Protection of personal data

CONSENT TO THE PROCESSING OF PERSONAL DATA

Protection of personal data

Operator: GOLF TN s.r.o.

with registered office: Ľ. Štúra 373/6, 019 01 Ilava

PUBLIC DOMAIN: 54373611

Registered in the Commercial Register of the District Court Trenčín, section: Sro, insert no. 43098/R

Contact info: 0917 365 365

E-mail: info@365golf.sk

1. Introductory provisions

1.1 The protection of the personal data of our clients and other natural persons is important to us. These conditions explain how we process personal data during the provision of our services within or for the purpose of operating the golf tee 365 Golf Range Trenčín, at the address: Legionárska 3168, 911 04 Trenčín.

1.2 If you have any questions, you can contact us by phone on +421 917 365 365, by email at info@365golf.sk or by mail at our registered office address.

1.3 When processing personal data, we are primarily governed by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), which also regulates your rights as a data subject, hereinafter the provisions of the NRSR Act No. 18/2018 Coll. on the protection of personal data that applies to us, as well as other generally binding legal regulations.

2. Reasons for processing personal data

The processing of personal data is necessary for us in particular in order to be able to:

a) to provide services to our clients and conduct business activities in accordance with the object of activity of our company;

(b) to comply with legal and contractual obligations; and

c) protect the legitimate interests of us, our clients and others.

3. Method of obtaining personal data

If you are our client, business partner or employee, we most often collect your personal data directly from you. In this case, the collection of your personal data is voluntary. Depending on the specific case, failure to provide personal data may affect our ability to provide quality services or, in exceptional cases, our obligation to refuse to provide services. We may also obtain personal data about our clients, business partners and employees from publicly available sources, from public authorities or from other persons.

4. Purposes and legal bases of the processing of personal data

Purpose of processing personal data:

a) Business activity — primarily the operation of a golf tee and the related provision of personal trainer services, restaurant services, ancillary services and the performance of other activities within the scope of the business;

b) Creation and processing of a database of clients and services provided;

c) Operation of the online reservation system;

d) Operation of a database with online access to the client's own account;

e) Personnel and payroll purposes;

f) Posting photos of employees on the operator's website and social networks;

(g) Accounting and tax purposes;

h) Handling of complaints and claims for services provided;

(i) Establishment, exercise and defence of legal claims (legal agenda);

(j) Protection of property by means of a CCTV system;

k) Marketing communications;

l) Voluntary disclosure of personal data (e.g. via social networks and the operator's website);

(m) Statistical purposes

n) the use of so-called cookies on the Operator's web domains,

5. Legal basis according to GDPR

5.1 The legitimate interests pursued by us when processing personal data for the above purposes are:

(a) the operation of the golf tee (including efficient customer service, a clear record of the services provided to each other by the client and the company);

(b) fraud prevention;

(c) streamlining the ordering and booking process for golf tee services (including personal training and restaurant services);

d) control of compliance with labor discipline, operating rules and control of compliance with the terms of the contract (registration of the use of services and the execution of payments);

e) protection of the operator's property, ensuring the safety of employees and other persons, controlling entrances and exits from the premises of the operator's reception, preventing the movement of unknown persons in the premises of the operator's reception;

f) informing clients about products and services via e-mail newsletter, informing clients about operational changes, building relationships with customers;

5.2 Special information on the processing of personal data by a video recording system

a) The Operator processes personal data of natural persons through a video camera system with a record.

b) In accordance with paragraph of Art. 13 GDPR The controller hereby provides the following information in relation to the camera system:

c) Operator: GOLF TN s.r.o.

d) Contact details of the controller: Ľ. Štúra 373/6, 019 01 Ilava

e) Contact details:

Phone: 0917 365 365, email: info@365golf.sk

f) Purpose of processing: Monitoring of the reception area and adjacent premises of the 365 Golf Range Trenčín golf course in order to protect the property of the operator, ensure the safety of employees and other persons.

g) Legal basis of the processing: Legitimate interest of the controller pursuant to Art. 6 (1) (f) GDPR: protection of the controller's property, ensuring the safety of employees and other persons, control of entrances and exits from the premises of the operator's reception, prevention of movement of unknown persons in the premises of the reception of the controller.

h) Beneficiaries/category of beneficiaries: Courts, police, lawyers, law enforcement agencies.

i) Retention period of the record: 48 hours (2 days) from the moment the record was made.

j) The camera system operates in continuous mode.

k) Transfer of personal data to third countries: Not carried out.

l) Automated decision-making, including profiling: Not carried out.

5.3 Rights of the data subject:

a) The data subject has the right to access personal data, the right to their rectification, erasure, restriction of processing and the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.

b) The data subject also has the right to object to the processing of personal data concerning him or her.

5.4 In the event of such an objection, the controller may not further process the personal data unless it proves:

a) Necessary legitimate grounds for the processing of personal data which outweigh the interests, rights and freedoms of the data subject; or

b) Grounds for establishing, exercising or defending legal claims.

6. Who do we provide your personal data to?

We disclose the personal data of our clients and other natural persons only to the extent necessary and always while maintaining the confidentiality of the recipient of the data, e.g. to our employees, persons whom we commission to perform individual acts of legal services, economic services, our accounting advisors, our professional advisers (e.g. auditor, lawyer), public administration bodies and public authorities (in particular in the case of compliance with legal obligations or for the purpose of detecting the commission of offenses and crimes) and the provider of software equipment or support of our the operation of the fitness center, including the staff of such persons.

7. Transfer of personal data to third countries

7.1 The Controller does not intend to transfer the personal data of the data subject to a third country or an international organisation.

7.2 We do not use cloud services and your personal data processed by automated systems are stored on storage devices in the premises of golf tee 365 Golf Range Trenčín, and in this regard we use IT support services from YourGolfBooking.com Ltd., with registered office: Suite 3, Tower House, High Street, Aylesbury, HP20 1SQ, United Kingdom, Company nr.: 07733449.

8. Retention period of personal data

We retain personal data for at most as long as necessary for the purposes for which the personal data are processed. In general, the retention period follows from the legislation. Unless required by law, the retention period of your personal data, always in relation to specific purposes, is determined by our company through our internal policies. If we process your personal data on the basis of consent, after its withdrawal, we are obliged not to further process the personal data for that purpose. However, this does not exclude that we may further process your personal data on another legal basis, in particular if it is to comply with legal obligations.

9. Automated individual decision making

Our company does not use the collected personal data for automated decision-making (including profiling).

10. Rights of the data subject with regard to the processing of personal data

10.1 If we process personal data about you based on your consent to the processing of personal data, you have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

10.2 You also have the right to object to the processing of your personal data on the basis of legitimate or public interests pursuant to Art. 6 (1) (e) and (f) GDPR.

10.3 sets out the general conditions for the exercise of your individual rights. In particular, as a data subject, you have:

a) The right to request access to personal data pursuant to Article 15 GDPR that we process about you. This right includes the right to confirm whether we are processing personal data about you, the right to access that data and the right to obtain a copy of the personal data we process about you, where technically feasible;

b) The right to rectification and completion of personal data pursuant to Article 16 GDPR if we process incorrect or incomplete personal data about you;

c) The right to erasure of your personal data pursuant to Article 17 GDPR;

d) The right to restrict the processing of personal data pursuant to Article 18 GDPR;

(e) The right to data portability pursuant to Article 20;

f) The right to object to legitimate or public interests pursued by us under Art. 21 GDPR.

10.4 As a data subject, you also have the right to lodge a complaint at any time with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic pursuant to section 100 of the NRSR Act No. 18/2018 Coll. on the protection of personal data. More information can be found on the website www.dataprotection.gov.sk.

10.5 You can exercise your rights in writing to the address of the operator's registered office, by e-mail to info@365golf.sk or in person at the 365 Golf Range Trenčín golf tee. The Operator may ask you to provide additional information necessary to confirm your identity.

Modification of the Privacy Policy

Privacy is not a one-off issue for us. The information that we are obliged to provide to you in connection with our processing of personal data may change or cease to be up to date. For this reason, we reserve the right to modify these terms and conditions to any extent at any time. In the event that we change these terms in a material way, we will notify you of this change, e.g. by general notice on our website or by special notice by email.