In connection with the processing of personal data, the controller provides the following information under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the “Regulation”).
QUALITRAVEL CESTOVNÁ AGENTÚRA s.r.o. treats its clients’ personal data responsibly and follows the rules set by applicable European legislation to protect that data appropriately.
1. Personal data controller
QUALITRAVEL CESTOVNÁ AGENTÚRA s.r.o. is a company established and existing under Slovak law, with its registered office at Struková 13, 821 05 Bratislava, company ID 35901578, registered in the Commercial Register of the Bratislava I District Court, section Sro (the “Company”).
Business address: Struková 13, 821 05 Bratislava
Telephone: +421 2 5292 1994
Website: www.qualitravel.sk
2. Definitions
Personal data is any information relating to a specific natural person that can identify that person directly or indirectly: your name, home or other address, personal identification number, date of birth, identity document number, email address, telephone number, IP address or other online identifier.
3. Purposes and legal bases for processing
The Company processes the personal data of clients ordering travel services and their representatives for these purposes:
- Providing travel services, particularly arranging air transport.
- Handling complaints (legal obligation).
- Accounting and archiving (legal obligation).
- Defending legal claims (legitimate interest).
- Loyalty programme (legitimate interest / client consent).
- Marketing: sending newsletters (voluntary consent that can be withdrawn at any time).
4. Categories of personal data
- Website browsing: location, IP address, operating system and browser.
- Flight bookings: first name, surname, email, telephone number, dates of birth and addresses.
- Additional information requested: nationality, passport or ID number, passport scan for visas and health restrictions.
- Loyalty programme: country visited, scope of services, dates and price.
5. Transfers to third countries
Personal data is transferred to third countries only to the extent necessary, in encrypted form where possible, and in compliance with GDPR requirements.
6. Retention period
The retention period depends on the purpose of processing: at least two years after returning from a trip and no longer than the period required by the relevant law. Marketing consent: five years or until withdrawal.
7. Rights of the data subject
- The right to access personal data.
- The right to correct inaccurate data.
- The right to erasure.
- The right to restrict processing.
- The right to object to processing.
- The right to data portability.
- The right to withdraw consent at any time.
- The right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, telephone +421 2 3231 3220, www.dataprotection.gov.sk.
8. Source of personal data
We obtain personal data directly from you, our customers, as entered in an order, contract or other client documents. Data may also come from publicly available sources or third parties, such as the person ordering a group trip.
Effective from 25 May 2018.