Information on the processing of personal data
Your personal data are processed by the Bratislava Tourist Board (“BTB”), place of business Šafárikovo nám. 3, 811 02 Bratislava, CIN: 42259088, contact for information on the processing of personal data and the exercise of rights by data subjects: btb@visitbratislava.com.
We process personal data necessary for the performance of our activities under the statute of the BTB and Act No 91/2010 on support for tourism, which means primarily the planning and implementation of marketing and promotion of Bratislava as a tourist destination.
Personal data are retained for the time necessary to fulfil the purpose of their processing, but no longer than the dissolution of the BTB or its last legal successor as a subject of law if we/they are dissolved without a legal successor.
A. Personal data processed when you visit our website – COOKIES
Cookie files are used
- to ensure the proper functioning of our websites (these are technical – necessary cookies, types of cookies without which it is impossible to use our services so visitors to the page need not give specific consent to their use); and further
- to improve and adapt the overall functionality of our website for you in particular, having regard for your preferences and settings (marketing optional: the allow analysis of how visitors use the sites based on a user UD (unique identifier) – the page visitor’s consent is required. Such cookies are also shared with third parties).
Cookies are used to process personal data on our main site and the associated sites www.visitbratislava.com (72hodinovemesto.sk, and card.visitbratislava.com).
As a website user, you can revoke at any time your consent for future processing of your personal data obtained through marketing cookies. You can do this by changing the settings of your web browser. For further information, check your browser’s Help page. If you do not wish cookies to be used, you must actively delete or block them. Further information about cookies files and their deletion can be found on the website www.allaboutcookies.org and if you are using a mobile web browser, useful information can be found in your device’s manual. We do not use cookies to collect visitors’ personal data.
B. Personal data processed when sending our Newsletter
You can receive news and up-to-date information about events in Bratislava by subscribing to our newsletter. If you sign up to receive the newsletter, you give us your consent for the processing for the following categories of personal data: e-mail address.
You can exercise your right to object to the processing of this personal data or to request termination of the use of personal data, which will also terminate terminate the sending of the newsletter, by using the “unsubscribe” link/function.
C. Personal data processed when we take photos or make videos
We document events (co-)organised by the BTB (especially the Bratislava City Days and the Bratislava Coronation Days) by means of photographs and video recordings, which include the likenesses of visitors to the events. This documentation is used to provide information about events held in Bratislava, and to promote the city and the BTB.
If you wish to exercise any of your rights relating to the protection of your personal data, you can contact us at the e-mail address btb@visitbratislava.com.
In the protection of your personal data, you have the following rights:
- Right of access to personal data, you have the right to ask us for confirmation of whether or not we process personal data concerning you and if we process your personal data, you have the right to obtain access to this personal data and detailed information on all facts relating to the processing of such personal data (Your right of access to personal data is governed by Section 21 of Act No 18/2018 on the protection of personal data and amending certain acts and Article 15 of Regulation (EU) 2016/679). We are obliged to provide you, on your request, with any personal data concerning you that we process, but we are entitled to charge you a reasonable fee covering our administrative costs for repeated provision of such data;
- Right of rectification of personal data, including the rectification of incorrect data concerning you or the completion of incomplete personal data (your right of rectification of personal data is governed by Section 22 of Act No 18/2018 on the protection of personal data and amending certain acts and Article 16 of Regulation (EU) 2016/679);
- Right of deletion of personal data (Your right to the deletion of personal data is governed by Section 23 of Act No 18/2018 on the protection of personal data and amending certain acts and Article 17 of Regulation (EU) 2016/679) and is applicable where:
(a) the personal data are not necessary for the purposes for which they were obtained or otherwise processed,
(b) your personal data have been processed unlawfully,
(c) you withdraw your consent for the processing of personal data and there is no other legal basis for their processing,
(d) you object to the processing of your personal data and there are no overriding reasons for the processing of your personal data or you object to the processing of your personal data under Section 27(2) of Act No 18/2018 on the protection of personal data and amending certain acts, (e) there are grounds for deletion under Act No 18/2018 on the protection of personal data and amending certain acts, other applicable legislation or an international agreement by which the Slovak Republic is bound or
(f) the personal data were acquired in relation to an offer of information society services under Section 15(1) of Act No 18/2018 on the protection of personal data and amending certain acts.
You cannot exercise the right of deletion of your personal data if such processing is necessary:
(a) for the establishment, exercise or defence of legal claims,
(b) for exercising the right of freedom of expression or information,
(c) for compliance with obligations under Act No 18/2018 on the protection of personal data and amending certain acts, Regulation (EU) 2016/679, other applicable legislation and international agreements by which the Slovak Republic is bound, or for the fulfilment of tasks carried out in the public interest or in the exercise of public authority vested in the person processing the personal data,
(d) for reasons of public interest in the field of public health under Section 16(2)(h) to (j) of Act No 18/2018 on the protection of personal data and amending certain acts, (e) for archiving purposes, scientific purposes, historical research purposes or statistical purposes under Section 78(8) of Act No 18/2018 on the protection of personal data and amending certain acts if it is likely that the exercise of your right would render impossible or seriously impair the achievement of the objectives of such processing;
- Right of the restriction of the processing of personal data (Your right to the restriction of personal of personal data is governed by Section 24 of Act No 18/2018 on the protection of personal data and amending certain acts and Article 16 of Regulation (EU) 2016/679) and is applicable where:
(a) you contest the accuracy of the personal data, in which case processing will be restricted until we verify the accuracy of the personal data,
(b) our processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use,
(c) we no longer need the personal data for the purpose of processing but you need them for the establishment, exercise or defence of legal claims, or,
(d) you object to the processing of personal data on grounds under Section 27(1) of Act No 18/2018 on the protection of personal data and amending certain acts or Article 21(1) of Regulation (EU) 2016/679.
If the processing of personal data is restricted, no processing other than storage can be carried out without your consent unless it is for the establishment, exercise or defence of legal claims, for the protection of persons or for reasons of public interest;
- Right to object to the processing of personal data (Your right to object to the processing of personal data is governed by Section 27 of Act No 18/2018 on the protection of personal data and amending certain acts and Article 21 of Regulation (EU) 2016/679) if personal data concerning you is processed on a legal basis under Section 13(1)(e) or (f) of Act No 18/2018 on the protection of personal data and amending certain acts or Article 6(1)(e) or (f) of Regulation (EU) 2016/679. In such cases, we, as the data controller, must not process the personal data unless we can demonstrate a necessary legitimate interest in the processing of the personal data that outweigh your rights or interests, or for the establishment, exercise or defence of legal claims;
- Right of portability of personal data (Your right of portability of personal data is governed by Section 26 of Act No 18/2018 on the protection of personal data and amending certain acts and Article 20 of Regulation (EU) 2016/679), meaning you have the right to transfer the personal data to another data controller in a structured, commonly used and machine-readable format if it is technically feasible and processing is carried out by automated means on a legal basis under Section 13(1)(a) or (b) of Act No 18/2018 on the protection of personal data and amending certain acts or Article 6(1)(a) or (b) of Regulation (EU) 2016/679, i.e. if we process personal data concerning you based on your consent or for the performance of a contract or a contractual obligation.
We also process personal data through processors – service providers, especially in the fields of social media and online marketing.
No personal data are shared with recipients located outside the European Union or the European Economic Area except for personal data concerning website visitors processed with the use of Google Analytics, GTM and FB Pixel. The use of these services involves the transfer of personal data to servers in the USA. The level of protection for personal data in the USA is comparable to that in the EU. On 12 July 2016, the European Commission decided, pursuant to Article 45 of the GDPR, that the terms of the EU-US Privacy Shield would guarantee an adequate level of protection for personal data in the USA.