Information on personal data processing

We disclose the following information in relation to personal data processing and in accordance with Article 13 of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Who we are?

This website is operated by H70, s.r.o., with its registered office: Cesta na Kamzík 14, 831 01 Bratislava, Company ID: 47 979 135 registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert No. 101543/B.

WHAT PERSONAL DATA DO WE PROCESS?

We minimize the processing of personal data to the extent sufficient for the provision of the quality services you expect. At the same time we have to comply with all the legal obligations and protect your rightful interests.

If you visit our website, are a fan of our social network site or have communicated with us through our contact form or online app, we process your personal data.

We process your contact data (name and surname, address, telephone number and e-mail address), information about your reservations or the personal information you fill in the electronic communication.

We process technical data and logs (e.g. IP addresses, cookies, analytical codes, etc.) for statistical purposes, but only anonymously without the possibility of identifying you.

PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

Purpose of processing

Legal basis

Scope of personal data

Table reservations for restaurant customers

GDPR Regulation Article 6 Letter b) – contract performance or pre-contractual measures

Contact information to the extent of name and surname, address, telephone number and e-mail address

Sending newsletters to restaurant customers.

GDPR Regulation Article 6 Letter f) – legitimate interests of the controller

Contact information to the extent of name and surname and e-mail address

Publishing photographs from organized events

GDPR Regulation Article 6 Letter f) – legitimate interests of the controller

Photographs of the data subject taken during an event organized in the restaurant

Social network marketing

GDPR Regulation Article 6 Letter a) consent of the data subject

Contact details to the extent of name and surname, e-mail address and social network profile name

Consumer competition

GDPR Regulation Article 6 Letter a) consent of the data subject

Contact details to the extent of name, surname and e-mail

Website – contact form/Chat application for online communication

GDPR Regulation Article 6 Letter f) – legitimate interest

Contact details to the extent of name, surname, e-mail address and data stated in electronic communication

Customer review published through internet applications and reservation systems

GDPR Regulation Article 6 Letter f) – legitimate interests of the controller

Contact details to the extent of name, surname, e-mail address and data stated in the review

Accounting and tax records

GDPR Regulation Article 6 Letter c) legal obligation, e.g. Act 431/2002 on Accounting

Customer contact details stated on the document, name and surname, address, telephone number and e-mail address

Claim records

Claim records GDPR Regulation Article 6 Letter c) legal obligation, e.g. Act 250/2007 Coll. on Consumer Protection

Contact details to the extent of name and surname, address, telephone number and e-mail address

Monitoring of publicly accessible areas by camera system

GDPR Regulation Article 6 Letter f) – legitimate interests of the controller

Video record of the person physically present in the monitored area

We do not use automatized decision making when processing your personal data. We profile only to a limited extent only within the scope of online marketing, for adjusting the content of advertisement, and this does not have any legal effects.

CATEGORIES OF RECIPIENTS

We process your personal data in accordance with personal data protection principles. Unless ordered by law, we do not provide them to any unauthorized persons. However, your personal data may also be processed by our contractual partners, who are:

• The accounting agency, who does our bookkeeping, or tax advisor and auditor.
• The company that operates our websites and online marketing.
• Companies that provide IT administration services, data storage and hosting services, ensuring the processing of online reservations, ensuring online communication, operating fan sites, publishing customer reviews, etc.
In legitimate cases we can provide your data to:
• Law and legal firms
• Experts and judicial experts
• Collection companies and executors
• Courts and law enforcement bodies
• Other public administration bodies, if it arises from a special regulation

If we transfer your data to providers of cloud services or online applications, it is only in accordance with principles defined within the framework contract between USA and the EU, the so-called Privacy Shield.

PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED

• With consent of the data subject we will process your data until consent is withdrawn, no longer than 24 months after it is given.
• In the event of legitimate interest, we will keep processing your personal data, if you do not object to the processing, for a period justifiable in regards to the product purchased or service used, in order to provide you with related products and services.
• For contract performance, we will process your personal data for the period of the contract’s duration, including warranty and warranty conditions.
• To comply with legal obligations, we will process your personal data for the period stipulated by relevant legislation and regulations.

YOUR RIGHTS AS A DATA SUBJECT

When processing your personal data we are ready to exercise your rights.
• You have the right to access your personal data, as well as the right to know the purpose of processing, the recipients of your personal data and the duration of the processing.
• You have the right to rectification. If your personal data is incorrect or has changed, please let us know, we will correct it.
• You have the right to have your personal information erased, if it is incorrect or processed illegally.
• If your personal data is processed on the basis of consent, you have the right to withdraw your consent at any time, without regards to the lawfulness of the processing on the basis of consent given before withdrawal.
• You have the right to restrict the processing. If you wish, we will process your data only to comply with the necessary legal obligations or not at all.
• You have the right to object to automated individual decision making, if you find or believe that such processing is illegal or in breach of your rights.
• You have the right to data portability. If you wish to transfer your data to another controller, we will provide you the data in a relevant format, as long as there are no technical or legal obstacles.

You also have the right to file a complaint with a supervisory body, which is the Office of Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Company ID: 36 064 220, phone No.: +421 2 3231 3220, https://dataprotection.gov.sk/uoou/en.

WHEN AND HOW TO YOU CLAIM YOUR RIGHTS

You can claim your rights by telephone, in writing or by e-mail at:
H70, s.r.o.
Cesta na Kamzík 14
831 01 Bratislava
Phone: +421 910 924 997
E-mail: veza@veza.sk

The request to exercise the rights of the data subject does not have a prescribed form. It is sufficient to state your request, add the information that supports your request, and attach your contact details.
We will respond to your request free of charge within 30 days. If the request is complicated or we have many requests, we are entitled to prolong the period by additional 60 days. We will inform you if such a case arises as well as the reasons underlying it.
If your request is clearly unjustified or repeated, we are entitled to charge an appropriate administrative fee to cover the cost connected with the provision of this service.