Privacy Policy
The processing of personal data is an integral part of the operation of our website in accordance with the General Terms of Service (hereinafter referred to as the “GTC”). It is important for us to process the personal data of customers in a way that does not conflict with the principles and requirements of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the Protection of Personal Data. For this reason and in order to provide transparency of the processing of personal data, the website Operator has prepared this information on the protection of personal data.
In cases where the personal data of the customer as a person concerned is collected, the Operator provides the following information at the time of the collection of personal data:
- In terms of GTC, the website Operator is POHODA FESTIVAL, s.r.o.
- The purpose of the processing of personal data is the operation of the website, processing of reservations and/or orders of goods and services on the basis of the customerʼs request, as well as the marketing activities of the Operator on the basis of a legitimate interest. The legal basis for the processing of personal data is therefore Article 6 (1) (b) and (f) of the GDPR, and for its fulfilment, it is essential to obtain and process personal data in the minimum necessary and possible extent.
- We take care of the confidentiality of the personal data of our customers in the operation of our website and we do not provide their personal data to any other entity, except the shipping company that provides the delivery of goods or services, the payment service provider, and other authorities that prove a legally valid entitlement to request such information.
- We store the personal data of customers related to the delivery of goods and services for the period necessary for the fulfilment of the archiving obligations resulting from special regulations (e.g. the relevant legislation regulating accounting obligations, etc.).
- As a person concerned, the Customer has the right to receive information and access to his or her personal data, the right to correct it, the right of portability, as well as the right of cancellation, the right to object and/or limit the processing the data, and the right to contact the data protection authority at any time. It is the right of any person concerned to file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.
- Our goal is to obtain and process customersʼ personal information in the smallest possible extent. However, ensuring the delivery of goods and services without processing personal data is not possible. Providing a minimum amount of data is therefore a requirement that is necessary to conclude a contractual relationship.
- It is our legitimate interest to know how our visitors use our website and e-shop in order to improve the options and user experience of their visits and uses, as well as to have the possibility of marketing communication. With this in mind and in the minimum possible extent, we use certain third-party tools that allow us to do so. This is especially the Google Tag Manager. IP addresses and cookies help us with this. You can delete cookies in your browser settings at any time.
- If the customer, in the process of placing order in our e-shop, agrees to the processing of personal data for marketing purposes, we realise such purpose by sending e-mails (such as newsletters or offers of similar goods and services) to the contact e-mail address. The Customer can revoke their consent at any time by sending an Appeal to the Processing of Personal Data: the data shall be immediately blocked or disposed of and we will no longer use your personal data for marketing purposes.
- In order to return tickets, Pohoda Festival, s.r.o. acquires and processes the following personal information:
- name, surname
- e-mail address
- form of purchase (online / in person)
- order number
- ticket type (e-ticket / printed ticket) + number of printed ticket
- account number /IBAN format/
- delivery address (in case of a gift delivery)
When processing personal data, we follow Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (hereinafter referred to as the "Regulation"). The Regulation also governs your rights as a data subject, as well as the provisions of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts (hereinafter referred to as the "Personal Data Protection Act"), which apply to us, along with other applicable legislation.
Under the Regulation and the Personal Data Protection Act, you have the following rights related to the processing of your personal data by the Company:
Right of Access to Personal Data
-
You have the right to obtain confirmation as to whether or not your personal data are being processed.
-
To obtain information about the data controller, the purposes of processing, the categories of data, the recipients to whom personal data have been or will be disclosed, the planned retention period, the existence of the right to request rectification or erasure of personal data or restriction of processing, to object to processing, the right to lodge a complaint with a supervisory authority, and the source of the data if not obtained from you.
-
To receive a copy of the personal data.
-
In the case of repeated requests, the Company may charge a reasonable fee. Unless you specify a different technically acceptable method, the data will be provided in electronic form.
-
Right to Rectification
-
You have the right to have inaccurate personal data concerning you corrected without undue delay. Taking into account the purpose of the processing, you also have the right to have incomplete data completed.
Right to Erasure (Right to Be Forgotten)
-
You have the right to have your personal data erased without undue delay, unless the Company can demonstrate legitimate grounds for processing or if you withdraw your consent.
-
If the data are no longer necessary for the purposes for which they were collected, the Company has mechanisms in place to ensure automatic deletion.
-
Personal data that the Company is legally obliged to retain will be erased after the applicable retention periods expire.
Right to Restriction of Processing
-
Under certain circumstances, you have the right to restrict the processing of your personal data, particularly if their accuracy is contested, processing is unlawful, or the data are no longer needed by the controller but you require them for the establishment, exercise, or defense of legal claims.
-
If processing is restricted, the Company may process the data only with your consent or for legal claims, the protection of persons, or public interest.
Right to Be Informed of Rectification, Erasure, or Restriction
-
You have the right to be informed by the Company when your personal data are rectified, erased, or their processing restricted.
Right to Data Portability
-
Under certain conditions, you have the right to receive your personal data provided to the Company and to transmit those data to another controller, if technically feasible.
-
This right does not apply to processing necessary for tasks carried out in the public interest or in the exercise of official authority.
Right to Object
-
You have the right to object to the processing of your personal data. The Company must then stop processing the data unless it demonstrates compelling legitimate grounds that override your interests or rights.
-
If you object to processing for direct marketing, the Company must stop processing your data for that purpose.
Right to Withdraw Consent
-
You have the right to withdraw your consent at any time, upon which the Company must stop processing your personal data based on that consent.
Automated Individual Decision-Making, Including Profiling
-
The Company does not carry out automated individual decision-making or profiling. If such processing were to occur, you would be informed of the method, significance, and consequences, and you have the right to refuse automated decision-making that has legal or similarly significant effects. This right may not apply in all circumstances.
Right to Contact the Data Protection Authority
-
You have the right to contact the Office for Personal Data Protection with a proposal to initiate proceedings if you believe that your rights under the Regulation have been violated in connection with the processing of your personal data.
How to Exercise Your Rights
-
You can exercise the above rights against the Company by any available means, such as in writing, electronically, or by email: info@pohodafestival.sk
Company’s Obligations in Relation to Customer Rights
-
The Company cooperates in exercising your rights concerning personal data. If the Company cannot identify you, it cannot refuse your request unless it proves it is unable to identify you. The Company may request additional information to confirm your identity if there is reasonable doubt.
-
The Company is obliged to inform you of any measures taken in response to your request within one month of receipt. This period may be extended by two additional months in justified cases, and you will be informed of the extension and the reasons for it.
-
The Company provides responses and takes actions based on requests free of charge. If a request is clearly unfounded or excessive (especially if repetitive), the Company may charge a reasonable fee reflecting administrative costs or may refuse to act on the request.
For Any Questions
If you have any questions regarding the processing of personal data, you can contact our Data Protection Officer.
POHODA FESTIVAL, s. r. o., Zochova 6 – 8, 811 03 Bratislava
Data Protection Officer:
E-mail: info@pohodafestival.sk