GDPR
information on the protection and processing of personal data

Bathroom - Medical Institute of the Ministry of the Interior of the Slovak Republic ARCO (hereinafter referred to as KLÚ ARCO) street 17.novembra č.6 / 2, 91451 Trenčianske Teplice, IČO: 00735256 processes personal data of the natural persons concerned as the operator (hereinafter referred to as the "operator"), in accordance with principles of personal data processing and in accordance with Art. 13 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "the General Data Protection Regulation") provides the following information on the processing of personal data persons.

KLÚ ARCO processes personal data legally, transparently and fairly to the relevant and reasonable extent necessary primarily to achieve the following purposes of processing:

• Provision of health (spa) care,
• providing accommodation services,
• Monitoring of public areas by a camera system,
• Sales and marketing communications,
• customer and supplier contracts

As part of its processing activities, KLÚ ARCO processes the personal data of the persons concerned also through verified intermediaries, who process the personal data of the persons concerned on behalf of the operator and under its responsibility to the extent of concluded contractual relations.

As part of the provision of health (spa) care, KLÚ ARCO processes current personal data of the data subject (in particular: identification data, contact data, health insurance data) as well as personal data that are from a special category of personal data, namely health data (especially : diagnosis, anamnesis, data obtained in connection with the provision of health care) and, in rare cases, genetic data to the extent necessary to provide adequate health care. The provision of personal data by legal requirement, i. the data subject is obliged to provide data to KLÚ ARCO. If a person does not provide personal data, it will not be possible to provide them with adequate health care.

• Processing of spa proposals sent by health insurance companies
• provision of healthcare in line with the spa proposal
• Providing healthcare to self-payers to the extent agreed,
• Reports to the National Health Information Center,
• Addressing the concerns and complaints of data subjects about the healthcare provided.

• Reports of early termination of spa treatment to health insurance companies,
• storage of the created medical documentation during a special statutory storage period of 5 years. If the person concerned is provided with medical care in the ARCO KLÚ, the medical documentation, which is kept within the legal storage period (especially medical records), is also taken into account.

• National Center for Health Information under a special law,
• to the relevant health insurers on the basis of their legitimate interest,
• The Supervisory Authority in the context of supervision,
• courts and law enforcement authorities to the extent of the cooperation requested
• and other third parties to whom KLU ARCO is obliged to provide data on the basis of a special legal regulation.

As part of the provision of accommodation services, KLÚ ARCO processes common personal data necessary for the identification of the person concerned and the provision of related services. The provision of personal data is a contractual and legal requirement, i. the person is obliged to provide the data to the operator. If the person does not provide personal data, it will not be possible to provide accommodation services.

• Booking accommodation within the scope of pre-contractual relations with the person concerned,
• provision of accommodation and catering services to the extent contractually agreed,
• Resolving the complaints and grievances of the parties concerned in relation to the contractual relationship,
• registration of residence of Slovak citizens on the basis of Act no. 253/1998 Coll. on the registration of residence of citizens of the Slovak Republic and the register of inhabitants of the Slovak Republic,
• registration of residence of foreigners on the basis of Act no. 404/2011 Coll. on the stay of aliens and on the amendment of certain laws,
• collection of local taxes and fees in accordance with the VZN of the city of Trenčianske Teplice on local taxes and fees.

• keeping the residence records created during the storage period necessary to prove compliance with the statutory obligation,
• keeping the records established in connection with the collection of local taxes and charges for the period of deposit necessary to prove compliance with the statutory obligation,
• granting a discount on accommodation services at the request of the person concerned, taking into account the use of the services in the previous period to the extent of the data available at the time of storage.

• Trenčianske Teplice Municipal Office as the tax administrator in the exercise of control,
• to the relevant health insurance companies to the extent of their legitimate interest in the case of a prematurely terminated spa stay on the basis of a spa proposal,
• Health Care Supervisory Authority in the case of supervision in the case of a spa stay with the provision of healthcare,
• courts and law enforcement authorities to the extent of the cooperation requested
• and other third parties to whom KLU ARCO is obliged to provide data on the basis of a special legal regulation.

As part of the monitoring of publicly accessible areas by the KLÚ ARCO camera system, it processes the personal data of the persons concerned, which may also contain a special category of personal data recorded in connection with the monitoring of the areas. The person concerned is informed about the monitoring of the public space through the KLÚ ARCO notification. In view of the above, the person concerned can generally decide whether or not to be recorded by a camera system (except for cameras recording publicly accessible areas within buildings).

monitoring of publicly accessible premises for the purpose of security and protection of property and persons, while it is not the intention of KLÚ ARCO to obtain a special category of personal data and to monitor its own employees in the performance of their work activities. The prepared record is kept for a maximum of 15 days, if the record is not used for the purposes of criminal proceedings or the settlement of offenses or legitimate interests of KLÚ ARCO (eg the settlement of claims). If the alert is used for those purposes, the period of filing shall be extended by the time limit corresponding to the making available of the alert by the court and / or law enforcement authorities.

court and bodies active in criminal proceedings, the Police Force of the Slovak Republic to the extent of the required cooperation.

As part of sales and marketing communication, KLÚ ARCO processes current personal data, especially to the extent of contact data necessary for communication with the data subject. The provision of personal data is voluntary, i. the person is not obliged to provide KLÚ ARCO data. If the person does not provide personal data, it will not be possible to communicate with him for the above purpose.

• Electronic sales marketing communications as part of a news subscription. Personal data is processed for this purpose only during the validity of the consent,
• Satisfaction surveys. Satisfaction surveys are anonymous. If the data subject decides, at his or her discretion, to enter his or her personal data voluntarily on the questionnaire, this data shall be processed solely to inform him or her of the initiation of his or her complaint and for the purpose of drawing and awarding prizes.

The data thus obtained are processed for a period of 6 months.

commercial marketing communication with the affected person to whom KLÚ ARCO provides or has provided services or sold the product or goods.

Within the framework of customer and supplier contractual relations, KLÚ ARCO processes personal data necessary for the fulfillment of the contract with suppliers of goods and services, or with customers. The provision of personal data is a contractual requirement, only to the extent necessary for the performance of the contract in question or a requirement that is necessary for the conclusion of the contract. Failure to provide personal data may result in the non-conclusion of a contractual relationship (eg in the case of SZČO) or may affect the performance of the subject matter of the contract (eg if the contact person is not listed as the party to communicate). and take over the subject of performance).

• establishing pre-contractual relations
• performance of the contract,
• Dealing with complaints and grievances related to the contractual relationship.

• recovery of debts, during the period necessary to recover the claims of the parties.
• Retention of contractual documentation within the scope of documents and documents within the accounting agenda for a period of 10 years from the end of the contractual relationship and repayment of all obligations of the contracting parties.

• law firms for the purpose of providing legal services,
• courts and law enforcement authorities to the extent of the cooperation requested
• partners of the parties to the extent necessary for the performance of the contract,
• and other third parties to whom the controller is obliged to provide data on the basis of a special legal regulation.

Within the website www.kluarco.sk, which is operated by KLÚ ARCO, personal data necessary for the creation of a user account for the purpose of purchasing goods and services and subscribing to sales and marketing information (newsletters) are processed. The provision of personal data for the creation of a user account and the subsequent purchase of goods and services is a contractual requirement. If the person concerned does not provide his personal data, he will not be able to sell the goods or provide the service. Providing personal data to receive business and marketing information (newsletters) is voluntary.

• establishing pre-contractual relationships (especially reservations and orders)
• Resolving the complaints and grievances of the parties concerned in relation to the contractual relationship,
• performance of the contract relating to the purchase and sale of goods and services through the website. Personal data is processed within the website exclusively during the activity of the user account through which KLÚ ARCO provides the affected person with clear information about the purchased goods and services on the website www.kluarco.sk.

• entities involved in the performance of the subject matter of the contract (in particular: the postal undertaking);
• and other third parties to whom the controller is obliged to provide data on the basis of a special legal regulation.

The person concerned has the right to:

• for information on the processing of her personal data;
• Gain access to the personal data that is processed and stored about her;
• Request the correction of your incorrect, inaccurate or incomplete personal data.
• Request the deletion of your personal data when it is no longer needed or when the processing is illegal;
• object to the processing of your personal data for marketing purposes or on a basis that relates to a specific situation;
• Request a restriction on the processing of your personal data in specific cases;
• receive your personal data in machine-readable format and / or request it to be transferred to another operator;
• withdraw its consent at any time, without prejudice to the lawfulness of the processing based on the consent given prior to its withdrawal, if such consent has been given by the person concerned;
• Require that decisions based on automated processing that affect or significantly affect her, based on her personal data, be executed by individuals and not by automated technical means if personal data is processed in this way by KLU ARCO. The person concerned has the right to express his or her views and to oppose the decision of KLU ARCO;
• lodge a complaint with the supervisory authority, in particular in the Member State of her habitual residence, place of work or alleged infringement, and the right to an effective remedy if he or she considers that the processing of his or her personal data is unlawful. The supervisory body in the territory of the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12 Bratislava;
• Submit a request or complaint to KLU ARCO and its responsible person in connection with the protection and processing of its personal data.

• in writing at the address: Bathroom - Medical Institute of the Ministry of the Interior of the Slovak Republic ARCO, 17.novembra street no. 6/2, 91451 Trenčianske Teplice
• electronically at: marketing@kluarco.sk.