In order to fulfill the information obligation of the controller, which corresponds to the data subject's right to information, the controller, in accordance with Articles 13 and 14 of the Regulation and Sections 19 and 20 of the Personal Data Protection Act, provides the data subject with the following information:
Identification and contact details of the operator
- Business name
- SENGER & Partners s. r. o.
- Company ID
- 45 339 856
- Registered in the Commercial Register of the Municipal Court Bratislava III, Section
- Sro, File No. 63477/B
- Headquarters
- Štefánikova 5, 811 06 Bratislava – Staré Mesto district
- gdpr@senger.sk
(hereinafter referred to as "the company" or "the operator").
Contact details of the responsible person
- Name and Surname
- Tibor Šeliga
- Tel.
- +421 948 088 677
- seliga@senger.sk
Privacy policy
Purpose of processing personal data in accounting documents
As part of our activities, personal data is processed for the purpose of maintaining the agenda necessary to fulfill the legal obligations of the controller when processing accounting documents.
Circle of affected persons: natural persons
List of personal data: name, surname, title, permanent address, temporary address, telephone number, email address, date of birth, type and number of identity document, signature, bank account number of natural person.
Legal basis for the processing of personal data: Act No. 431/2002 Coll. on Accounting, as amended. Act No. 222/2004 Coll. on Value Added Tax, as amended. Act No. 595/2003 Coll. on Income Tax, as amended. Act No. 40/1964 Coll. Civil Code, as amended. Act No. 152/1994 Coll. on the Social Fund and on the amendment and supplementation of Act No. 286/1992 Coll. on Income Tax, as amended.
Categories of recipients: Tax office – processing is necessary to fulfill the legal obligation of the operator in accordance with: Act No. 595/2003 Coll. on income tax, as amended, Courts, law enforcement authorities – processing is necessary to fulfill the legal obligation of the operator in accordance with Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 162/2015 Coll. on Administrative Court Procedure, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on Certain Measures Related to the Adoption of the Civil Procedure Code, the Civil Non-Contentious Procedure Code and the Administrative Procedure Code and on amendments to certain laws, Authorized state authority – processing is necessary for the fulfillment of the operator's legal obligation within the meaning of the General Data Protection Regulation.
Personal data is not transferred to third countries.
Time limits for erasure of personal data: We store your personal data in accordance with specific regulations and the valid Filing Plan and Rules.
Automated decision-making, including profiling, is not carried out.
Purpose of personal data processing in the incoming and outgoing mail register and in the registry administration
As part of our activities, personal data is processed when recording incoming and outgoing mail and performing tasks related to records management.
Circle of affected persons: natural persons – addressees, employees
List of personal data: birth number, first name, last name, title, address, name of organization, job title, email address, subject and content of email.
Legal basis for the processing of personal data: Act No. 395/2002 Coll. on archives and registries and on amendments to certain acts, as amended, Act No. 305/2013 Coll. on the electronic form of the exercise of public authority and on amendments to certain acts (Act on e-Government), Act No. 369/1990 Coll. on Municipal Administration, as amended.
Categories of recipients: Ministry of the Interior of the Slovak Republic – processing is necessary to fulfill the legal obligation of the operator in accordance with: Act No. 369/1990 Coll. on municipal administration, as amended. Act No. 395/2002 Coll. on Archives and Registries and on the Amendment of Certain Acts, as amended, Courts, law enforcement authorities – processing is necessary to fulfill the legal obligations of the operator within the meaning of Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 162/2015 Coll. on Administrative Court Procedure, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on Certain Measures Related to the Adoption of the Civil Procedure Code, the Civil Non-Contentious Procedure Code and the Administrative Procedure Code and on amendments to certain laws, Authorized state authority – processing is necessary for the fulfillment of the operator's legal obligation within the meaning of the General Data Protection Regulation.
Personal data is not transferred to third countries.
Time limits for erasing personal data: regular correspondence – 3 years, registry journal – 10 years.
Automated decision-making, including profiling, is not carried out.
Purpose of processing personal data in the guest register and foreign nationals register
As part of our activities, personal data is processed for the purpose of recording hotel services, hotel guests, room reservations, recording personal data in the hotel system, and recording foreign guests.
Group of persons concerned: Clients – accommodated guests
List of personal data: Name, surname, title, place of residence, ID card number, first name, last name, title, place of residence, ID card number of other guests staying at the accommodation, first name, last name, title, date and place of birth of the foreigner, nationality, permanent residence in the home country, purpose of the trip to the Slovak Republic, passport number, visa: type, number, validity, name and address of accommodation facility in the Slovak Republic, accompanying children, length of stay in Slovakia, telephone number, email contact.
Legal basis for the processing of personal data: Act No. 40/1964 Coll. Civil Code, Act No. 595/2003 Coll. on Income Tax, Act No. 582/2004 Coll. on Local Taxes and Local Fees for Municipal Waste and Minor Construction Waste, as amended, Act No. 222/2004 Coll. on Value Added Tax, Act No. 404/2011 on the Residence of Foreigners and on Amendments to Certain Acts, Act No. 431/2002 Coll. on Accounting, Act No. 496/2008 Coll. complete wording of Act No. 253/1998 Coll. on the reporting of residence of citizens of the Slovak Republic and the register of inhabitants of the Slovak Republic, as amended.
Categories of recipients: Tax office – processing is necessary to fulfill the legal obligation of the operator in accordance with: Act No. 595/2003 Coll. on income tax, as amended, Courts, law enforcement authorities – processing is necessary to fulfill the legal obligation of the operator within the meaning of Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 162/2015 Coll. on Administrative Court Procedure, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on Certain Measures Related to the Adoption of the Civil Procedure Code, the Civil Non-Contentious Procedure Code and the Administrative Procedure Code and on amendments to certain laws, Authorized state authority – processing is necessary for the fulfillment of the operator's legal obligation within the meaning of the General Data Protection Regulation.
Personal data is not transferred to third countries. However, we use third-party services related to cloud technology. In these cases, we carefully select service providers and ensure an adequate level of data protection through contractual, technical, and organizational measures. Our partner is Digital Arbitrage, Inc. dba Cloudbeds, which does not process data in the EU, but for some countries outside the EU, such as the United Kingdom, Switzerland, and the United States (US), the EU has already determined a comparable level of data protection. Due to the comparable level of data protection, no special authorization or agreement is required for data transfers to these countries.
Time limits for erasure of personal data: We store your personal data in accordance with specific regulations and the valid Filing Plan and Rules.
Automated decision-making, including profiling, is not carried out.
Purpose of personal data processing when sending marketing offers
As part of the operator's activities, personal data is processed for the purpose of registering clients who have agreed to receive marketing offers.
Group of persons concerned: clients
List of personal data: name, surname, email, phone number, country
Legal basis for processing personal data: Consent of the data subject, which the data subject has provided voluntarily and may revoke at any time at: gdpr@senger.sk
Categories of recipients: Courts, law enforcement authorities – processing is necessary to fulfill the legal obligation of the controller within the meaning of Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 162/2015 Coll. Administrative Court Procedure Code, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on Certain Measures Related to the Adoption of the Civil Dispute Procedure Code, the Civil Non-Contentious Procedure Code and the Administrative Procedure Code and on amendments to certain laws, Authorized state authority – processing is necessary for the fulfillment of the operator's legal obligation within the meaning of the General Data Protection Regulation.
Personal data is not transferred to third countries.
Time limits for erasure of personal data: Personal data will be processed for the duration of consent to receive marketing offers.
Automated decision-making, including profiling, is not carried out.
Purpose of processing personal data in the complaints register
As part of the operator's activities, personal data is processed for the purpose of handling complaints.
Group of affected persons: Persons filing a complaint
List of personal data: name, surname, title, address, telephone number, email address, and nature of the complaint
Legal basis for the processing of personal data: Act No. 250/2007 Coll. on consumer protection and on amendments to Act No. 372/1990 Coll. of the Slovak National Council on misdemeanors, as amended, and other related generally binding legal regulations, Act No. 40/1964 Coll. Civil Code, as amended.
Categories of recipients: Slovak Trade Inspection – Act No. 40/1964 Coll. Civil Code, as amended, Act No. 128/2002 Coll. on State Control of the Internal Market in Consumer Protection Matters and on Amendments to Certain Acts, Courts, law enforcement authorities – processing is necessary to fulfill the legal obligation of the operator within the meaning of Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 162/2015 Coll. Administrative Court Procedure, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on Certain Measures Related to the Adoption of the Civil Dispute Procedure, the Civil Non-Contentious Procedure Code and the Administrative Procedure Code and on amendments to certain laws, Authorized state authority – processing is necessary for the fulfillment of the operator's legal obligation within the meaning of the General Data Protection Regulation.
Personal data is not transferred to third countries.
Time limits for erasure of personal data: We store your personal data in accordance with specific regulations and the applicable Filing Plan and Rules.
Automated decision-making, including profiling, is not carried out.
Purpose of personal data processing in the camera information system
As part of the operator's activities, personal data is processed on the basis of specific needs and requirements, in particular for the protection of public order and safety, the detection of crime, and the protection of health and property.
Group of affected persons: employees, clients, suppliers
List of personal data: CCTV recordings
Legal basis for personal data processing: Legitimate interest of the controller
Categories of recipients: Courts, law enforcement authorities – processing is necessary to fulfill the legal obligation of the controller within the meaning of Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 162/2015 Coll. Administrative Procedure Code, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on Certain Measures Related to the Adoption of the Civil Procedure Code, the Civil Non-Contentious Procedure Code and the Administrative Procedure Code and on amendments to certain acts, Authorized state authority – processing is necessary to fulfill the legal obligation of the controller within the meaning of the General Data Protection Regulation.
Personal data is not transferred to third countries.
Time limits for erasure of personal data: 15 days
Automated decision-making, including profiling, is not carried out.
Purpose of processing personal data in the job applicant database
As part of our activities, personal data is processed when registering job seekers.
Group of persons concerned: Natural persons – job seekers
List of personal data: first name, last name, title, permanent residence, temporary residence, date of birth, telephone number, education, work experience, email address, other data included in the CV, cover letter, and job application.
Legal basis for personal data processing: consent of the data subject
Categories of recipients: entities entrusted by special regulations with the power to decide on the rights and obligations of natural persons (e.g., courts).
Personal data is not transferred to third countries.
Time limits for erasure of personal data: 3 years
Automated decision-making, including profiling, is not carried out.
Purpose of personal data processing – contact form
As part of our activities, we process personal data in our client records for the purpose of responding to client inquiries.
Group of persons concerned: natural persons – clients
List of personal data: first name, last name, email address
Legal basis for personal data processing: consent of the data subject
Categories of recipients: we do not provide
Personal data is not transferred to third countries.
Time limits for erasure of personal data: personal data is processed for communication purposes and will subsequently be erased.
Automated decision-making, including profiling, is not carried out.
The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal; the data subject must be informed of this fact before consent is given. The data subject may withdraw consent in the same manner as they gave it.
Your rights under the EU Regulation and the Data Protection Act
We consider it important for you to know that the personal data we process is your data and that you have rights related to its processing. In addition to the right to withdraw your consent to the processing of personal data, you also have other rights under the Regulation and the Personal Data Protection Act.
1. Right of access
You have the right to obtain a copy of the personal data we hold about you, as well as information about how we use your personal data.
In most cases, your personal data will be provided to you in written form, unless you request otherwise. If you have requested this information by electronic means, it will be provided to you electronically, if technically possible.
2. Right to redress
We take reasonable steps to ensure that the information we hold about you is accurate, complete, and up to date. If you believe that the information we hold is inaccurate, incomplete, or out of date, please do not hesitate to ask us to amend, update, or supplement that information.
3. Right to erasure
Under certain circumstances, you have the right to ask us to delete your personal data, for example if the personal data we have collected about you is no longer necessary for the original purpose of processing or if you withdraw your consent to processing. However, your right must be assessed in light of all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means that we will not be able to comply with your request.
4. Right to restriction of processing
Under certain circumstances, you have the right to ask us to stop using your personal data. This includes, for example, cases where you believe that the personal data we hold about you may be inaccurate or where you believe that we no longer need to use your personal data.
5. Right to data portability
Under certain circumstances, you have the right to request that we transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
6. Right to object
You have the right to object to the processing of data based on our legitimate interests (for example, we process personal data for the purpose of network and infrastructure security). If we do not have a compelling legitimate reason for processing and you object, we will no longer process your personal data.
7. Rights related to automated decision-making
You have the right to refuse automated decision-making, including profiling, which has legal or similar significant consequences for you. The company does not normally use automated decision-making or profiling in the context of employment.
8. Right to withdraw consent
In most cases, we do not process your personal data based on your consent. However, we may ask for your consent in specific cases. In cases where we do so, you have the right to withdraw your consent to the further use of your personal data.
9. Right to lodge a complaint
If you wish to lodge a complaint about the way your personal data is processed, including exercising the above rights, you can contact our Data Protection Officer (contact details are provided above). We will duly investigate all your suggestions and complaints.
If you are not satisfied with our response, or if you believe that we are processing your personal data unfairly or unlawfully, you can lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk/uoou/, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.