In accordance with the new legislation on the protection of personal data (GDPR), we have developed new principles for the processing of personal data of MÚZA GROUP, s.r.o., which we present to you in detail in this document.
They are currently secured in accordance with the new requirements of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Act No.18/2018 Coll. on the protection of personal data.
Hotel Múza, Pri prachárni 5, 040 11 Košice – urban part Juh, Slovak Republic
Operator:
MÚZA GROUP, s.r.o., Pri prachárni 5, 040 11 Košice – urban part Juh, Slovak Republic
IČO: 51667509
IČ DPH: SK2120738631
Cellphone: +421 915 757 570
E-mail: muza@hotelmuza.sk
Supervisory authorities:
SOI Inspectorate for Košice Region, Vrátna 3, P. O. BOX A-35, 040 65 Košice 1, Supervision Department, ke@soi.sk, tel. no. 055/729 07 05, 055/622 76 55, fax no. 055/622 46 95
the controller obtains personal data through the website www.hotelmuza.sk
The Seller does not disclose, disclose, disclose, disclose the personal data of the Buyers to any other entities, except for the organizations with which the Seller ensures the performance of the Contract.The database of the Buyers’ personal data is protected against damage, destruction, loss and misuse.
By submitting an order, or at the moment of registration of the buyer in the e-shop, the seller processes the personal data provided by the buyer according to the Personal Data Protection Act. The information provided through the order or registration form is used for the purpose of providing the performance under the purchase contract. For the purpose of proper and timely delivery of the performance under the contract, the Seller cooperates with the transport company as the recipient of the personal data obtained by the Seller from the Buyer. Such recipient of personal data is the company
MÚZA GROUP, s.r.o., Pri prachárni 5, 040 11 Košice – urban part Juh, Slovak Republic, ID No.: 51667509, VAT No.: SK2120738631 – Commercial Register of the District Court Košice I, Section: Sro, Insert No. 49896/V. The Seller cooperates with its sales representatives, who are also recipients of personal data of the buyers. Sales representatives perform for the Seller the activity of selling the Seller’s products and services according to a special contract. At the request of a registered Buyer, the Seller shall delete his/her personal data from the database of registered users.
The personal data provided by the buyer is collected, processed and stored for the purpose of fulfilling the business relationship between the seller and the buyer, which is an expression of the free will of both parties. The controller does not disclose, transfer or otherwise provide personal data about buyers to third parties. The personal data provided by the Buyer is processed by the Seller for the purposes of:
The controller has taken appropriate technical, organisational and personnel measures corresponding to the manner in which the personal data are processed, taking into account, in particular, the technical means to be used, the confidentiality and importance of the personal data processed, as well as the extent of the possible risks which are liable to impair the security or the functionality of its information systems.
The controller undertakes to treat and handle the personal data of the data subject in accordance with the applicable Slovak and EU legislation.
By sending an order or registering in the following scope: name, surname, home address, e-mail address, telephone number and date of birth, the buyer declares that his/her personal data are accurate and true and gives his/her consent within the meaning of the OOU Act to the collection, storage and processing of personal data by the provider and their use for registration and billing purposes and other actions related to the ordered product or service, including later communication with the user (complaint, withdrawal from the contract, etc.). The buyer bears full responsibility for damages caused by the incorrectness or outdatedness of the personal data provided. the buyer provides the seller with this consent for a period of 10 years, from the date of registration or completion of the order. the buyer has the right to revoke this consent at any time.
The Buyer agrees that the Controller as a provider of personal data is entitled to provide personal data to cooperating third parties – intermediaries (in particular, sales representatives performing the activity of selling products and services on the basis of a sales representation agreement), if this is necessary to provide the products ordered by the Buyer from the Seller. Consent is granted until the time of the mandatory registration of the Buyer’s accounting data.
When processing personal data, the Seller uses/does not use automated individual decision-making, including profiling pursuant to Section 28(2) of the OPLA. The Seller processes the personal data of the Buyers for the period necessary to fulfil the purpose of the contract. After the contract has been fulfilled, the Seller no longer processes the Buyers’ personal data for the purpose of fulfilling the contract, but further stores them for the purpose of invoicing payments, recording and collecting and assigning claims for the service provided, for the purpose of handling the Buyer’s submissions, for exercising rights or for fulfilling other obligations imposed by generally binding legal regulations, for a maximum period of 10 years within the meaning of a special regulation (Act on Accounting).If the Buyer does not have the capacity to perform legal acts to the full extent, his rights may be exercised by his legal representative. If the purchaser is not alive, his rights which he had under the OOA Act may be exercised by a close person.
The buyer as a data subject has the right to request from the seller as a controller access to personal data relating to the buyer (§ 21 ZOOÚ), the right to rectification of personal data (§ 22 ZOOÚ), the right to deletion of personal data (§ 23 ZOOÚ), the right to restriction of processing of personal data (§ 24 ZOOÚ), the right to portability of personal data (§ 26 ZOOÚ), as well as the right to object to the processing of the personal data obtained (§ 27 ZOOÚ).
The Buyer as a data subject may exercise directly with the Seller as the controller all rights under the provisions of § 19 to § 28 of the OPLA in writing. If the Buyer suspects that his personal data is being processed unlawfully, he has the right to object to the processing of his personal data pursuant to § 99 et seq. ZOOÚ has the right to file a petition for initiation of proceedings for the protection of personal data with the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27.
In addition to the processing of personal data of buyers for the purposes of contract performance, the seller also processes such personal data for marketing purposes, in particular for the subscription and sending of news about the seller’s products (newsletter). Such processing of personal data is carried out by the Seller solely on the basis of the Buyer’s express prior consent. If the Buyer is no longer interested in receiving the Seller’s product newsletters after having given his consent, he may withdraw his consent given to the Seller for this purpose at any time simply by sending an email to the Seller’s email address info@multigyn.sk . Upon receipt of the revocation of consent to the processing of the data subject’s personal data, the Seller shall ensure that the data is blocked and destroyed without delay. It is added that the Seller is entitled to process the personal data of the data subject even after the termination of the original legal basis for the processing of personal data, but only to the extent necessary for the purposes of statistics, accounting and research, or to provide third parties or the public with aggregated statistical information on customers, traffic, turnover and other data, but in an anonymised form so that our customers cannot be identified in any way on the basis of the data, subject to appropriate safeguards for the protection of the rights of the data subject pursuant to Section 78(8) of the Personal Data Protection Act.
For the processing of personal data for the purpose of processing cookies, the general information on the processing of personal data set out above applies, as well as:
1. Purposes of processing personal data: for example: provision of services, personalisation of advertisements, Google Analytics traffic analysis. Cookies are small amounts of data that servers send to the browser. The latter stores them on the user’s computer. The browser then sends this data back to the server each time the user visits the site.
2. Legal basis for the processing of personal data: article 6(1)(a) GDPR – the data subject has consented to the processing of his/her personal data for one or more specific purposes
3. Retention period of personal data – The cookies used on our website can be divided into two basic types in terms of their durability. Short-term “session cookies”, which are only temporary and remain stored on your browser only until you close your browser, and long-term “persistent cookies”, which remain stored on your device for a longer period of time or until you manually delete them, with the length of time the cookie remains on your device depending on the setting of the cookie itself and your browser settings.
4. The provision of personal data is necessary to achieve the purpose.
Conditions and method of processing personal data of data subjects The controller processes personal data of data subjects in its information systems by automated and non-automated means of processing. The controller shall not disclose the personal data processed, except where required by a specific legal regulation or by a decision of a court or other public authority. The controller will not process your personal data without your explicit consent or any other lawful legal basis for any other purpose or to a greater extent than is specified in this information and in the record sheets of the individual information systems of the controller.
The operator uses an analytics tool to monitor its website, which compiles a data chain and tracks how visitors use the site on the Internet. When someone browses the site, the system generates cookies to record information related to the visit (pages visited, time spent on our site, browsing data, leaving the site, etc.), but this data must not be linked to the visitor’s person. This tool is a tool to improve the ergonomic design of the website, to create a user-friendly website and to enhance the online experience of visitors. Most internet browsers accept cookies, but visitors have the option to delete or automatically reject them. Because each browser is different, visitors can set their cookie preferences individually using the browser toolbar. If you choose not to accept cookies, you may not be able to use some features on our website.
Type of cookies, use, validity of cookies
Strictly necessary/essential
Functional
Performance cookies and targeting cookies – analytical cookies
Sharing on – using social networks
Quality display
The owner of the page according to the page setting
The operator uses the Google AdWords advertising programme, through which it is able to create online advertisements and reach people at the time when they are interested in the products and services provided by the operator. The Remarketing or Similaraudiences functions in AdWords allow us to reach people who have visited your website in the past. It allows you to display ads in search, on YouTube and in emails. Dynamic remarketing allows users to see ads for products or services they have viewed in the past. Cookies that provide remarketing codes can be disabled by visitors to the website by adjusting the appropriate settings on the browser in question. The operator can also be contacted via Facebook. The purpose of the data management is to share the content of the website operator and the presentation of the operator. Through the Facebook page, guests can learn about news, current special offers at the operator and also view photos of selected orders of the operator. By clicking “like” on the Facebook page of the operator, the subjects agree to the operator posting their news and offers on their Facebook wall. The operator also publishes photos/videos from various events on its Facebook page.
The controller shall only publish such data of natural persons if their written consent has been obtained beforehand. For more information about managing Facebook page data, please see the privacy policy and guide at www.facebook.com. For the purpose of presentation, the operator also has a profile on the social network Instagram, where it presents photos of selected orders together with a description. By clicking on “follow” you agree to the display of photographs published by the operator.
