Chamois ApartmentsGDPR

01. Basic Information

The controller of personal data is:

TANAWA, s.r.o.
Starý Smokovec 18097
062 01 High Tatras
Company ID: 36 450 961

Phone: +421 907 751 051
Email: info@chamoisapartments.com
Website: www.chamoisapartments.com

(hereinafter referred to asthe“Operator”).

The Operator provides lodging services through Chamois Apartments.

02. Office for Personal Data Protection of the Slovak Republic

Address:
Galvaniho Business Center II, Galvaniho 7/B

820 07, Bratislava 27

Slovak Republic

ID No.: 36 064 220

Reception:

Monday–Thursday: 8:00 a.m.–3:00 p.m.

Friday: 8:00 a.m. – 2:00 p.m.

Telephone consultations regarding personal data protection:

Tuesday and Thursday from 8:00 a.m. to 12:00 p.m. +421 2 323 132 20

Office of the Chairman +421 2 323 132 11

Office Secretariat: +421 2 323 132 14

Fax: +421 2 323 132 34

Spokesperson:

Cell: +421 910 985 794

Email: hovorca@pdp.gov.sk

Email:

- General inquiries: statny.dozor@pdp.gov.sk

- for information requests under Act No. 211/2000 Coll.: info@pdp.gov.sk

- Website: webmaster@pdp.gov.sk

- To submit requests for information under Act No. 211/2000 Coll. on Free Access to Information, please use the online form.

- Email address through which the Office will provide you with advice on personal data protection. This email address is intended for children, youth, students, teachers, and parents who suspect that their personal data has been misused: statny.dozor@pdp.gov.sk

03. Information on the Purpose of Processing and the Retention Period for Personal Data

A. Reservation and Provision of Accommodation Services

We process personal data for the purpose of:

• creating and managing reservations,
• communicating with guests before, during, and after their stay,
• facilitating check-in and check-out,
• providing lodging and related services,
• recording guest requests,
• handling changes or cancellations to reservations.

We process the following information in particular:

• first and last name,
• address,
• phone number,
• email address,
• reservation details,
• dates and length of stay,
• number of guests,
• requests related to the stay,
• information necessary to identify the guest.

B. Compliance with Legal Obligations Related to Accommodation

As an accommodation provider, the operator is required by law to maintain guest records and to comply with other obligations arising primarily from regulations governing accommodation services, the stay of foreign nationals, local taxes, accounting, and tax obligations.

For this purpose, we may process, in particular:

• first and last name,
• permanent address,
• date of birth, if its processing is required by law,
• nationality,
• ID card or travel document number,
• length of stay,
• other data required by applicable laws.

An identification document may be used to verify identity and obtain data required by law. The controller will not retain a copy of the entire identification card or travel document unless there is a specific legal reason to do so.

C. Payments, Billing, and Accounting

We process personal data for the following purposes:

• receiving and recording payments,
• issuing accounting and tax documents,
• maintaining accounting records,
• fulfilling tax and accounting obligations.

For online payments, the Global Payments / GP WebPay payment service may be used.

By default, the operator does not obtain complete payment card information if it is entered directly in the secure environment of the payment service provider.

D. Communication with Guests

If you contact us via email, phone, contact form, or another communication channel, we process the personal data necessary to handle your request.

E. Complaints, Claims, and Protection of Legal Claims

We may also process personal data for the purpose of:

• handling complaints,
• resolving property damage,
• resolving unpaid claims,
• proving legal facts,
• asserting, defending, or protecting the Controller’s legal claims.

F. Surveillance System

Certain areas of the premises may be monitored by a CCTV system.

The primary purpose of the CCTV system is:

• to protect the property of the Operator and third parties,
• to protect persons located in the monitored areas,
• to prevent and investigate security incidents,
• to document the occurrence and course of damage events.

Cameras are not installed in the accommodation units themselves or in areas where, given their nature, a high degree of privacy is expected.

Monitored areas are marked with an appropriate notice before entering the area covered by the camera.

Camera recordings are retained for 72 hours. If a recording captures a security incident, a damage event, or another relevant occurrence, the relevant portion of the recording may be retained for the time necessary to investigate it or to protect legal claims.

G. Marketing Communications and Newsletter

If a guest consents to receiving commercial and marketing information, we may use their contact information to send:

• news,
• information about stays and services,
• special offers,
• marketing communications.

Consent may be withdrawn at any time; however, the withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

If marketing is directed at existing customers based on a specific legal exception, the processing will be assessed in accordance with the relevant rules governing electronic communications.

Retention Period for Personal Data

We retain personal data only for as long as is necessary for the purpose for which it was collected.

In particular:

• data related to reservations and stays —for the duration of the contractual relationship and subsequently for the period necessary to protect legal claims,
• accounting and tax documents —for the retention period prescribed by law,
• records of guests – for the period established by applicable laws,
• data processed based on consent for marketing purposes —until consent is revoked or the purpose of processing is fulfilled,
• CCTV recordings —typically 72 hours, unless an event occurs that justifies their longer retention,
• data related to legal claims —for the duration of the applicable statute of limitations and, in the event of legal proceedings, until their final resolution.

Upon expiration of the applicable period, personal data will be deleted or anonymized, unless further retention is required by law.

04. Collection and Disclosure of Personal Data

We collect personal data:

• directly from you,
• through the reservation system on our website,
• through the Ellipse system,
• through the Booking.com and Airbnb platforms,
• or from a person who made a reservation for other guests as well.

If we obtain personal data from another person or through a booking platform, we process it only to the extent necessary to secure the reservation, the stay, and to fulfill our legal obligations.

Personal data may be disclosed or provided, to the extent necessary, primarily to:

• the Ellipse / HORECA GROUP reservation system provider,
• the payment service provider Global Payments / GP WebPay,
• providers of IT services, web hosting, and technical support,
• accounting service providers,
• entities providing maintenance and management of the camera or security system,
• Booking.com and Airbnb to the extent related to reservations made through the respective platform,
• banks and payment service providers,
• insurance companies or legal representatives in the event of a claim or legal action,
• relevant public authorities, if required by law.

Persons who process personal data on behalf of the Controller may handle personal data only in accordance with the Controller’s instructions and in compliance with appropriate security measures.

Some service providers may act as independent controllers when processing data on their own behalf.

If you make a reservation through Booking.com or Airbnb, these platforms process your personal data in accordance with their own privacy policies.

After you provide the data necessary to secure a reservation, TANAWA, s.r.o. processes this data as an independent data controller, primarily for the following purposes:

• reservation management,
• communicating with the guest,
• providing accommodation services,
• maintaining required records,
• fulfilling accounting and tax obligations.

Information regarding data processing by Booking.com or Airbnb is available directly from the respective provider.

05. Transfer of Personal Data to Third Countries

When using certain online services or booking platforms, data processing may, under certain circumstances, take place outside the European Economic Area.

If such a transfer occurs, it must be ensured in accordance with Chapter V of the GDPR, in particular based on:

• a European Commission adequacy decision,
• standard contractual clauses,
• or another mechanism permitted by the GDPR.

06. Rights of the Data Subject

Depending on the specific legal basis, you have the right to:

• request access to your personal data,
• request the correction of inaccurate or incomplete data,
• to request the erasure of your personal data if the legal conditions are met,
• request restriction of processing,
• receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and transfer it to another controller, provided the conditions for the right to data portability are met,
• withdraw consent if the processing is based on consent,
• object to the processing if the processing is based on the Controller’s legitimate interest.

If you object to processing based on a legitimate interest, the Data Controller will no longer process your personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or grounds for the asserting, exercising, or defending legal claims.

You may exercise your rights by using the Controller’s contact information provided in this notice.

07. Legal Bases for the Processing of Personal Data

The Controller processes your personal data pursuant to Article 6(1)(a) of the GDPR, or Section 13(1)(a) of the Act—the data subject has given consent to the processing of their personal data for one or more specific purposes, pursuant to Article 6(1)(b) of the GDPR, or Section 13(1)(b) of the Act—processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract, and pursuant to Article 6(1)(c) of the GDPR, or Section 13(1)(c) of the Act—the processing of personal data is necessary for compliance with the controller’s legal obligations under specific legal regulations. These specific regulations include, in particular:

• Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract or for taking steps prior to entering into a contract
• Article 6(1)(c) of the GDPR—compliance with a legal obligation to which the controller is subject
• Article 6(1)(b) of the GDPR—performance of a contract
• Article 6(1)(b) of the GDPR, if the communication relates to a reservation or contract; or Article 6(1)(
• Article 6(1)(f) of the GDPR—the Data Controller’s legitimate interest in ensuring communication and the proper handling of requests
• Article 6(1)(f) of the GDPR—the Controller’s legitimate interest in protecting its rights, property, and legal claims
• Article 6(1)(f) of the GDPR—the Data Controller’s legitimate interest
• Article 6(1)(a) of the GDPR – consent of the data subject

08. Cookie Policy

In accordance with Section 55(5) of Act No. 351/2011 Coll. of the National Council of the Slovak Republic on Electronic Communications, as amended, we would like to inform you about the use of cookies and draw your attention to the option to change your web browser settings in case the current cookie settings do not suit you.

What are cookies?
Cookies are small text files that may be sent to your web browser when you visit websites and stored on your device (computer or other device with internet access, such as a smartphone or tablet). Cookies are stored in your web browser’s file folder. They typically contain the name of the website they come from and their creation date. The next time you visit the website, your web browser reloads the cookies and sends this information back to the website that originally created them. The cookies we use do not harm your computer.

Use of Cookies
By using the websites operated by MECOM GROUP s.r.o., you consent to the use of cookies in accordance with your web browser’s settings. If you visit our website with cookies enabled in your browser, do not change your browser settings, and continue browsing our website, we consider this to be your acceptance of our cookie policy.

Why do we use cookies?
We use cookies to optimally design and continuously improve our services, tailor them to your interests and needs, enhance their structure and content, and create interesting offers for you. MECOM GROUP s.r.o. does not use data collected through cookies as contact information to reach you by mail, email, or phone.

How can you change your cookie settings?
Most web browsers are set by default to automatically accept cookies. You can change this setting by blocking cookies or by receiving a notification whenever cookies are about to be sent to your device. Instructions for changing your cookie settings can be found in the “Help” menu of each browser. If you use different devices to access the website (e.g., computer, smartphone, tablet), we recommend customizing the cookie settings in each browser on each device according to your preferences.

Why keep your cookie settings?
The use of cookies and whether to enable them in your web browser is entirely up to you. However, if you change your cookie settings, some of our web pages may have limited functionality and a reduced user experience.