The protection of personal data is important to us, and therefore in this section we will explain how we process personal data when operating the website www.lovestream.sk
The company LOVESTREAM, s. r. o., with its registered office at Bratislavská 87, 902 01 Pezinok, Slovak Republic, Company ID: 55 885 446, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, File No.: 174136/B ("Company" or "Controller") processes personal data in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on the amendment of certain acts ("Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC ("Regulation").
When the Controller processes personal data, you are the data subject, i.e. the person whose personal data relating to them are being processed.
Our company has a contact person in the field of personal data protection who serves as your point of contact for answering any questions regarding the protection of personal data or the receipt and processing of data subject requests. Contact details – email: info@lovestream.sk please include "GDPR" in the email subject line.
Persons acting on behalf of business partners and customers.
Common personal data that you as a data subject provide for a given purpose in the capacity of a person acting on behalf of a business partner and/or customer typically include first name, last name, email, and possibly phone number. Additional data are provided by customers to business partners with whom business cooperation is ongoing and to whose web interface the customer (i.e. visitor) may be redirected.
We process your personal data within the scope of the purpose for which you provide them to us. The purposes of processing include:
We process your personal data exclusively on legal grounds, where the data subject has given consent to the processing of their personal data for one or more specific purposes; or the processing is necessary for the performance of a contract/handling of a request via the contact form to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract; if personal data are not provided, the Company or its business partner cannot enter into a contractual relationship with you.
The Controller may also process your personal data without your consent if the processing of personal data is necessary for academic, artistic or literary purposes (Section 78(1) of the Act) or if the processing of personal data is necessary for the purposes of informing the public through mass media and the personal data are processed by a controller whose scope of business so requires (Section 78(2) of the Act); this does not apply if the processing of personal data for such a purpose violates the data subject's right to protection of their personality or the right to protection of privacy, or if such processing of personal data without the data subject's consent is excluded by a special regulation or an international treaty by which the Slovak Republic is bound.
The processing of personal data for the purposes of direct marketing of the Controller's own similar goods and services, if the data subject's contact details were obtained in connection with the sale of similar goods or services, or with whom the Controller is in a contractual relationship pursuant to Section 116(14) of the Electronic Communications Act is carried out on the basis of law. The data subject has the option to simply and free of charge refuse such use of contact details at the time of their collection and at each contact for the purpose of direct marketing, if they have not previously refused such use.
In the case of processing personal data for the purpose of providing marketing and other information about products, services and events organised by the Controller via electronic mail, the processing is based on the legitimate interest of the Controller in processing such personal data. The Controller's legitimate interest in this processing of data subjects' personal data consists of disseminating information about the Controller's offers and events organised by the Controller well in advance to its current and potential customers and event participants so that data subjects receive this information in a timely manner and do not miss it.
The Controller may also process personal data for the above-mentioned marketing purposes if the data subject has previously given specific consent for these purposes.
Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as they will be processed solely for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the Regulation, subject to the implementation of appropriate technical and organisational measures required by the Regulation to safeguard the rights and freedoms of data subjects.
Your personal data will be processed for the duration of the purpose for which consent was granted. After this period, the Controller will promptly dispose of (delete) the provided personal data, unless another legal basis for processing exists.
In cases where, in accordance with the Regulation or the Act, the Controller processes your personal data without your consent and for the purposes as stated above, it will dispose of (delete) your personal data immediately after the personal data can no longer be used for the purpose for which they were obtained, unless there is another legal reason for their processing (enforcement of legal claims, court proceedings, administrative proceedings, accounting and other matters, etc.).
When using our contact forms (if available), your personal data will be processed primarily until the data subject's question or enquiry submitted via the contact form has been answered, i.e. for the duration of the purpose of their processing.
When determining the retention periods for personal data, we follow the Act, the Regulation and other generally binding legal regulations (e.g. the Act on Archives and Registries and on the amendment of certain acts, the Accounting Act, and others).
Your personal data may be further provided to authorised persons pursuant to the relevant legal regulations, such as courts, district offices, law enforcement authorities, lawyers, notaries, auditors.
The Controller may also provide personal data of data subjects to processors if they have been entrusted with the processing of personal data on behalf of the Controller. To this end, we have concluded personal data processing agreements with processors, on the basis of which an adequate level of personal data protection is ensured, in accordance with applicable legal regulations relating to the protection of personal data. The processors to whom we provide your personal data include companies that externally perform accounting processing for us, or other companies with which we cooperate. Personal data may be provided in particular to business partners to whose goods and services the Controller's website redirects the customer/interested party (you).
The Controller does not transfer personal data to a third country or international organisation.
The Regulation characterises data processing as profiling if it involves automated processing of personal data, or the use of such personal data to evaluate certain personal aspects relating to a natural person.
The Controller does not carry out automated individual decision-making including profiling within the scope of its activities as a controller.
Below we list the rights to which you are entitled as a data subject under the Act and the Regulation.
Right of access to personal data – The data subject has the right to obtain confirmation from the Controller as to whether personal data concerning them are being processed. The Controller is obliged to provide the data subject with their personal data that it processes. For repeated provision of personal data requested by the data subject, the Controller may charge a reasonable fee corresponding to administrative costs. The Controller is obliged to provide personal data to the data subject in the manner requested.
Right to rectification of personal data – The data subject has the right to have the Controller correct inaccurate personal data concerning them without undue delay. Having regard to the purpose of personal data processing, the data subject has the right to have incomplete personal data completed.
Right to erasure of personal data – The data subject has the right to have the Controller erase personal data concerning them without undue delay, under the conditions set out in the Act and the Regulation. This includes, for example, cases where the personal data we have obtained about you are no longer necessary for the fulfilment of the original purpose of processing. However, your right must be assessed in light of all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means we may not be able to comply with your request.
The Controller is not obliged to erase personal data of a natural person if the processing of personal data is necessary:
Right to restriction of processing of personal data – The data subject has the right to have the Controller restrict the processing of personal data under the conditions set out in the Act.
If the processing of personal data has been restricted, apart from storage, the Controller may process personal data only with the data subject's consent or for the purpose of exercising a legal claim, for the protection of persons or for reasons of public interest. The Controller is obliged to inform the data subject whose processing of personal data is restricted before the restriction of processing of personal data is lifted.
Right to data portability – The data subject has the right to receive personal data concerning them, which they have provided to the Controller, in a structured, commonly used and machine-readable format, and has the right to transmit those personal data to another controller, where technically feasible and where the personal data are processed on the basis of the data subject's consent or on the legal basis of processing necessary for the performance of a contract to which the data subject is a party, or for the implementation of measures prior to entering into a contract at the request of the data subject, or the processing of personal data is carried out by automated means.
Right to object to the processing of personal data – The data subject has the right to object to the processing of their personal data on grounds relating to their particular situation, including profiling, if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, or the processing of personal data is necessary for the purposes of the legitimate interests of the Controller or a third party, except where such interests are overridden by the interests or rights of the data subject requiring the protection of personal data, in particular where the data subject is a child; this legal basis does not apply to the processing of personal data by public authorities in the performance of their tasks. The Controller may no longer process personal data unless it demonstrates compelling legitimate interests for the processing of personal data which override the rights or interests of the data subject, or grounds for the exercise of a legal claim. The data subject has the right to object to the processing of personal data concerning them on grounds relating to their particular situation, except where the processing of personal data is necessary for the performance of a task for reasons of public interest, if personal data are processed for scientific purposes, for historical research purposes or for statistical purposes.
Right to withdraw consent to the processing of personal data at any time – you have the right to withdraw your consent at any time with effect for the future. You may send the withdrawal of consent to the Controller at the contact details stated above. The withdrawal of consent does not affect the lawfulness of processing of personal data based on consent before its withdrawal.
If you believe that we process your personal data in violation of the law, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, Slovak Republic; tel.: +421 /2/ 3231 3214; or via the internet and email address: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk.
Your personal data are safe with us. In order to prevent unauthorised access to and misuse of your personal data, we have implemented appropriate measures of both a technical and organisational nature. We care greatly about the protection of your personal data. Therefore, we not only regularly check their security, but also continuously improve their protection. We strive to use security measures that, with regard to the current state of technology, provide adequate protection. The adopted security measures are then regularly reviewed.
TICKETS