Personal data protection principles
We process personal data in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the “Act on Personal Data”). The security of personal data and its lawful processing is of paramount importance to us. Here you will find out how we process your personal data and how we achieve their security.
- OUR DATA
Who are we?
Personal data is processed by
Business name: HEMING hunting s. r. o.
Registered office: Mierová 371/24, Bratislava - Ružinov district 821 05
Company registered in the Commercial Register of the Municipal Court Bratislava III in section Sro, vl. no. 176338/B
Business ID: 56 060 661
Tax ID: 2122209694
VAT: SK2122209694
Zast.: Mgr. Roman Valent - manager
e-mail: heming@heminghunting.com
tel. no.: +421 918 900 409
(hereinafter referred to as the "operator").
- RESPONSIBLE PERSON
The operator has an appointed responsible person who supervises the proper processing of personal data. You can contact him/her by email at:
Name and surname: Roman Valent
Email: roman@heminghunting.com
- CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND PERIOD
What personal data do we process, for what purpose, on what legal basis and for what period?
We only process personal data that we absolutely need to achieve the stated purpose. We process personal data for the following purposes:
Accounting agenda
We process personal data of passengers and their contact persons, or other affected persons, in the following scope: name, surname, address, phone number, email, information about the price of the selected tour, payment terms, account number, or other necessary personal data for the purposes of accounting and fulfilling obligations arising from the Accounting Act and other relevant legal regulations. The legal basis for processing personal data is the fulfillment of legal obligations. We keep accounting documents for 10 years.
Travel agency activities
We process personal data of customers, passengers and their contact persons, or other affected persons, in the following scope: name, surname, date of birth, ID card or passport number, address, phone number, email, information about the selected tour or tourism service, or other necessary personal data for the purpose of concluding and fulfilling a travel contract or a contract forming a linked tourism service, including pre-contractual communication. The legal basis for processing personal data is the performance of the contract. We store the personal data of interested parties from pre-contractual communication for 6 months. We store personal data processed for the purpose of concluding and fulfilling the contract for 10 years.
Conclusion of insurance contracts
We process the personal data of passengers who are interested in concluding insurance through our travel agency to the extent necessary for concluding an insurance contract between the passenger and the selected insurance company. We process this personal data only as an intermediary, and it is provided to the selected insurance company.
Complaints
We process the personal data of passengers in the scope of name, surname, address, phone number, email, trip details and subject of the complaint for the purpose of receiving, processing and recording the complaint. The legal basis for processing this personal data is the fulfillment of a legal obligation. We store personal data for 10 years from the date of handling the complaint.
Website form
We process the personal data of interested parties who have sent an inquiry via the heming.com website in the scope of name, surname, email and subject of the message for the purpose of receiving and handling the inquiry. The legal basis for processing them is the fulfillment of the contract, or pre-contractual relationships related to the conclusion of the contract. We store personal data for 6 months.
Client portal heminghunting.com
We process the personal data of registered users in the scope of name, surname, date of birth, ID card or passport number, address, phone number, email, data on the selected tour or tourism service, or other personal data processed in the user account, for the purpose of providing online services, including recording and managing tour contracts, customer care, etc. The legal basis for processing personal data is the consent of the data subject, which is provided during registration. We process personal data for the duration of registration, and consent can be revoked at any time by deleting the user account or sending a notification to heming@heminghunting.com.
Photos and videos
We process photos and videos of travelers from tours only with their consent. The legal basis is the consent of the data subject, which can be revoked at any time by sending a written notification. We process personal data for a period of 10 years.
Direct marketing
We process travelers' personal data in the scope of name, surname, email, phone number and information about tours and provided tourism services for the purpose of direct marketing, in order to inform them about our tour offers, news and promotions. In the case of a traveler who is our customer, the legal basis for processing them is our legitimate interest. In the case of a traveler who is our customer, the legal basis for their processing is our legitimate interest. In the case of a prospective customer who is not our customer, the legal basis is the consent of the data subject. The interested party can provide consent by subscribing to the newsletter on the heminghunting.com website or in another appropriate manner. We process personal data for a period of 10 years, or shorter if the data subject objects to the processing of personal data for this purpose or withdraws their consent.
Personalized offers
With their consent, we may process the personal data of travelers in the scope of name, surname, phone number, email and information about tours and provided tourism services, including for the purpose of targeting personalized advertising. The legal basis is the consent of the data subject, which the data subject may withdraw at any time by sending a notification to heming@heminghunting.com. We process personal data for a period of 10 years, or shorter if the data subject objects to the processing of personal data for this purpose or withdraws their consent.
Marketing competitions
With their consent, we may process the personal data of competitors in the scope of name, surname, phone number, email, also for the purpose of implementing a marketing competition. The legal basis is the consent of the data subject, which the data subject may revoke at any time by sending a notification to heming@heminghunting.com. We process personal data for the duration of the competition and 1 year after its end, or shorter if the data subject objects to the processing of personal data for this purpose or revokes their consent.
Social network management
We process the personal data of fans of our official social network pages for the purposes of social network management. The legal basis for processing personal data is a legitimate interest, which is the presentation of the operator and its services via social networks. We process personal data for the entire time you are a fan of our site.
Cookies
Information on how we process cookies can be found on the Cookie Information subpage.
- CONSENT
In the above cases, we process personal data on the legal basis of the consent of the data subject, but only if the data subject provides us with consent. Consent is voluntary and the data subject may withdraw it at any time by sending a written notification to our email heming@heminghunting.com or by unsubscribing from the newsletter.
- PERSONS UNDER 16 YEARS OF AGE
Are you under 16 years of age?
The offer of goods and services on this website is not intended for persons under 16 years of age. If we process personal data in connection with information security services based on your consent, you can provide this consent to us only if you have reached the age of 16. We do not process personal data of persons under 16 years of age.
- RECIPIENTS
To whom do we provide your personal data?
We provide or make personal data available to third parties only if we are required to do so by a specific law or if it is necessary to provide a trip and related services. We provide or make personal data available in particular to:
- accommodation facilities,
- airlines and other transport companies,
- tour guides,
- travel agencies in the case of arranging a trip, cooperating and local travel agencies,
- insurance companies,
- embassies, embassies and other representative bodies in the case of securing visas and permits,
- public authorities,
- courts, law enforcement agencies and public authorities,
- and other authorized entities.
We also provide your personal data to intermediaries who provide us with professional and specialized services. We have concluded a personal data processing agreement with each intermediary and have bound them to confidentiality. We have entrusted the processing of personal data to:
- an accounting firm,
- a website administrator,
- an advertising agency,
- intermediaries.
- guides and other persons providing services under a contract,
- courts, law enforcement agencies, SOI and other public administration bodies
- THIRD COUNTRIES
Where do we transfer your personal data?
We transfer personal data to third countries, depending on the chosen destination and to the USA in connection with the use of the social network and Google services. The mentioned country provides adequate guarantees for the security of your personal data.
- COMPLAINT
Are you not satisfied?
If you are not satisfied with how we process your personal data, you can let us know by email at heming@heminghunting.com . You also have the option to file a complaint with the Personal Data Protection Office if you believe that we are processing your personal data unlawfully.
Personal Data Protection Authority
Hraničná 12, 820 07 Bratislava
Email: statny.dozor@pdp.gov.sk
- METHOD OF PROCESSING PERSONAL DATA
How do we process your personal data?
We process personal data in electronic and paper form. We do not use any means of automated individual decision-making.
- RIGHTS OF DATA SUBJECTS
What rights do you have as a data subject?
The GDPR grants you certain rights with which you can influence how we process your personal data. However, not all rights can be exercised in all circumstances. The legal basis for processing personal data must be taken into account.
a, Right to access data
You have the right to know whether we are processing your personal data. If we are processing your personal data, you can ask us for access to the data. Upon your request, we will issue a confirmation with information about the processing of your personal data by our company.
b, Right to rectification
You have the right to have your personal data processed by us be accurate, complete and up-to-date. If they are incorrect or out-of-date, you can ask us to correct or supplement them. We will carry out the correction without undue delay, taking into account technical possibilities.
c, Right to erasure
In certain circumstances, you have the right to have your personal data erased. You can ask us to erase them at any time. We will erase your personal data if:
- we no longer need them for the purpose for which you provided them to us;
- you withdraw your consent;
- you object to the processing of your personal data;
- we are processing your personal data unlawfully;
- the personal data must be erased to comply with a legal obligation;
- you are a child or the parent of a child who has consented to the processing of personal data via the Internet;
d, Right to restriction of processing
You may ask us to restrict the processing of your personal data. If we grant your request, we will only store your data and will not process it any further. The processing of your data will be restricted if:
- you inform us that it is incorrect, pending verification of its accuracy;
- we are processing it unlawfully, but you do not agree to its deletion and instead request that we restrict the processing of your personal data;
- we no longer need it, but you need it to establish, exercise or defend your rights;
- you object to the processing of your personal data, pending verification of whether our legitimate interests override your reasons.
e, Right to data portability
Since we do not process your personal data in the necessary electronic form, it is not possible to exercise the right to data portability.
f, Right to object
In cases where we process your personal data on the legal basis of legitimate interest, you have the right to object to their processing. Unless we demonstrate that there is a serious legitimate reason for their processing that outweighs your interests or rights, the processing of personal data will be terminated without undue delay based on your objection.
You can send us your request to exercise any of the above rights by email or post to the address provided above. We will deal with all your requests and inform you of the outcome of their processing in the same way as you submit the request.
- FINAL PROVISIONS
This Privacy Policy shall enter into force on the date of its publication on 10.7.2023. We reserve the right to change this policy if there is a change in the processing of personal data in our company.