In this document, Epic Travel s.r.o., having its seat at Sokolská 62/15, 020 61 Lednické Rovne, Slovak Republic, Company reg. number (IČO): 47 173 564 (hereinafter "Epic Travel s.r.o. ") informs about the manners in which it uses personal information received and collected from visitors (hereinafter "visitors") landing at the www.prosportshotels.com website (hereinafter "Website"). This Statement regulates the methods in which Epic Travel may collect or obtain personal information, what kinds of personal information may be gathered, how these data are used, shared and protected, what are the rights of the visitors and how visitors can contact us.

 

How can we obtain or collect your personal information:

 

Epic Travel may obtain or collect your personal information when you use the www.prosportshotels.com website in different ways, but always with your consent.

You can notify us about your personal data and other information through your e-mail address, phone or fax communication or online forms provided by Epic Travel.

Our website uses cookies that collect certain information about webpages when you open, view and use them. A cookie is a data file located in your computer or mobile device. We do not allow third parties to place cookies into your device.

You can disable cookies in your browser, but some website features may not work properly in that case. 

 

What types of personal information may be obtained and collected

 

We may obtain and collect your personal information, information related to your use of the website, your IP address, browser type and operating system you use. For the purpose of processing your requests, we may also collect your payment information, contact information, such as your name, e-mail address, mailing address, telephone number and fax number. You can also voluntarily provide additional personal information about yourself in connection with your questions or comments.

 

How we use personal information that we obtain and collect

 

We use your personal information: (a) to respond to your comments or questions; (b) to process your requests via the Internet; (c) to contact you; (d) to improve the website.

 

How can we share personal information

 

Epic Travel does not sell, rent or trade your personal information. Epic Travel may share your personal information with state authorities or other third parties, if required by law or as reasonably necessary to protect the rights, property and safety of others or ourselves.

 

How we protect personal information

 

We take relevant technical and organisational security measures to protect the personal information you provided against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.

 

How long we keep personal information

 

Unless required otherwise by the law, personal information is retained as long as necessary, until the purpose of its collection has been fulfilled.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Rights of data subjects under Act No. 122/2013 on Protection of Personal Data, as amended

 

Section 28

 

1) Data subject’s right to require access to the data

 

The data subject shall be entitled to request upon a written application from the controller:

(a) confirmation whether his personal data are or are not being processed. The controller shall satisfy such request of the data subject free of charge;

(b) information about the state of processing of his personal data in the filing system in a generally intelligible form and in the extent under Section 15 Paragraph 1 Points a) to e) Numbers 1 to 6; if a decision under Paragraph 5 is issued, the data subject shall be entitled to familiarize himself with the procedure of the processing and evaluating of operations. The controller shall satisfy such request of the data subject free of charge;

(c) exact information, in a generally intelligible form, about the source from which the controller obtained his personal data for their processing. The controller shall satisfy such request of the data subject free of charge;

(d) list of his personal data, in a generally intelligible form, which constitute the subject of the processing.

 

The controller shall be obliged to provide such information free of charge, except for a fee in the amount not exceeding the amount of material costs accrued in connection with the making of copies, providing technical carriers and sending the information to the data subject, unless otherwise stipulated by a special Act;

(e) rectification or erasure of his inaccurate, incomplete or not updated personal data, which constitute the subject of the processing. The controller shall satisfy such request of the data subject free of charge;

(f) erasure of his personal data, if the purpose of their processing was fulfilled; if any official documents containing personal data constitute the subject of the processing, he may request their returning. The controller shall satisfy such request of the data subject free of charge;

(g) erasure of his personal data which constitute the subject of processing if there was a violation in the Law. The controller shall satisfy such request of the data subject free of charge;

(h) blocking of his personal data due to the cancelation of the consent for personal data processing before its expiration if controller processes personal data based on the consent of the data subject. The controller shall satisfy such request of the data subject free of charge.

 

The right of the data subject may be restricted only under Points e) and f) of this Paragraph 1 only if such restriction results from a special Act or its application would infringe the protection of the data subject or would infringe the rights and freedoms of others. The controller shall immediately notify both the data subject and the Office in writing about such restriction.

 

2) Data subject’s right to raise objections

 

The data subject shall be entitled to object to the controller upon a free written request to the following:

(a) processing of his personal data, in respect of which he expects that they are or would be processed for the purposes of direct marketing without his consent and he shall be entitled to request for their erasure,

(b) use of the personal data referred to in Section 10 Paragraph 3 Point d) of the Act on Protection of Personal Data (these include: academic degree, name, surname and address) for the purposes of direct marketing in the mail correspondence; or

(c) provision of personal data referred to in Section 10 Paragraph 3 Point d) of the Act on Protection of Personal Data (these include: academic degree, name, surname and address) for the purposes of direct marketing.

 

3. In addition to the foregoing, the data subject can object the following to the controller at any time:

(a) processing of personal data in the cases under Section 10 Paragraph 3 Points a), e), f) or g) by stating the legitimate reasons or by submitting evidence of infringement of his rights and legitimate interests that are or can be violated by the processing of personal data in a concrete case; if it is proved that the legitimate reasons do not prevent it and the objection of the data subject is valid, the controller shall be obliged to block the personal data, the processing of which was objected by the data subject without undue delay and erase them as soon as possible;

(b) refuse to submit to the controller’s decision, which would produce legal effects on him or significantly affect him, provided that such decision is based solely on the acts of the automatic processing of his personal data. The data subject shall be entitled to request the controller for examination of the issued decision by a method other than the automatic processing, whereas the controller shall be obliged to satisfy the request of the data subject in such manner that the entitled person shall have a decisive role in the examination of the decision; the controller shall inform the data subject about the manner of examination and the outcome of his finding no later than 30 days from receipt of such request. The data subject shall be deprived of the above right only if so stipulated by a special Act in which are regulated the measures for securing the legitimate rights of the data subject or if the controller issued a decision satisfying the request of the data subject during the pre-contractual relationship or in the course of existence of contractual relationship or if the controller adopted other adequate measures to ensure data subject’s legitimate interests based on the contract.

 

If the data subject does not enjoy full legal capacity his rights may be exercised by his legal representative. If the data subject is deceased, his rights which he had pursuant to this Act may be exercised by his close person.

 

The data subject may claim his rights under the Personal Data Protection Act

(a) from the controller

• in a written form and it is clear from the content of his request that he claims his right, the application is considered as submitted pursuant to this Act; the application submitted via electronic mail or fax the data subject delivers in a written form not later than in three days from the date of its expedition, or

• in person, verbally into the record, from which it must be clear on who executes his rights, what right is he executing and who and when created the record, his signature and the signature of the data subject; the controller shall be obliged to deliver a copy of the record to the data subject;

b) from the Broker

• in a written form and it is clear from the content of his request that he claims his right, the application is considered as submitted pursuant to this Act; the application submitted via electronic mail or fax the data subject delivers in a written form not later than in three days from the date of its expedition, or

• in person, verbally into the record, from which it must be clear on who executes his rights, what right is he executing and who and when created the record, his signature and the signature of the data subject; the controller shall be obliged to deliver a copy of the record to the data subject;

 

- The Broker shall be obliged to deliver this request or record to the controller without undue delay.

 

The controller shall satisfy requests of the data subject and notify him in writing no later than 30 days of their receipt.