We disclose the following information in relation to personal data processing and in accordance with Article 13 of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Who we are?
This website is operated by H70, s.r.o., with its registered office: Cesta na Kamzík 14, 831 01 Bratislava, Company ID: 47 979 135 registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert No. 101543/B.
WHAT PERSONAL DATA DO WE PROCESS?
We minimize the processing of personal data to the extent sufficient for the provision of the quality services you expect. At the same time we have to comply with all the legal obligations and protect your rightful interests.
If you visit our website, are a fan of our social network site or have communicated with us through our contact form or online app, we process your personal data.
We process your contact data (name and surname, address, telephone number and e-mail address), information about your reservations or the personal information you fill in the electronic communication.
We process technical data and logs (e.g. IP addresses, cookies, analytical codes, etc.) for statistical purposes, but only anonymously without the possibility of identifying you.
PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Purpose of processing
Legal basis
Scope of personal data
Table reservations for restaurant customers
GDPR Regulation Article 6 Letter b) – contract performance or pre-contractual measures
Contact information to the extent of name and surname, address, telephone number and e-mail address
Sending newsletters to restaurant customers.
GDPR Regulation Article 6 Letter f) – legitimate interests of the controller
Contact information to the extent of name and surname and e-mail address
Publishing photographs from organized events
GDPR Regulation Article 6 Letter f) – legitimate interests of the controller
Photographs of the data subject taken during an event organized in the restaurant
Social network marketing
GDPR Regulation Article 6 Letter a) consent of the data subject
Contact details to the extent of name and surname, e-mail address and social network profile name
Consumer competition
GDPR Regulation Article 6 Letter a) consent of the data subject
Contact details to the extent of name, surname and e-mail
Website – contact form/Chat application for online communication
GDPR Regulation Article 6 Letter f) – legitimate interest
Contact details to the extent of name, surname, e-mail address and data stated in electronic communication
Customer review published through internet applications and reservation systems
GDPR Regulation Article 6 Letter f) – legitimate interests of the controller
Contact details to the extent of name, surname, e-mail address and data stated in the review
Accounting and tax records
GDPR Regulation Article 6 Letter c) legal obligation, e.g. Act 431/2002 on Accounting
Customer contact details stated on the document, name and surname, address, telephone number and e-mail address
Claim records
Claim records GDPR Regulation Article 6 Letter c) legal obligation, e.g. Act 250/2007 Coll. on Consumer Protection
Contact details to the extent of name and surname, address, telephone number and e-mail address
Monitoring of publicly accessible areas by camera system
GDPR Regulation Article 6 Letter f) – legitimate interests of the controller
Video record of the person physically present in the monitored area
We do not use automatized decision making when processing your personal data. We profile only to a limited extent only within the scope of online marketing, for adjusting the content of advertisement, and this does not have any legal effects.
CATEGORIES OF RECIPIENTS
We process your personal data in accordance with personal data protection principles. Unless ordered by law, we do not provide them to any unauthorized persons. However, your personal data may also be processed by our contractual partners, who are:
• The accounting agency, who does our bookkeeping, or tax advisor and auditor.
• The company that operates our websites and online marketing.
• Companies that provide IT administration services, data storage and hosting services, ensuring the processing of online reservations, ensuring online communication, operating fan sites, publishing customer reviews, etc.
In legitimate cases we can provide your data to:
• Law and legal firms
• Experts and judicial experts
• Collection companies and executors
• Courts and law enforcement bodies
• Other public administration bodies, if it arises from a special regulation
If we transfer your data to providers of cloud services or online applications, it is only in accordance with principles defined within the framework contract between USA and the EU, the so-called Privacy Shield.
PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED
• With consent of the data subject we will process your data until consent is withdrawn, no longer than 24 months after it is given.
• In the event of legitimate interest, we will keep processing your personal data, if you do not object to the processing, for a period justifiable in regards to the product purchased or service used, in order to provide you with related products and services.
• For contract performance, we will process your personal data for the period of the contract’s duration, including warranty and warranty conditions.
• To comply with legal obligations, we will process your personal data for the period stipulated by relevant legislation and regulations.
YOUR RIGHTS AS A DATA SUBJECT
When processing your personal data we are ready to exercise your rights.
• You have the right to access your personal data, as well as the right to know the purpose of processing, the recipients of your personal data and the duration of the processing.
• You have the right to rectification. If your personal data is incorrect or has changed, please let us know, we will correct it.
• You have the right to have your personal information erased, if it is incorrect or processed illegally.
• If your personal data is processed on the basis of consent, you have the right to withdraw your consent at any time, without regards to the lawfulness of the processing on the basis of consent given before withdrawal.
• You have the right to restrict the processing. If you wish, we will process your data only to comply with the necessary legal obligations or not at all.
• You have the right to object to automated individual decision making, if you find or believe that such processing is illegal or in breach of your rights.
• You have the right to data portability. If you wish to transfer your data to another controller, we will provide you the data in a relevant format, as long as there are no technical or legal obstacles.
You also have the right to file a complaint with a supervisory body, which is the Office of Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Company ID: 36 064 220, phone No.: +421 2 3231 3220, https://dataprotection.gov.sk/uoou/en.
WHEN AND HOW TO YOU CLAIM YOUR RIGHTS
You can claim your rights by telephone, in writing or by e-mail at:
H70, s.r.o.
Cesta na Kamzík 14
831 01 Bratislava
Phone: +421 910 924 997
E-mail: veza@veza.sk
The request to exercise the rights of the data subject does not have a prescribed form. It is sufficient to state your request, add the information that supports your request, and attach your contact details.
We will respond to your request free of charge within 30 days. If the request is complicated or we have many requests, we are entitled to prolong the period by additional 60 days. We will inform you if such a case arises as well as the reasons underlying it.
If your request is clearly unjustified or repeated, we are entitled to charge an appropriate administrative fee to cover the cost connected with the provision of this service.