I. Basic Provisions
The Operator of Personal Data pursuant to Art. Article 4 (7) of Regulation (EC) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“GDPR”) is Sunlight system, sro, ID No .: 44853009 Registered office: Štefanikova 15 949 01 Nitra (hereinafter referred to as “the operator”).
Contact details of the operator are:
Address: Štefanikova 15 949 01 Nitra
Phone: +421 915 372 114
Personal data are data relating to an identified natural person or identifiable natural person that can be identified directly or indirectly, in particular on the basis of a generic identifier, of another identifier, such as name, surname, identification number, location data or online identifier, or on the basis of one or more characteristics or traits which constitute its physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.
The Personal Data Provider did not impersonate the Data Protection Officer.
II. Sources and categories of processed personal data
The operator handles the personal data you have provided to him / her or the personal data that the operator has obtained from the fulfillment of your order.
The operator handles your identification and contact details and the data necessary for the performance of the contract.
III. Legal purpose and purpose of processing personal data The
legal reason for the processing of personal data is the
performance of the agreement between you and the operator under Art. Article 6 (1) (b) GDPR, the
legitimate interest of the operator in providing direct marketing (in particular for the transmission of business offers and newsletters) Article 6 (1) (f) GDPR,
processing is necessary for the performance of a contract to which the person concerned is a party or, if requested by the person concerned, to take measures prior to the conclusion of the contract.
The purpose of the processing of personal data is to
meet your requirement and to exercise the rights and obligations arising from the contractual relationship between you and the operator; When filling in the contact form, the personal information required to successfully meet the requirements (name and address, contact),
sending business offers and performing other marketing activities is required.
The operator does not have an automatic, individual decision within the meaning of Art. 22 GDPR. You have given your explicit consent to such processing.
IV. Retention period
The operator keeps personal data
for the period necessary to exercise the rights and obligations arising out of the contractual relationship between you and the Operator and the exercise of the rights under these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
until consent to the processing of personal data for marketing purposes is revoked, for a maximum of 15 years if personal data are processed under consent.
After the personal data retention period expires, the operator will delete the personal data.
V. Personal data recipients (subcontractors of the operator) The
recipients of the personal data are the persons
involved in receiving messages from the contact forms and reservations
providing the marketing services.
An operator does not intend to provide personal data to a third country (to a non-EU country) or an international organization.
Performing services providing marketing and support services
Google analytics – logs cookies and use of the
Google Adwords Web site – logs cookies and use of the
VI site . Your Rights
Under the terms of the GDPR, you have the
right to access your personal data, 15 GDPR, the
right to repair personal data under Art. 16 GDPR, or restriction of processing according to Art. 18 GDPR.
the right to delete personal data under Art. 17 GDPR.
the right to oppose the processing under Art. 21 GDPR and the
right to data portability under Art. 20 GDPR.
the right to withdraw consent to processing in writing or electronically to the address or email of the operator referred to in Art. III of these conditions. You can revoke consent at any time in your own customer account.
You have the right to file a complaint with the Personal Data Protection Office if you believe that your privacy has been violated.
VII. Terms of Personal Data Protection
The Operator declares that it has taken all appropriate technical and organizational measures to secure personal data.
The operator has taken technical measures to secure data storage and personal data storage in paper form, secure / encrypted access to the web, encryption of customer passwords in the database, regular system updates, regular backups of the system.
The operator declares that the personal data are only accessible to the authorized person.
VIII. Final Provisions
These Conditions shall enter into force on 25 May 2018.