Privacy Policy

§ 1 What is personal data?

Personal data are data relating to an identified natural person or identifiable natural person that can be identified directly or indirectly, in particular by a generally applicable identifier, another identifier such as name, surname, identification number, location data, or online identifier, or by one or more characteristics or features that constitute his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

§ 2 What personal data do we process?

• your identification details (in particular your name and surname, the number and period of validity of the travel document, except where justified, your date of birth and birth number if assigned);
• contact details (in particular telephone number, e-mail address, permanent residence address or other address you provide);
• information about your orders and in relation to them (e.g. their history and bank account number);
• information about your health related to your use of our services, such as a disability or pregnancy;
• data on your behaviour on the Holidayo website, including your IP address, its derived location and other technical information (cookies);
• information about your behaviour when reading our messages (in particular the times when messages are opened, information about the device on which you are reading messages, such as the IP address and the location derived from it, the device identification, its technical parameters, the operating system, the browser used, and also data obtained from cookies);
• derived data (in particular personal data derived from your settings, data about the services you order from us);
• data related to the use of our customer service, namely, the identification of the messages you send us, identifiers such as IP addresses;
• other optional data that you provide to us;
• other electronic data (cookie usage information, the website from which you came to our website, IP address, date and time of access, search queries, http and https response code, data groups to be transmitted, browser and computer operating system information).

§ 3 What is personal data processing?

Processing of personal data means any processing operation or set of operations involving personal data or sets of personal data, in particular the acquisition, recording, sorting, structuring, storing, modifying, searching, browsing, using, transferring, disseminating or otherwise providing, regrouping or combining, restricting or erasing, whether by automated or non-automated means. We process your personal data as a controller, i.e. we determine how personal data will be processed, for what purpose and for how long, and if necessary we select other processors to assist us with the processing.

§ 4 Scope of personal data processing

We process your personal data appropriately and only to the extent necessary, in particular for the following purposes:

• providing services, performing a contract and managing the contractual relationship;
• managing customer accounts;
• communicating with customers, assessing satisfaction, publishing reviews, and handling complaints and claims;
• processing enquiries, preparing travel offers, personalising offers and communicating with customers;
• e-mail marketing – sending commercial communications and offering our services;
• direct marketing and creating personalised content and advertising;
• improving the quality of our services, analysing visits to our website and your behaviour on the website;
• protecting our rights, property or security, or the rights, property or security of other persons;
• accounting and tax purposes.

When processing enquiries, preparing offers and communicating with customers, we may also use technological tools, including artificial intelligence tools. We always use these tools only to an appropriate and necessary extent, particularly to make the provision of our services and communication with customers more efficient.

§ 5 Rights of the data subject

The definition of the rights of the person concerned shall in particular define the oral procedure. Paragraphs 19 and following. The law on personal data protection. The data subject shall, in particular, have the following rights in relation to the processing of personal data:

1. Right of access to personal data

The right of access allows you to request us at any time, and within 60 days we will provide you with information about what personal data we process and on what legal basis. If any of your personal data is changed, you have the right to supplement or amend it.

1. Right to rectification of personal data

1. Right to erasure of personal data

Your other right is the right to erasure (right to be forgotten). In that case, we will delete all your personal data from our systems and from the systems of our processors within the meaning of point 6 of this Privacy Policy, as well as from backups within 60 days.

In some cases, we are legally obliged to keep records of the tax documents issued for a period set by the relevant law. In such a case, we will delete only those personal data whose retention cannot be justified by the fulfilment of a legal obligation under the relevant legislation.

1. Right to restrict the processing of personal data

1. Right to the portability of personal data

If you wish to take your personal data and transfer it to someone else, we will proceed in the same way as when you exercise the right of access, except that we will deliver or send the information to you in a machine-readable form within 60 days.

1. Right to object to the processing of personal data

1. Right to lodge a complaint

If you feel that your data is not being handled in accordance with the Data Protection Act, you have the right to lodge a complaint with the supervisory authority - the Data Protection Authority, located at Frontier 12, 820 07 Bratislava 27.

We believe that every problem has a solution, so we'd like you to inform us of this suspicion first so we can correct any mistake.

1. The right to withdraw consent at any time

If the processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal; the data subject must be informed of this before giving consent. The data subject may withdraw consent in the same manner in which it was given.

You may also contact us at any time regarding the processing of personal data (questions, suggestions or complaints) by e-mail at info@holidayo.sk.

§ 6 Security and protection of personal data

We will handle your personal data responsibly and in accordance with applicable legislation. Personal data is processed manually and by automated means. We duly record all processing activities in accordance with applicable legislation.

We protect personal data to the greatest possible extent by appropriate technical and organisational measures corresponding to the current state of technological development. We have adopted and maintain measures designed to prevent misuse, loss, damage, unauthorised access to or destruction of your personal data.

Personal data is stored primarily on secure servers in the European Union or the European Economic Area. When certain external technological, communication, cloud or automation tools are used, data may also be processed or accessed outside the European Union or the European Economic Area. Such processing takes place only when the conditions under applicable legislation are met and appropriate safeguards for the protection of personal data are ensured.

When using technological tools, including artificial intelligence tools, we use personal data only to the extent necessary to fulfil a specific purpose. Where the nature of the processing allows, we minimise or pseudonymise personal data.

§ 7 Contact person:

Peter Strnisko

Address: Landererova 8, 811 09 Bratislava – Staré Mesto

E-mail: info@holidayo.com

§ 8 Cookies

When you visit our website, we process data about your behaviour on the website and derived data. For this purpose, we use cookies and similar technologies to store and read data on your device.

What are cookies?

Cookies are small text files used to store small amounts of information. They are stored on your device when a website is loaded in your browser. These cookies help us ensure that the website functions correctly, improve its security, provide users with a better experience, understand how the website operates, and analyse what works and where improvements are needed.

1. Technical or functional cookies

Some cookies ensure that certain parts of the website function correctly and that your user preferences remain known. By placing functional cookies, we make it easier for you to visit our website. This means that you do not have to enter the same information repeatedly, and, for example, items remain in your shopping basket until you pay. We may place these cookies without your consent.

1. Statistical cookies and analytics

We use statistical cookies to optimise the website experience for our users. These statistical cookies give us insight into how our website is used. We ask for your permission to place statistical cookies.

1. Marketing and tracking cookies

With your consent, we also use cookies on our website for marketing purposes. Using data about your behaviour on the website obtained through these cookies and derived data, we can tailor the displayed offers to you. Based on the offers you have viewed, we may also infer which customer group you belong to and accordingly offer you other services on the website that may interest you.

1. Social media

We have included content from Facebook and Instagram on our website to promote web pages (for example, “like” or “pin”) or share them on social networks such as Facebook and Instagram. This content is embedded using code originating from Facebook and Instagram and places cookies. This content may store and process certain information for personalised advertising purposes.

Please read the privacy statements of these social networks, which may change periodically, to learn what they do with your personal data processed through these cookies. The data obtained is anonymised as much as possible. Facebook and Instagram are located in the United States.

You can also browse our website in a mode that does not allow personal data to be collected. You can disable cookies on your computer.

More information about cookies is available in our Cookie Policy and settings.

Visiting our website

When you visit our website for the first time, we show you a pop-up explaining cookies. Once you click “Save preferences”, you agree that we may use the cookie and plug-in categories you selected in the pop-up as described in the Cookie Policy. You can disable cookies through your browser, but please note that our website may then no longer function correctly.

When you browse our website, we record your IP address, how long you stay on the website and which page you came from. We consider the use of cookies to measure website traffic and customise the website display to be a legitimate interest of the controller, because we believe this enables us to offer you even better services.

Registration on our website

If you create an account on our website, we process your personal data under § 2 (in particular identification and contact details, your settings and information about any orders) on the basis of your registration and the resulting contractual relationship for the duration of your account. You may deactivate or cancel your user account at any time.

Legitimate interest

If you have a user account with us, we also process your personal data under § 2 (in particular identification and contact details, your settings, order information, information about your behaviour on the website and behaviour when reading messages) on the basis of our legitimate interest, without your consent, for the following purposes:

• obtaining information that will enable us to improve our services for you in the future, particularly by determining your satisfaction with our services; our legitimate interest is to improve our services for you,
• providing tailored offers and targeted advertising; our legitimate interest is the effective promotion of our services,
• testing new functionality.

For the purposes stated above, we analyse your data and derive additional data from it. In this way, we may also use data about your behaviour on the website obtained before you registered (unless you disabled website personalisation), and we may collect data about your behaviour on the website even when you are not signed in.

You can disable this function at any time in Cookie settings.

Consent

With your express consent, to the extent and for the period necessary, particularly to fulfil an order, we may also process other data, such as health data and a national identification number (when arranging visas).

Compliance with obligations

To comply with obligations arising from legislation (in particular Act No. 40/1964 Coll., the Civil Code; Act No. 250/2007 Coll. on Consumer Protection; Act No. 102/2014 Coll. on Consumer Protection in the Sale of Goods or Provision of Services under a Distance Contract or a Contract Concluded Away from the Seller’s Premises; Act No. 281/2001 Coll. on Package Travel, Conditions for the Business of Travel Agencies and Travel Agents and on Amendments to the Civil Code, as amended; Act No. 222/2004 Coll. on Value Added Tax; and Act No. 431/2002 Coll. on Accounting), we may process your personal data without your consent for a period of 10 years.

§ 9 Recipients and processors

To the extent necessary, we may also provide your personal data to other entities acting as controllers or processors, in particular:

• our partners to whom we provide data for the purpose of analysing visits to our websites, your behaviour on the websites and commercial conversions;
• our partners who provide the technical operation of a specific service for us, and operators of technologies that we use for our services;
• providers of technological, communication, automation, cloud, analytical and similar digital tools;
• providers of artificial intelligence tools where they are used in providing our services, customer communication or internal processes;
• our providers of legal, accounting and tax advice;
• partners operating payment systems for the purpose of securing payment, particularly in connection with card payments;
• travel agencies and other third parties that provide additional services for your order where this is necessary to fulfil your order or handle a claim;
• public authorities;
• partners who arrange airline ticket reservations for us in international reservation systems;
• providers of chat tools.

§ 10 Confidentiality

We assure you that our employees, collaborators, partners and processors who process your personal data are required to maintain confidentiality regarding personal data and security measures whose disclosure would jeopardise the security of your personal data. This duty of confidentiality continues after the end of their contractual relationship with us.

§ 11 Final provisions

If you have any questions, you may contact our responsible person at any time. This Privacy and Personal Data Protection document takes effect on 1 May 2024.