Personal Data Protection and Processing Policy of ORAVA SKIPARK, a.s.

By making a declaration/granting consent by electronic means or by providing written consent, the person making the declaration/giving consent (hereinafter also the “Person”) has consented to the processing of their personal data by: ORAVA SKIPARK, a.s., Radlinského 1739/21, 026 01 Dolný Kubín, Company ID No.: 44 716 028, registered in the Commercial Register of the District Court Žilina, Section: Sa, Insert No.: 10675/L (hereinafter “SKIPARK” or the “Controller”), as a controller within the meaning of Act No. 18/2018 Coll. on Personal Data Protection and on Amendments and Supplements to Certain Acts (hereinafter the “Act”).

SKIPARK, as the Controller within the meaning of the Act, has prepared this information document in order to fulfil the obligations and conditions laid down by applicable legislation, in particular the Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”), to inform you about your rights and to support fair and transparent mutual relations.

The term Agreement means an agreement concluded between the Person and SKIPARK concerning (i) the purchase of travel tickets (ski passes), (ii) the purchase of goods, and (iii) the provision of services.

The term Processor means any person or entity that processes personal data on behalf of the Controller (SKIPARK), including in particular:

• ASTER spol. s r.o., Company ID No.: 31 319 807,
• AXESS, s.r.o., Company ID No.: 36 297 038,
• Vladimír Kubík – DataViz, Company ID No.: 50 099 884,
• DoParady s.r.o., Company ID No.: 50 930 532,
• Paysy s. r. o., Company ID No.: 50 835 271,
• Daktela SK, s.r.o., Company ID No.: 46 039 601,
• EM CARD a.s., Company ID No.: 35 812 401.

The term Recipient means any person or entity to whom personal data are disclosed, regardless of whether that person or entity is a third party, including in particular:

• SLOVAKIA REAL – IN, a.s., Company ID No.: 35 789 638.

Recipients will be provided with Personal Data:

• only if you have consented to receiving news and newsletters,
• to the following extent: first name, surname, e-mail address, date of birth, nationality, address

A. Information on the Processing of Personal Data:

1. Scope of Personal Data Processing.

The personal data processed include in particular:

first name, surname, e-mail address, telephone number, residential address, date of birth, language (the provision of these personal data is required for the conclusion of the Agreement; without them, the Agreement cannot be concluded).

If the Person accesses websites operated by SKIPARK (listed at https://www.kubinska.sk/ and https://kubinska.eskipass.sk/), the following data are also processed:https://www.kubinska.sk/https://kubinska.eskipass.sk/

IP address, cookies and device identifier (the provision of these personal data is a contractual requirement).

Other data processed:

date and time of turnstile passages, order ID, Axess ID Number, kilometres travelled, elevation gain, days used, date, time and details of passages displayed as a graph for the current season, ski pass serial number, card WTP number, vehicle registration number.

2. Purposes of Personal Data Processing and Legal Basis for Processing:

• performance of Agreements concluded between the parties (both past and future),
• communication with the Person (for example, clarification of contractual terms),
• ensuring the proper operation of the server (hosting of the SKIPARK server),
• protection against misuse of services, verification of the non-transferability of ski passes and blocking access to services,
• verification of data for tax purposes and archiving,
• internal analytical and statistical evaluation of sales and service usage in aggregated form for capacity planning, pricing, marketing strategy and service improvement,
• consumer competitions and customer surveys,
• We may also process your personal data in order to comply with legal obligations, in particular in connection with checks against sanctions lists or compliance with legislation on the prevention of money laundering. Personal data may also be processed to comply with obligations arising from court decisions or other decisions of public authorities.

If you have consented to receiving advertising e-mails (newsletters, news), the purposes also include communication with the Person, for example sending news and information about developments in the services provided, including personalised and direct marketing – contacting you with service offers and news relating to SKI PARK Kubínska hoľa and facilities operated by ORAVA SKIPARK a.s. (by means of direct e-mailing, telemarketing, retargeting and other methods).

3. Sources of Personal Data.

The personal data processed are provided by the Person in the Agreement or in another manner (for example by telephone, in writing or by e-mail).

Some personal data are provided to the Controller through Processors.

4. Personal Data Retention Period.

Personal data are retained for as long as the purpose of processing continues, but for no longer than 10 years where required by accounting, tax or archiving obligations.

Processors process personal data for the duration of the services they provide to the Controller and only to the extent necessary to fulfil the agreed purpose. After the provision of services or the processing ends, they are required, on the Controller’s instructions, to erase the personal data or return them to the Controller and erase any existing copies, unless applicable law requires further retention.

5. Your Rights.

You have the right to request from SKIPARK:

• access to the personal data relating to the Person that SKIPARK processes,
• rectification of personal data processed by SKIPARK,
• erasure of personal data processed by SKIPARK,
• restriction of the processing of personal data.

You also have the right:

• to object to the processing of personal data by SKIPARK,
• to data portability in respect of personal data processed by SKIPARK,
• to lodge a complaint (www.dataprotection.gov.sk),
• to submit a request to initiate proceedings under Section 100 of the Act if you consider that your rights established by the Act have been directly affected.

The Person has the right to delete cookies at any time in the settings of their browser. The Person may withdraw their consent at any time by sending a withdrawal of consent to the processing of personal data. SKIPARK will then immediately block or erase the relevant data, and personal data provided by you will no longer be used by SKIPARK for marketing purposes where you had consented to receiving news and newsletters.

6. Withdrawal of Consent.

The Person is entitled to withdraw their consent at any time.

7. Assurance.

Before using information for a purpose not specified in this consent, we will always assess individually whether your consent is required for such further use. If it is, we will inform you and ask for your consent.

We do not sell your personal data to any third party. 

8. Identification of the Controller.

Business name: ORAVA SKIPARK, a.s.

Registered office:         Radlinského 1739/21, 026 01 Dolný Kubín

Company ID No.:          44 716 028

Registration:    Commercial Register of the District Court Žilina, Section: Sa, Insert No.: 10675/L

9. Controller’s Contact E-mail.

Please send any questions, comments, withdrawal of consent or requests concerning your other rights by e-mail to: info@kubinska.sk

10. Supervision of Personal Data Processing.

Supervision of personal data processing is carried out by:

Office for Personal Data Protection of the Slovak Republic

Galvaniho Business Centrum II

Galvaniho 7/B

821 04 Bratislava

Slovak Republic

Office Secretariat and Filing Office