GDPR Protection of Personal Data

Website Terms of Use

1. VRBOVTHERM, s.r.o., Slavkovská 2408, 060 01 Kežmarok – operator of Hotel GALICA, registered in the Commercial Register of the District Court Prešov, Section Sro, Insert No. 36499/P, Company ID: 36186481, VAT ID: SK 2021412217 (hereinafter referred to as the “Controller”) guarantees the protection and security of published personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), and Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended.

2. When accessing the website hotelgalica.sk, cookies (small files that track user activity) may be stored on the user’s electronic device. The conditions for storing and processing cookies are as follows:

– The user can always consent to or reject the storage of cookies through browser settings – by enabling or disabling cookie storage.

– If consent is given (cookies are enabled), the following may be stored on the user's device:

2.1 Temporary cookies that are automatically deleted when the user's browser is closed.

2.2 Persistent cookies that remain stored in the user's browser even after shutting down the device used to access hotelgalica.sk (these can be deleted manually or expire automatically after several weeks or months).

2.3 By giving consent, the user also allows the Controller to use cookies for internal record-keeping, statistical purposes, and targeted advertising in cooperation with partners who have agreements for ad display. Consent remains valid as long as the browser settings are unchanged. By changing browser settings or disabling cookies, the consent is revoked.

2.4 The Controller is not responsible for cookie storage on third-party websites or the use of cookies by third parties on the user's device.

2.5 If the user does not consent to cookies (by disabling them in the browser), the Controller cannot guarantee the full functionality of the hotelgalica.sk website, particularly login to the members’ section.

3. Website Security – The hotelgalica.sk website uses SSL encrypted connections for all user interactions and data transmission, preventing third-party access or modification of data during internet transfer. The Controller’s databases containing personal data are encrypted and protected with restricted access in accordance with the latest technical standards.

4. Contact Information – When visiting or using the website hotelgalica.sk, users may contact the Controller and voluntarily provide personal data for the purpose of being contacted back.

4.1 Providing personal data is voluntary. The legal basis for processing is the legitimate interest of the Controller to respond and provide assistance.

4.2 The personal data that the user may provide includes:

1. Full name (required)
2. Email address (required)
3. Telephone number (required)

4.3 Purpose – The purpose of data processing is to respond to user inquiries.

4.4 Duration – Personal data will be processed only for the time necessary during the communication with the user.

4.5 Accuracy – By voluntarily providing personal data, the user confirms that the information is correct, truthful, and up-to-date.

5. Newsletter – When visiting or using the website hotelgalica.sk, users may voluntarily register to receive newsletters. This requires providing an email address from which identity can be inferred or submitting a contact form related to website content.

Providing personal data is voluntary. The legal basis for processing such data is the user’s consent for data processing and receipt of marketing messages. This consent is the only legal basis for processing the email address.

5.1 The user must give explicit consent for the Controller to store and process the provided data to achieve the stated purpose.

5.2 Consent Duration – Consent becomes valid upon voluntary selection (e.g., checking a box in an online or offline form) and remains valid until withdrawn by the user. The Controller may process the data during the consent period.

5.3 Purpose – The purpose is to allow the user to receive the requested newsletter (informational bulletin) via the provided contact details, mainly by email.

5.4 Accuracy – By providing their data voluntarily, the user declares the information is correct, truthful, and up-to-date. Otherwise, they are liable for any damages caused to the Controller by inaccurate data. The user is responsible for informing the Controller of any changes to their data.

5.5 Data Transfer and Automated Decision-Making – Personal data will not be disclosed to third parties, transferred outside the EU, or used for automated decision-making concerning the user.

6. Data Subject Rights – Users have rights under Articles 12–22 of the GDPR, including the right to request in writing or by email (email: recepcia@hotelgalica.sk):

1. Confirmation of whether their data is processed, access to their data, and the right to request correction.
2. Restriction of processing, especially if the data is incorrect.
3. Erasure of their data if the purpose no longer applies or consent is withdrawn.
4. Transfer of their data to another controller in a structured, machine-readable format.

Users may also:

1. Withdraw consent for processing personal data at any time by written notice or email to recepcia@hotelgalica.sk. Withdrawal is effective upon delivery, and processing prior to withdrawal remains lawful.
2. Object to processing based on personal grounds or suspected unlawful processing if not based on consent.

Users may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic as the supervisory authority.

User rights may be limited if required by a specific regulation or if exercising them would violate the rights or freedoms of others.