Exclusive partners
Main partners
Partners
Exclusive media partners
Media partners
Protection of personal data is important to us, and in this section we will explain how we process personal data in operating the website www.lovestream.sk.
The company Lovestream Events, a. s., Laurinská 8, Bratislava – Staré Mesto district, 811 01, Company ID (IČO): 57 289 018, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sa, Insert No. 7869/B ("the company" or "the controller") processes personal data in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment of Certain Acts ("the Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC ("the Regulation").
When the controller processes personal data, you are the data subject, i.e. the person to whom the processed personal data relates.
Our company has a contact person for personal data protection matters, who is your point of contact for answering any questions concerning personal data protection or for receiving and handling requests from data subjects. Contact details – email: info@lovestream.sk – please state "GDPR" in the subject line of the email.
Persons acting on behalf of business partners, and customers.
The common personal data that you, as a data subject, provide to us for the given purpose in the position of a person acting on behalf of a business partner and/or a customer, usually include first name, surname, email, and possibly a telephone number. Customers provide further data to the business partners with whom business cooperation takes place and to whose web interface the customer (i.e. the visitor) may be redirected.
We process your personal data within the purpose for which you provide it to us. The purposes of processing include:
We process your personal data on legal grounds, depending on the specific purpose of processing, in particular on the basis of performance of a contract, the controller's legitimate interest, fulfillment of a legal obligation, or in cases where the data subject has given consent to the processing of their personal data for one or more specific purposes; processing may also be necessary for the performance of a contract/handling a request under the contact form to which the data subject is a party, or for taking steps prior to entering into a contract at the request of the data subject; if the personal data is not provided, the company or its business partner will not be able to enter into a contractual relationship with you.
Processing of personal data for the purposes of arranging and securing third-party accommodation services (purpose no. 5) is carried out on the legal basis of performance of a contract, or of taking steps prior to entering into a contract at the request of the data subject.
The controller may also process your personal data without your consent if the processing is necessary for an academic purpose, an artistic purpose, or a literary purpose (§ 78 par. 1 of the Act), or if the processing of personal data is necessary for the purposes of informing the public through mass media and if the personal data is processed by a controller for whom this follows from its scope of activity (§ 78 par. 2 of the Act); this does not apply if, by processing personal data for such a purpose, the controller violates the data subject's right to protection of their personality or right to privacy, or if such processing of personal data without the data subject's consent is excluded by a special regulation or an international treaty binding on the Slovak Republic.
Processing of personal data for the purposes of direct marketing of the controller's own similar goods and services, where the data subject's contact details were obtained in connection with the sale of similar goods or services, or with whom the controller is in a contractual relationship, pursuant to § 116 par. 14 of the Act on Electronic Communications, is carried out on the basis of law. The data subject has the option to simply and free of charge refuse such use of contact details at any time, at the time they are collected and at every contact made for the purpose of direct marketing, provided they have not previously refused such use.
In the case of processing personal data for the purpose of providing marketing and other information about products, services, and events organized by the controller via electronic mail, this is processing of the data subject's personal data based on the controller's legitimate interest in such processing. The controller's legitimate interest in this processing of data subjects' personal data consists of disseminating information about the controller's offers and events organized by the controller sufficiently in advance to its current and potential customers and event participants, so that data subjects receive this information in time and do not miss it. The data subject has the right to object at any time to the processing of personal data for direct marketing purposes.
The controller may also process personal data for the above marketing purposes if the data subject has previously given specific consent for these purposes. The controller may process personal data for marketing purposes either on the basis of legitimate interest or on the basis of the data subject's prior consent, depending on the specific manner of processing.
Personal data must be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed. Personal data may be kept for longer periods insofar as it will be processed solely for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes in accordance with Article 89(1) of the Regulation, subject to implementation of the appropriate technical and organizational measures required by the Regulation to safeguard the rights and freedoms of data subjects.
Your personal data will be processed for the period necessary to achieve the purpose for which consent was granted. Your personal data will be processed for the period necessary to achieve the purpose of processing, depending on the specific legal basis for processing. After this period expires, the controller will promptly carry out the destruction (erasure) of the personal data provided, unless there is another legal basis for processing.
In cases where, in accordance with the Regulation or the Act, the controller processes your personal data without your consent, and for the purposes set out above, it will destroy (erase) your personal data immediately after it is no longer possible to use the personal data for the purpose for which it was obtained, unless there is any further legal reason for its processing (asserting legal claims, conducting litigation, administrative proceedings, accounting and other agendas, etc.).
When using our contact forms (where available), your personal data will be processed mainly until the data subject's submitted question or inquiry sent via the contact form has been answered, i.e. for the duration of the purpose of its processing.
When determining retention periods for personal data, we are guided by the Act, the Regulation, and other generally binding legal regulations (e.g. the Act on Archives and Registries and on Amendments to Certain Acts, the Accounting Act, and others).
Your personal data may be further provided to authorized persons pursuant to the relevant legal regulations, such as courts, district authorities, law enforcement bodies, attorneys, notaries, and auditors.
The controller may also provide personal data of data subjects to processors, if they have been entrusted with processing personal data on behalf of the controller. To this end, we have concluded personal data processing agreements with processors, under which an adequate level of personal data protection is ensured, in accordance with applicable legal regulations on personal data protection. Processors to whom we provide your personal data include companies that externally perform accounting processing for us, or other companies we cooperate with.
Personal data may also be provided in particular to business partners to whose goods and services the controller's website redirects the customer/interested party (you). In the case of a purchase or reservation of accommodation capacities (third-party services) via our website, we provide your personal data — first name, surname, email, and telephone number — directly to the accommodation provider, the company ETN Slovakia spol. s r.o., with registered office at Tupého 23/A, Bratislava 831 01, Company ID (IČO): 31 379 508, for the purposes of arranging, processing, and confirming the accommodation reservation.
The controller does not carry out any transfer of personal data to a third country or to an international organization.
The Regulation characterizes data processing as profiling if it involves automated processing of personal data, or the use of such personal data to evaluate certain personal aspects relating to a natural person.
The controller does not carry out automated individual decision-making, including profiling, as part of its activities as controller.
Below we list the rights that you, as a data subject, are entitled to under the Act and the Regulation.
Right of access to personal data – The data subject has the right to obtain confirmation from the controller as to whether personal data concerning them is being processed. The controller is obliged to provide the data subject with the personal data it processes. The controller may charge a reasonable fee corresponding to administrative costs for repeated provision of personal data requested by the data subject. The controller is obliged to provide the personal data to the data subject in the manner requested by them.
Right to rectification of personal data – The data subject has the right to have the controller, without undue delay, correct inaccurate personal data concerning them. With regard to the purpose of processing, the data subject has the right to have incomplete personal data completed.
Right to erasure of personal data – The data subject has the right to have the controller, without undue delay, erase personal data concerning them, under the conditions set out in the Act and the Regulation. This applies, for example, in cases where the personal data we obtained about you is no longer needed to fulfill the original purpose of processing. However, your right must be assessed in light of all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means we will not be able to comply with your request.
The controller is not obliged to proceed with the erasure of a natural person's personal data if processing of the personal data is necessary:
Right to restriction of processing of personal data – The data subject has the right to have the controller restrict the processing of personal data, under the conditions set out in the Act.
If processing of personal data has been restricted, the controller may, apart from storage, process the personal data only with the data subject's consent, or for the purpose of establishing a legal claim, for the protection of persons, or for reasons of public interest. The controller is obliged to inform the data subject whose processing of personal data has been restricted before the restriction of processing is lifted.
Right to data portability – The data subject has the right to receive the personal data concerning them, which they provided to the controller, in a structured, commonly used, and machine-readable format, and has the right to transfer that personal data to another controller, where technically feasible, if the personal data is processed on the basis of the data subject's consent or on the legal basis of processing necessary for the performance of a contract to which the data subject is a party, or for taking steps prior to entering into a contract at the request of the data subject, or if the processing of personal data is carried out by automated means.
Right to object to processing of personal data – The data subject has the right to object to the processing of their personal data for reasons relating to their particular situation, including profiling, where the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or where the processing of personal data is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or rights of the data subject requiring protection of personal data, in particular where the data subject is a child; this legal basis does not apply to processing of personal data by public authorities in the performance of their tasks. The controller may not continue to process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the rights or interests of the data subject, or grounds for the establishment, exercise, or defense of a legal claim. The data subject has the right to object to the processing of personal data concerning them for reasons relating to their particular situation, except where the processing of personal data is necessary for the performance of a task carried out for reasons of public interest, or where the personal data is processed for scientific purposes, historical research purposes, or statistical purposes.
Right to withdraw consent to the processing of personal data at any time – you have the right to withdraw your consent at any time, with effect for the future. Withdrawal of consent may be sent to the controller at the contact details given above. Withdrawal of consent does not affect the lawfulness of processing of personal data based on consent given before its withdrawal.
If you believe that we are processing your personal data in violation of the law, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, Bratislava, Slovak Republic; telephone number: +421 /2/ 3231 3214; or via the website and email address: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk.
Your personal data is safe with us. To prevent unauthorized access to and misuse of your personal data, we have implemented appropriate technical and organizational measures. Protecting your personal data matters a great deal to us. That is why we not only regularly review its security but also continuously improve its protection. We strive to use security measures that, given the current state of technology, provide adequate protection. The security measures adopted are then regularly reassessed.