Personal data protection

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "Regulation") and Act No. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain laws (hereinafter the "Act").
 

Identity and contact details of the Operator

ALACRES s.r.o., registered office: Piešťanská 86, 922 07 Veľké Kostoľany, Company ID: 48 247 413, tel.: +421 33 55 83 566, e-mail: info@alacres.sk (hereinafter the "Operator").
 

Your personal data are processed based on the following legal grounds and for the following purposes:

As a data subject, you have given consent for the processing of your personal data for one or more specific purposes in accordance with Article 6(1)(a) of the Regulation (handling requests submitted via the Operator’s website, marketing purposes).

Processing of personal data is also necessary for the performance of a contract to which you, as a data subject, are a party or in order to take steps at the request of the data subject prior to entering into a contract, in accordance with Article 6(1)(b) of the Regulation (lodging agreement).

Processing is also, in some cases, necessary for compliance with a legal obligation of the Operator under Article 6(1)(c) of the Regulation (e.g., for accounting purposes, reporting the stay of a foreigner pursuant to Act No. 404/2011 Coll. on the residence of foreigners, etc.).

Finally, personal data are processed on the basis of the legitimate interest of the Operator under Article 6(1)(f) of the Regulation (video surveillance). The legitimate interest of the Operator in this case is (i) the protection of property, life, and health of individuals and (ii) control of access to the Guesthouse for occupational health and safety purposes.
 

Retention of personal data

Personal data will be stored for the duration necessary to handle your request and all related actions. If you have given consent for the processing of data for marketing purposes, your personal data will be stored for as long as our company provides services, in accordance with its legitimate interests, unless you withdraw your consent. Storage of personal data for legal obligations is carried out for the period specified by applicable regulations. Personal data will be retained for the performance of the lodging agreement for the duration of the relevant statute of limitations according to applicable laws (Civil Code, Commercial Code), to safeguard any potential claims of either party. For video surveillance, if recordings made by monitoring devices are not used for asserting or proving claims, the Operator will destroy them within 15 calendar days of creation.
 

Categories of personal data processed via video surveillance: common personal data (image, voice).

Source of personal data in video surveillance: security cameras placed in the interior and exterior areas of the Guesthouse (except areas where privacy is reasonably expected; all monitored areas are clearly marked at entry).

Recipients of personal data may include:

• Advertising agencies

• Marketing agencies

• Consulting companies

• Police authorities, to the extent necessary for clarifying an offense or criminal act

• Courts, bailiffs, law enforcement authorities

• Relevant authorities for residence reporting

• Tax authorities

The Operator does not intend to transfer personal data to a third country or international organization.
 

Provision of personal data

Providing personal data is a contractual requirement of the Operator. The data subject is not obliged to provide personal data. However, failure to provide personal data will make it impossible to send a message via the website interface and, consequently, impossible for the Operator to respond to your inquiry. Failure to consent to processing for marketing purposes prevents the sending of current offers from our company. Failure to provide personal data for the performance of the lodging agreement or to comply with a legal obligation of the Operator makes it impossible to provide the Operator’s accommodation services.
 

Rights of the data subject

You have the right to withdraw your consent at any time in writing or by e-mail to the address of the Operator indicated above. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.

You also have the following rights in relation to the processing of personal data, in accordance with the Regulation and the Act:

• Right to rectification: You have the right to have the Operator correct inaccurate personal data concerning you without undue delay. You also have the right to complete incomplete personal data.

• Right of access: You have the right to obtain confirmation from the Operator as to whether personal data concerning you are being processed. If so, you have the right to access these data and obtain information on:

  • the purpose of processing,

  • the categories of personal data processed,

  • the identification of recipients or categories of recipients, including recipients in third countries or international organizations, if applicable,

  • the retention period or the criteria used to determine it,

  • the right to request correction, deletion, or restriction of processing, or to object to processing,

  • the right to lodge a complaint under Section 100,

  • the source of personal data if not obtained directly from the data subject,

  • the existence of automated decision-making including profiling, and information about the logic, significance, and expected consequences of such processing for the data subject.

• Right to erasure ("right to be forgotten"): You have the right to have the Operator erase personal data without undue delay if:

  • the data are no longer necessary for the purpose they were collected or otherwise processed,

  • consent is withdrawn and no other legal basis for processing exists,

  • you object to processing and no overriding legitimate grounds exist,

  • data are processed unlawfully,

  • erasure is required to comply with a legal obligation, or

  • data were collected in connection with information society services offered to a child.

• Right to restriction of processing: You have the right to request restriction of processing in certain circumstances, including if the accuracy of data is contested, processing is unlawful and you oppose erasure, data are no longer needed but required for a legal claim, or if you object to processing pending verification of legitimate grounds.

• Notification obligation: The Operator must inform recipients about any rectification, erasure, or restriction of processing unless this proves impossible or requires disproportionate effort. The Operator will inform the data subject of such recipients upon request.

• Right to data portability: You have the right to receive personal data provided to the Operator in a structured, commonly used, and machine-readable format, and to transmit those data to another controller where technically feasible, if processing is based on consent or contract and conducted by automated means.

• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes, including profiling. The Operator must cease processing unless it demonstrates compelling legitimate grounds overriding your rights or for legal claims.

• Automated decision-making, including profiling: You have the right not to be subject to decisions based solely on automated processing, including profiling, with legal or significant effects, unless necessary for entering or performing a contract, based on law, or explicit consent.

• Right to lodge a complaint: You have the right to submit a complaint to the Office for Personal Data Protection under Section 99 et seq. of the Act if you suspect violations of your rights.
   

Cookies

This website uses cookies to improve services. By browsing the website, you consent to their use. Cookies may occasionally contain personal data. You can control or delete cookies through your browser; however, disabling them may limit the functionality of the website.

What are cookies?
A cookie is a small text file that a website stores on your computer or mobile device during browsing. It allows the website to retain information about your actions and preferences (such as language, currency, country, identification of an unregistered user to keep a shopping cart, etc.), so you do not need to provide it again on subsequent visits or when navigating between pages.

​

How we use cookies:
These cookies are used to remember user settings and for the necessary functionality of the website.
 

Managing cookies:
You can control or delete cookies at your discretion—details are available at www.aboutcookies.org. You can delete all cookies stored on your computer, and most browsers can be configured to prevent cookies from being stored. However, in such cases, you will likely need to manually adjust settings on each visit, and some services and features may not function.

​

Social media plugins:

The website may also include third-party social plugins that allow visitors to share content with friends and contacts. If this happens, or will happen, we ensure that such information is included in the privacy statement on our website. This mainly applies to the Facebook plugin, managed by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA.
 

Please note that these social plugins are not managed by our company, and we are therefore not responsible for any processing of personal data by the above-mentioned operators (controllers) of these plugins or websites to which they link, nor for their functionality or any potential damage that may occur.