; ( iv ) the right to a free copy of personal data being processed (for any other copies concerned); if the person concerned has made the request by electronic means, the information shall be provided in commonly used electronic form, unless the person concerned has requested otherwise) – the right to obtain such a copy must not adversely affect rights and freedoms others.
• for the correction of personal data  pursuant to Art. 16 of the Regulation, without undue delay, and the right to supplement incomplete personal data according to cit. Article of the Regulation, including by providing a supplementary declaration.  
• to delete personal data  (right to forget) according to Art. 17 of the Regulation, without undue delay, and provided that ( i ) personal data are no longer necessary for the purposes for which they were obtained or otherwise processed, ( ii ) the data subject withdraws the consent under which the processing is carried out, in accordance with Article 6 (1) 1 letter (a) or Article 9 (1) 2 letter (a) of the Regulation and, unless there is another legal basis for processing, ( iii ) the data subject objects to the processing under Article 21 (1). 1 of the Regulation and no legitimate grounds for processing prevail or the data subject objects to the processing under Article 21 (1). 2 of the Regulation, ( iv ) personal data were processed illegally, ( v) Personal data must be deleted in order to meet the legal obligation under Union law or the law of the Member State to which the operator is subject, ( vi ) personal data were obtained in connection with information society services under Article 8. 1 Regulations; this shall not apply if the processing of personal data is necessary for the reasons set out in Article 17 (2). 3 Regulations.
• to restrict the processing of personal data  pursuant to Article 18 of the Regulation if ( i ) the data subject challenges the accuracy of the personal data during a period allowing the controller to verify the accuracy of the personal data, ( ii ) the processing is unlawful and the data subject objects to the erasure of personal data; restrictions on their use, ( iii ) the controller no longer needs personal data for processing purposes, but the data subject needs them to prove, assert or defend legal claims, ( iv ) the data subject has objected to the processing under Article 21 (1). 1 of the Regulation, until it is verified that the legitimate reasons on the part of the operator outweigh the legitimate reasons of the person concerned.
• for the portability of personal data  pursuant to Article 20 of the Regulation – the data subject has the right to obtain personal data concerning him which he has provided to the controller in a structured, commonly used and machine readable format and has the right to transfer such data to another controller without his controller, to whom such personal data have been provided, ( i ) if the processing is based on consent pursuant to Article 6 (1). 1 letter (a) or Article 9 (1) 2 letter a) Regulations, or on a contract pursuant to Article 6 para. 1 letter b) Regulations, and ( ii ) if the processing is performed by automated means.
• object to the processing of personal data  pursuant to Article 21 of the Regulation – The data subject has the right to object at any time, on grounds relating to his or her specific situation, to the processing of personal data concerning him or her carried out pursuant to Article 6 (1). 1 letter (e) or (f) Regulations, including objections to profiling based on those provisions. The controller may not further process personal data unless it demonstrates the necessary legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the reasons for proving, asserting or defending legal claims.

Where personal data are processed for the purposes of direct marketing, the data subject shall have the right at any time to object to the processing of personal data concerning him or her for the purposes of such marketing, including profiling to the extent that they relate to such direct marketing.

• withdraw its consent at any time if the processing is based on Art. 6 par. 1 letter a) or Art. 9 par. 2 letter (a) Regulations; the withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.
• to submit a complaint to the supervisory body , which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, https://dataprotection.gov.sk/uoou/sk