Personal Data Protection

Information and Consent of the Data Subject for the Processing of Personal Data

(The legal basis for personal data processing is the consent of the data subject for marketing

purposes)

Personal Data Processing

Information provided to the data subject prior to submitting personal data:

Identification and contact details of the data controller:

BAR.BAR s.r.o.

Jeruzalemská 12 • 917 01 Trnava

Company ID (IČO): 36259179 • VAT ID (DIČ): 2021794126

Registered with the Commercial Register of the District Court Trnava, Section: Sro, File No.:

44504/TT

1. Purpose of personal data processing, for which the personal data is intended, and the

legal basis for processing:

Carrying out marketing, advertising, and promotional activities, including direct

marketing, offering the operator’s products and services, sales support, conducting

surveys, polls, contests, collecting feedback on service satisfaction, sending

promotional and communication materials (including magazines, newsletters, etc.).

The legal basis for processing is the consent of the data subject.

2. Identification or category of recipients:

The recipient of the personal data is the data controller in the role of a company

primarily providing accommodation services.

3. The controller does not intend to transfer personal data to a third country or an

international organization.

4. Retention period of personal data:

For as long as the data subject consents to the processing of their personal data.

5. The data subject has the right to:

– request access to their personal data from the controller,

– rectification of personal data,

– erasure of personal data or restriction of processing,

– object to the processing of personal data,

– data portability,

– withdraw consent at any time,

– file a complaint under § 100 of Act No. 18/2018 Coll. on the Protection of Personal Data.

6. The controller does not perform automated individual decision-making, including

profiling, under § 28 (1) and (4) of Act No. 18/2018 Coll. on the Protection of Personal Data.

7. Providing personal data is not a legal or contractual requirement, nor is it

required to conclude a contract. The data subject is not obliged to provide personal

data. The consequence of not providing personal data is solely the inability to fulfill

the purpose stated in point 4 above.

8. The controller does not publish, share with third parties, or disclose the obtained

personal data to other recipients.

9. The controller is responsible for the security of personal data, protecting it from

accidental or unlawful damage and destruction, accidental loss, alteration,

unauthorized access and disclosure, and from all other impermissible forms of

processing. To this end, the controller has implemented appropriate technical,

organizational, and personnel measures according to the processing method and

makes maximum efforts to protect the data.

10. The data subject declares that they consent to the processing of personal data for the

purposes stated above in the scope of: name, surname, email address, and phone

number.

11. The data subject confirms that they have been provided with all the information

pursuant to § 19 of Act No. 18/2018 Coll. on the Protection of Personal Data.

In Trnava, on 01.09.2022