Information on the protection and processing of personal data GDPR - Termálne Kúpele Trenčianske Teplice

The company Kúpele Trenčianske Teplice, as (hereinafter referred to as Kúpele Trenčianske Teplice) TG Masaryka 21, Trenčianske Teplice 914 51, IČO: 34129316, processing personal data of the data subjects as the controller (hereinafter referred to as “Kúpele Trenčianske Teplice” or “controller”), in accordance with the principles of personal data processing and pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, (hereinafter referred to as the “General Data Protection Regulation” ), provides the following information on the processing of personal data of the data subjects.

Kúpele Trenčianske Teplice, as processes personal data legally, transparently and fairly to the relevant and appropriate extent necessary, in particular, to achieve the following processing purposes:

provision of health (spa) care,
provision of accommodation services,
monitoring of publicly accessible areas with a camera system,
business and marketing communication,
customer and supplier contractual relationships,
provision of e-shop services.

Within the framework of its processing activities, the Trenčianske Teplice Spa processes the personal data of the data subjects also through verified intermediaries , who process the personal data of the data subjects on behalf of the operator and under its responsibility within the scope of the concluded contractual relationships.

Processing of personal data in the context of providing healthcare:

As part of the provision of health (spa) care, the Trenčianske Teplice Spa processes the usual personal data of the data subject (in particular: identification data, contact data, health insurance data) as well as personal data that are from a special category of personal data, namely health data (in particular: diagnosis, medical history, data obtained in connection with the provision of health care) and in rare cases also genetic data to the extent necessary to provide adequate health care. The provision of personal data is a legal requirement, i.e. the data subject is obliged to provide the data to the Trenčianske Teplice Spa. If the person does not provide personal data, it will not be possible to provide adequate health care.

Personal data is processed, based on specific legal regulations (in particular Act No. 576/2004 Coll. on healthcare, services related to the provision of healthcare), primarily for the purposes of:

processing proposals for spa care that are sent by health insurance companies,
providing healthcare in accordance with the proposal for spa care,
providing healthcare for self-payers to the agreed extent,
reports to the National Health Information Center,
resolving complaints and suggestions from affected persons related to the healthcare provided.

Personal data is processed based on the legitimate interests of the Trenčianske Teplice Spa, a third party or the data subject, primarily for the purposes of:

reporting premature termination of spa treatment to health insurance companies,
storage of created medical documentation during the storage period of 5 years specified by a special law. If the person concerned is provided with health care at the Trenčianske Teplice Spa, the medical documentation that is stored within the statutory storage period (especially medical records) is also taken into account.

Personal data is provided from the systems of the Trenčianske Teplice Spa in connection with the provision of healthcare, mainly to the following third parties:

The National Health Information Center on the basis of a special law,
to the relevant health insurance companies based on their legitimate interest,
The Health Care Supervision Authority in the framework of its supervision,
courts and criminal justice authorities to the extent of the required cooperation,
and other third parties to whom the Trenčianske Teplice Spa is obliged to provide data based on a specific legal regulation.

Processing of personal data within the framework of providing accommodation services:

As part of the provision of accommodation services, the Trenčianske Teplice Spa processes common personal data necessary for the identification of the data subject and the provision of related services. The provision of personal data is a contractual and legal requirement, i.e. the person is obliged to provide the data to the operator. If the person does not provide personal data, it will not be possible to provide accommodation services to him/her.

Personal data is processed, based on specific legal regulations and contractual relationships with the data subject, primarily for the purposes of:

accommodation reservations within the scope of pre-contractual relations with the data subject,
provision of accommodation and catering services within the contractually agreed scope,
resolving complaints and suggestions from data subjects related to the contractual relationship,
registration of the residence of citizens of the Slovak Republic based on Act No. 253/1998 Coll. on reporting the residence of citizens of the Slovak Republic and the register of residents of the Slovak Republic,
registration of the residence of foreigners based on Act No. 404/2011 Coll. on the residence of foreigners and on amendments and supplements to certain acts,
collection of local taxes and fees in accordance with the Municipal Regulations of the City of Trenčianske Teplice on local taxes and fees.

Personal data is processed based on the legitimate interests of the Trenčianske Teplice Spa and/or the data subject, primarily for the purposes of:

keeping the created residence records for the storage period necessary to prove compliance with the statutory obligation,
keeping records created in connection with the collection of local taxes and fees for the period of retention necessary to prove compliance with the statutory obligation,
providing a discount on accommodation services based on the request of the data subject, taking into account the use of services in the previous period to the extent of the data available during the storage period.

Personal data is provided from the systems of the Trenčianske Teplice Spa to the following third parties in connection with the provision of accommodation services:

To the Municipal Office of Trenčianske Teplice as the tax administrator in the exercise of control,
to the relevant health insurance companies to the extent of their legitimate interest in the case of a prematurely terminated spa stay based on a proposal for spa care,
The Health Care Supervision Authority within the framework of supervision in the case of a spa stay with the provision of health care,
courts and criminal justice authorities to the extent of the required cooperation,
and other third parties to whom the Trenčianske Teplice Spa is obliged to provide data based on a specific legal regulation.

Processing of personal data within the framework of monitoring publicly accessible areas with a camera system:

As part of the monitoring of publicly accessible areas by camera system, the Trenčianske Teplice Spa processes the personal data of the data subjects, which may also include a special category of personal data recorded in connection with the monitoring of the areas. The data subject is informed about the monitoring of the public area through notifications from the Trenčianske Teplice Spa. In view of the above, the data subject can generally decide whether to be recorded by the camera system or not (except for cameras recording publicly accessible areas within buildings).

Personal data is processed based on the legitimate interests of the Trenčianske Teplice Spa, primarily for the purposes of:

monitoring of publicly accessible areas for the purpose of security and protection of property and persons, while it is not the intention of the Trenčianske Teplice Spa to obtain a special category of personal data and monitor its own employees in the performance of their work activities. The recorded data is stored for a maximum of 15 days, unless the record is used for the purposes of criminal proceedings, or the resolution of offenses, or the legitimate interests of the Trenčianske Teplice Spa (e.g. the resolution of damage events). If the record is used for the above purposes, the storage period is extended by the period corresponding to the provision of the record to the court and/or criminal authorities.

Personal data is provided from the systems of the Trenčianske Teplice Spa to the following third parties in connection with monitoring of publicly accessible areas:

courts and authorities active in criminal proceedings, the Police Force of the Slovak Republic to the extent of the required cooperation.

Processing of personal data within the framework of commercial and marketing communication:

As part of commercial and marketing communication, the Trenčianske Teplice Spa processes regular personal data, particularly in the scope of contact details necessary for communication with the data subject. Providing personal data is voluntary, i.e. the person is not obliged to provide the data to the Trenčianske Teplice Spa. If the person does not provide personal data, it will not be possible to communicate with him for the above-mentioned purpose.

Personal data is processed based on voluntary consent and for the duration of its validity, primarily for the purposes of:

electronic commercial and marketing communication within the framework of subscribing to the newsletter. Personal data is processed for this purpose exclusively during the validity of the consent,
satisfaction surveys. Satisfaction surveys are anonymous. If the data subject, at their own discretion, decides to voluntarily provide their personal data in the questionnaire, these data are processed exclusively for the purpose of informing them about the handling of their request and for the purposes of raffling and awarding prizes. The data thus obtained are processed for a period of 6 months.

Personal data may be processed based on the legitimate interests of the Trenčianske Teplice Spa, primarily for the purposes of:

commercial and marketing communication with the data subject to whom Kúpele Trenčianske Teplice provides or has provided services or sold a product or goods.

Processing of personal data within the framework of customer and supplier contractual relationships:

Within the framework of customer and supplier contractual relationships, the Trenčianske Teplice Spa processes personal data necessary for the performance of the contract with suppliers of goods and services, or with customers. The provision of personal data is a contractual requirement, only to the extent necessary for the performance of the contract in question or a requirement that is necessary for the conclusion of the contract. If the data subject does not provide their personal data, this may result in the non-conclusion of the contractual relationship (e.g. in the case of a self-employed person) or it may have an impact on the performance of the subject of the contract (e.g. if a contact person for the contracting party who will communicate and take over the subject of performance is not specified).

Personal data is processed within the contractual relationships in question primarily for the purposes of:

establishment of pre-contractual relations,
performance of the contract,
resolving complaints and suggestions related to the contractual relationship.

Personal data is processed based on the legitimate interests of the Trenčianske Teplice Spa, primarily for the purposes of:

collection of receivables, during the period necessary to recover the receivables of the contracting parties.
retention of contractual documentation in the scope of documents and supporting documents within the accounting agenda for a period of 10 years from the termination of the contractual relationship and repayment of all obligations of the contracting parties.

Personal data is provided from the systems of the Trenčianske Teplice Spa to the following third parties within the framework of the pre-contractual and contractual relationships in question:

law firms for the purpose of providing legal services,
courts and criminal justice authorities to the extent of the required cooperation,
partners of the contracting parties to the extent necessary for the performance of the contract,
and other third parties to whom the operator is obliged to provide data based on a specific legal regulation.

Processing of personal data within the website:

Within the website www.kupele-teplice.sk, operated by Kúpele Trenčianske Teplice, personal data is processed that is necessary to create a user account for the purpose of purchasing goods and services and subscribing to receive commercial and marketing information (newsletters). Providing personal data to create a user account and subsequently purchase goods and services is a contractual requirement. If the data subject does not provide their personal data, it will not be possible to sell the goods or provide the service. Providing personal data to receive commercial and marketing information (newsletters) is voluntary.

Personal data within the framework of contractual relationships is processed primarily for the purposes of:

establishing pre-contractual relationships (especially reservations and orders),
resolving complaints and suggestions from data subjects related to the contractual relationship,
performance of a contract related to the purchase and sale of goods and services through the website. Personal data is processed within the website exclusively during the activity of the user account, through which the Trenčianske Teplice Spa provides the data subject with clear information about the purchased goods and services on the website www.kupele-teplice.sk.

Personal data is provided from the systems of the Trenčianske Teplice Spa to the following third parties within the framework of the pre-contractual and contractual relationships in question:

entities involved in the performance of the subject matter of the contract (in particular: the postal company),
and other third parties to whom the operator is obliged to provide data based on a specific legal regulation.

Rights of the data subject when processing their personal data:

The data subject has the right to:

for information about the processing of her personal data;
to obtain access to personal data processed and stored about him/her;
request the correction of your incorrect, inaccurate or incomplete personal data;
request the erasure of your personal data when it is no longer necessary or if the processing is unlawful;
object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation;
request restriction of processing of your personal data in specific cases;
receive your personal data in a machine-readable format and/or request their transfer to another controller;
withdraw consent at any time without affecting the lawfulness of processing based on consent given before its withdrawal, if the data subject has given such consent;
to request that decisions based on automated processing that concern him or her or significantly affect him or her, based on his or her personal data, be carried out by natural persons and not by automated technical means, if personal data are processed in this way by the Trenčianske Teplice Spa. The data subject has the right to express his or her opinion and to object to the decision of the Trenčianske Teplice Spa;
to lodge a complaint with a supervisory authority, in particular in the Member State of his/her habitual residence, place of work or place of the alleged infringement and the right to an effective judicial remedy if he/she considers that the processing of his/her personal data is in breach of the law. The supervisory authority in the territory of the Slovak Republic is the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12 Bratislava;
submit a request or complaint to the Trenčianske Teplice Spa and the person responsible for it in connection with the protection and processing of their personal data. Any data subject who wishes to submit a request or complaint and exercise their rights may do so:
– in writing to the address: Kúpele Trenčianske Teplice, as, TG Masaryka 21, 914 51 Trenčianske Teplice
– electronically at the address: [email protected] .