Information on the conditions for processing personal data.

VISITORS TO THE PURPOSE-BUILT FACILITY OF THE OFFICE OF THE GOVERNMENT OF THE SLOVAK REPUBLIC – HOTEL BÔRIK

In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR Regulation”) and in accordance with the provisions of § 19 and § 20 of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws, as amended (hereinafter referred to as the “Act”), we hereby inform you, as the data subject, about your rights and the conditions for processing your personal data, since your personal data are processed in connection with your visit to the purpose-built facility of the Office of the Government of the Slovak Republic – Hotel Bôrik (hereinafter referred to as “Hotel Bôrik” or the “facility”).

Hotel Bôrik is a purpose-built facility managed by the Office of the Government of the Slovak Republic, which primarily provides accommodation services. The presented information on the conditions for processing personal data for visitors to Hotel Bôrik (hereinafter referred to as the “Information”) is available electronically on the Hotel Bôrik website (https://borik.gov.sk/GDPR), as well as in printed form at the reception of Hotel Bôrik.

We process your personal data without your consent only in cases where valid legal regulations permit such processing, based on a special regulation or contract. Personal data that you provide to us based on a special regulation or contract must be provided by you; otherwise, we will not be able to fulfill your requests or our obligations designated for that purpose.

IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER AND THE DATA PROTECTION OFFICER
Name: Office of the Government of the Slovak Republic
Registered office: Námestie slobody 1, 813 70 Bratislava, Slovak Republic
Company ID number (IČO): 00 151 513
Contact: Tel. no.: +421 2 209 25 111; e-mail: zodpovedna.osoba@vlada.gov.sk
(hereinafter referred to as the “controller” or the “Office of the Government”)

For questions regarding the protection of personal data, you may contact the data protection officer of the controller:
Data protection officer: Tel. no.: +421 2 209 25 294; e-mail: zodpovedna.osoba@vlada.gov.sk
(hereinafter referred to as the “data protection officer”)

The category of data subjects, scope of processed personal data, purpose of processing, legal basis, retention period of personal data, recipients, and any possible transfer of personal data to a third country are as follows:

Persons who have expressed interest in the services of Hotel Bôrik (stay / organization of social events)

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification and contact personal data (first name, last name, phone number, email address), start and end of stay or start and end of the social event, number of persons, in case of interest in a stay, the age of minors, as well as other data necessary to achieve the purpose of processing
Purpose of Processinga	Fulfillment of pre-contractual relations in connection with booking a stay or booking related to the organization of a social event at the operator’s facility – at Hotel Bôrik, via email, telephone, or through the facility’s website
Legal Basis	Pre-contractual relationship: In accordance with Article 6(1)(b) of the GDPR Regulation and § 13(1)(b) of the Act, the processing of personal data is necessary for the purposes of concluding a contract for accommodation, the subject of which is the operator’s obligation to reserve and provide temporary accommodation to the data subject, or for the purposes of concluding a contract for the provision of services, the subject of which is the operator’s obligation to provide selected services to the data subject
Retention Period	Up to a maximum of 2 years from the date of sending the request
Recipients	Entities to whom the operator provides personal data based on the law, professional consultants and advisors who are bound by a statutory and/or contractual confidentiality obligation
Transfer of Personal Data to Third Countries	In connection with the use of communication services and software products from Microsoft Corporation, data is transferred to third countries – the United States of America (USA). The data transfer takes place in accordance with the European Commission Decision No. 2000/518/EC of 10 July 2023 on the adequate protection of personal data concerning the EU-US Data Privacy Framework; certified for participation within the (Data Privacy Framework)

Persons accommodated at the Hotel Bôrik facility

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification and contact personal data (first name, last name, permanent address, phone number, email address), additionally ID card number, start and end of stay, number of persons, age of minors (if applicable), vehicle registration number in case of use of the hotel parking lot, reserved room number, as well as other data necessary to achieve the purpose of processing
Purpose of Processing	Fulfillment of contractual relations based on the accommodation contract, such as reservation of accommodation, processing of reservation, issuance of tax documents, record of payments, as well as handling requests related to the accommodation
Legal Basis	Contractual relationship: In accordance with Article 6(1)(b) of the GDPR Regulation and § 13(1)(b) of the Act, the processing of personal data is necessary for the purposes of concluding the accommodation contract, the subject of which is the operator’s obligation to reserve and provide temporary accommodation to the data subject
Retention Period	5 years from the date of reservation creation. In the event the data subject does not arrive for the reserved stay, personal data will be deleted immediately upon receipt of this information
Recipients	Entities to whom the operator provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Persons who have ordered the organization of a social event at Hotel Bôrik

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification and contact personal data (first name, last name, permanent address, phone number, email address), number of persons and their name list, in the case of a work/business event, the employer’s name, start and end of the social event, vehicle registration numbers in case of use of the hotel parking lot, as well as other data necessary to achieve the purpose of processing
Purpose of Processing	Fulfillment of contractual relations based on the contract for the provision of services, the subject of which is the operator’s obligation to provide selected services to the data subject, as well as handling requests related to the organization of the social event at the facility
Legal Basis	Contractual relationship: In accordance with Article 6(1)(b) of the GDPR Regulation and § 13(1)(b) of the Act, the processing of personal data is necessary for the purposes of concluding the contract for the provision of services, the subject of which is the operator’s obligation to provide selected services to the data subject
Retention Period	5 years from the date of the social event
Recipients	Entities to whom the operator provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Persons recorded in the accommodation logbook

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification data (first name, last name, permanent address), ID card number or passport number, and length of stay
Purpose of Processing	Maintaining the accommodation logbook through the electronic Horec system and fulfilling other legal obligations pursuant to Act No. 253/1998 Coll. on the reporting of residence of citizens of the Slovak Republic and the register of the inhabitants of the Slovak Republic, as amended
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR Regulation and § 13(1)(c) of the Act, the processing of personal data is necessary to fulfill obligations imposed on the controller by Act No. 253/1998 Coll. on the reporting of residence of citizens of the Slovak Republic and the register of inhabitants of the Slovak Republic, as amended
Retention Period	Maximum of 5 years from the date of entry
Recipients	Entities to whom the controller provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Foreign nationals recorded in the extended accommodation register

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification data (first name, last name, permanent address), ID card number or passport number, length of stay, nationality, and date of birth
Purpose of Processing	Reporting the stay of foreign nationals, extending the accommodation register through the electronic Horec system, verifying the identity of the foreign national, and fulfilling other legal obligations pursuant to Act No. 404/2011 Coll. on the Residence of Foreign Nationals and on amendments and supplements to certain acts, as amended, related to the mandatory reporting of a foreign national’s stay to the immigration police
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR Regulation and § 13(1)(c) of the Act, the processing of personal data is necessary to fulfill obligations imposed on the controller by Act No. 404/2011 Coll. on the Residence of Foreign Nationals and on amendments and supplements to certain acts, as amended
Retention Period	Maximum of 5 years from the date of entry
Recipients	Immigration Police, entities to whom the controller provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Users of charging stations

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification data (first name and last name), contact data (phone number), and data about the vehicle and its charging, including the vehicle registration number, start and end time of the charging process
Purpose of Processing	Recording the charging of vehicles and fulfilling contractual obligations under a service contract or accommodation contract, which include the possibility of using the electric vehicle charging stations free of charge
Legal Basis	Contractual relationship: In accordance with Article 6(1)(b) of the GDPR Regulation and § 13(1)(b) of the Act, the processing of personal data is necessary for the performance of the accommodation contract or service contract, which includes the possibility of free use of charging stations for electric vehicles
Retention Period	3 months from the date of entry
Recipients	Entities to whom the controller provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Persons accommodated in the Hotel Bôrik facility

Processed Personal Data	Personal data from the category of so-called regular personal data, specifically identification personal data (first name, last name, permanent address), ID card or travel document number, duration of stay, and date of birth
Purpose of Processing	Fulfilling legal obligations related to the payment of accommodation tax in accordance with Act No. 582/2004 Coll. on local taxes and local fees for municipal waste and small construction waste, as amended
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR and § 13(1)(c) of the Act, the processing of personal data is necessary to comply with obligations imposed on the controller by Act No. 582/2004 Coll. on local taxes and local fees for municipal waste and small construction waste, as amended
Retention Period	5 to 10 years in accordance with the law
Recipients	Entities to whom the controller provides personal data on the basis of the law, professional consultants and advisors who are bound by legal and/or contractual confidentiality obligations
Transfer of Data to a Third Country	Personal data are not transferred to a third country outside the European Union and the European Economic Area or to an international organization, nor is such a transfer intended

Persons submitting a complaint

Processed Personal Data	Personal data from the category of so-called ordinary personal data, namely identification and contact data (first name, last name, phone number, email address), and other relevant data voluntarily provided by the data subject for the purpose of the complaint
Purpose of Processing	Recording and handling complaints
Legal Basis	Contractual relationship: In accordance with Article 6(1)(b) of the GDPR Regulation and § 13(1)(b) of the Act, the processing of personal data is necessary for the performance of a contract to which the data subject is a party
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR Regulation and § 13(1)(c) of the Act, the processing of personal data is necessary to fulfill obligations imposed on the controller by Act No. 108/2024 Coll. on Consumer Protection and on Amendments and Supplements to Certain Acts
Retention Period	4 years from the date the complaint is resolved, in accordance with applicable regulations relating to consumer protection
Recipients	Entities to whom the controller provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Natural persons – senders and recipients of correspondence

Processed Personal Data	Personal data provided by the data subject in the relevant correspondence
Purpose of Processing	Management of the electronic mailbox
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR Regulation and § 13(1)(c) of the Act, the processing of personal data is necessary to fulfill obligations imposed on the controller by Act No. 305/2013 Coll. on the Electronic Exercise of the Powers of Public Authorities and on Amendments and Supplements to Certain Acts (the e-Government Act), as amended, and related legislation
Retention Period	10 years following the year in which the record was created
Recipients	Entities to whom the controller provides personal data based on the law, professional consultants and advisors who are bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Parties to the dispute, participants in proceedings, and other involved persons

Processed Personal Data	Personal data provided to the Government Office for the purposes of the respective proceeding
Purpose of Processing	Administration and handling of court case agendas, enforcement proceedings, and debt recovery
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR Regulation and § 13(1)(c) of the Act, the processing of personal data is necessary for the fulfillment of obligations imposed on the controller, particularly by: Act No. 233/1995 Coll. on Judicial Executors and Execution Activities (Execution Code) and on Amendments to Certain Acts, as amended Act No. 244/2002 Coll. on Arbitration Proceedings, as amended Act No. 7/2005 Coll. on Bankruptcy and Restructuring and on Amendments to Certain Acts, as amended Act No. 301/2005 Coll. Criminal Procedure Code, as amended Act No. 160/2015 Coll. Civil Dispute Procedure Code, as amended Act No. 162/2015 Coll. Administrative Judiciary Procedure Code, as amended Act No. 314/2018 Coll. on the Constitutional Court of the Slovak Republic and on Amendments to Certain Acts, as amended
Retention Period	10 years after the final conclusion of the relevant proceeding
Recipients	Entities to whom the controller provides personal data based on the law – particularly courts, judicial executors, attorneys, professional consultants, and advisors bound by statutory and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	Personal data are not transferred to any third country outside the European Union and the European Economic Area or to an international organization, and such transfer is not intended

Natural persons exercising their data subject rights

Processed Personal Data	Personal data provided by the data subject in their request, and personal data necessary for verifying the identity of the person exercising the data subject rights
Purpose of Processing	Exercising the rights of data subjects
Legal Basis	Fulfillment of a legal obligation: In accordance with Article 6(1)(c) of the GDPR and § 13(1)(c) of the Slovak Personal Data Protection Act, the processing of personal data is necessary to fulfill the obligations imposed on the controller by law or the GDPR regulation
Retention Period	5 years following the year in which the request was processed
Recipients	Entities to whom the controller provides personal data on the basis of law, as well as professional consultants and advisors who are bound by legal and/or contractual confidentiality obligations
Transfer of Personal Data to Third Countries	In connection with the use of communication services and software products provided by Microsoft Corporation, personal data may be transferred to third countries — specifically the United States of America (USA). Such data transfers occur in compliance with European Commission Decision No. 2000/518/EC of 10 July 2023 on the adequate level of protection of personal data within the EU-U.S. Data Privacy Framework, based on Article 45 of the GDPR.