PDP – IS Cookies VoxTravel

Personal Data Processing Information

For the information system: IS Cookies

Information on personal data processing concerning data subjects in accordance with Section 19 and Section 20 of Act No. 18/2018 on personal data protection and on amendment and supplementation to certain acts (hereinafter only the “Act”) and Art. 13 and 14 of Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter only the “Regulation”)

The aim of this information is to inform you on what personal data we process, how we handle them, for what purpose we use them, to whom we may disclose them, where you can receive information on your personal data and exercise you rights with regard to processing of your personal data.

Identification and contact data:

The controller of your personal data is VOX Travel. s r. o., Hattalova 12/A, 831 03 Bratislava, IČO 52319202

 

1. The purpose and lawful basis on which personal data is processed

The purpose of the personal data processing is: to provide and enhance services, develop new services, protect users and ensure effective search and advertisement

Personal data are processed based on: volunteer consent of the data subject in accordance with Section 13(1)(a) of the Act and Article 6(1)(a) of the Regulation, Directive 2002/58/EC of the European Parliament and of the Council

Legitimate interests of the controller or of a third party

Processing of personal data for the purpose of legitimate interests of the controller or of a third party is not performed.

2. Identification of personal data processing concerning data subjects

The data subjects whose personal data are processed are: the controller’s website users

The scope of the personal data processed: academic title, name, surname, nick name, e-mail, telephone number, IP address and path (website) the client is redirected from, GPS location, photograph.

3. Identification of recipients, categories of recipients

The operator can provide personal data to authorised subjects such as institutions and organisations that are authorised to process personal data according to a special regulation or by the contracting partner (mainly a data processor), that have contractually undertaken to adopt adequate guarantees to provide protection of the personal data being processed as follows:

 

Other authorised subject	Act of general application pursuant to Section 13(1)(c) of Act No. 18/2018 on personal data protection and on amendment and supplementation to certain facts
Contracting partner (based on a contract)	Section 34 of Act No. 18/2018 on personal data protection and on amendment and supplementation to certain facts

With the data subject’s consent or based on his/her order, personal data may be disclosed to other recipients.

4. Transfer of personal data to a third country / international organisation

Transfer of personal data to third countries or international organisations is not performed.

5. Identification of the source from which personal data were obtained

Directly from the data subject (via the controller’s website)

6. Personal data retention period

The controller processes personal data for a period of time as may be necessary to achieve the purpose; however no longer than 2 years.

7. Profiling

The Controller does not process personal data by profiling or by any similar method based on automated decision-making. 

8. Rights of data subjects

The data subjects have the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject and to object to processing as well as the right to data portability and to ineffectiveness of automated decision-making including profiling as well as the right to bring an action before the supervisory authority. Where the controller processes personal data based on the data subject’s consent, the data subject has the right to withdraw his/her consent to processing of personal data at any time. The consent withdrawal has no effect on the lawfulness of the personal data processing based on the consent prior to the withdrawal. The data subject may exercise his/her rights by sending an e-mail to the following address: gdpr@voxtravel.com or in writing, to the controller’s address.

9. Obligation to provide personal data

The data subject provides his/her personal data voluntary, based on consent (the provision is not a legitimate/contracting requirement); in case of non-provision, the controller will not monitor and evaluate the website user’s behaviour to ensure the provision, enhancement and development of new services, user protection and effective search and advertisement.