In Lux d.o.o. as the Controller of processing of personal data (further: controller) protects your privacy, made possible by the best and safest way of using the internet. This document refers to the website www.inexcelsishotel.com and the control of the way data is collected and used.
In order to help us protect your privacy, we ask you to read this text in its entirety to understand what data we collect and the way in which we use them. In the context of this document we use the legal term „Data subject“ when referring to you as the user of the website.
You can send all questions related to the confidentiality of data to the controller, by e-mail to the following address: email@example.com.
Collecting personal data
In Lux d.o.o. collects personal information such as: name, family name, phone number, bank card number, e-mail address and other information received with your query in the "BOOK NOW" section in order to provide the best services when booking your accommodation.
In Lux d.o.o. also automatically collects data on your hard drive or computer software. These data may include: your IP address, browser type, domain name, access time, and website address. With this data In Lux d.o.o. is used to offer your services, maintain their quality, and get general statistics about using the site.
The use of your personal data
In Lux d.o.o. collects your personal information and uses them to maintain a website and provide you with the services you are looking for.
In Lux d.o.o. will not forward data to third parties.
In Lux d.o.o.. will not sell or lease user lists to third parties unless it has your permission.
In Lux d.o.o. keeps your personal information in accordance with the deadlines prescribed by the binding legal regulations. If deadlines are not prescribed, then as much as is necessary for the purpose for which they are collected, including the applicable time limits. After expiration of certain deadlines, personal data will be deleted or destroyed in another appropriate manner.
We inform you that in the event of a break in our system and theft of personal data will be notified within 72 hours.
We inform you that you have the right to inspect your personal information that we have collected, processed and stored for you.
The possibility of contacting a web site
The website contains information that allows quick contact via the "BOOK NOW" section as you can contact us.
If the respondent contacts the data processing manager of the contact form, the transferred personal data is automatically saved.
Personal data transferred voluntarily by the respondent to the Personal Data Processing Manager are automatically stored for processing or further communication with the respondent. There is no transfer of this kind of personal data to the third party.
Our site contains buttons from the social media network: facebook, instagram, youtube, which you can recommend offers and experiences at www.inexcelsishotel.com.
By clicking on this button, site operators can transfer the following information: IP address, browser and operating system information, screen resolution, installed browser plug-ins like Adobe Flash Player, visitor origin, current page URL.
Subscribe to the newsletter
On the web site, users can subscribe to the newsletter. The Entry House determines which types of personal information is being transmitted as well as the information when the newsletter is requested by the Personal Data Processing Manager.
When registering for receiving a newsletter, the IP address of the computer system issued by the Internet service provider used by the respondent during registration and the date and time of registration are also saved. Collecting this information is necessary to prevent abuse of the email address of the respondent in the future and serves as the legal protection of the data processing manager.
The personal data collected when registering will be used exclusively for the purpose of sending the newsletter. Furthermore, subscribers will be notified via email of changes to the newsletter or changes in technical circumstances as long as necessary to send newsletters unhindered. There will be no transfer of collected personal data to a third party. Subscribers to the newsletter may terminate the respondent at any time. Privileges for storing personal information that a respondent has given to send a newsletter may be withdrawn at any time. For a need to cancel a guest in each newsletter, find the relevant link. Printing from the newsletter is also possible directly from the website or by direct communication with the data processing manager.
Website In Lux d.o.o. contains information which enable quick contact via the column „Contact“ as well as direct communication, including an e-mail adress where we can be reached.
If the data subject contacts the controller of personal data via e-mail or the contact form, the transmitted personal data is automatically stored.
The personal data transmitted voluntarily by the data subject to the controller are automatically stored with the purpose of processing or further communication with the data subject. There is no transmission of this type of personal data to a third party.
The controller will process and keep personal data of a data subject exclusively during the time necessary to realize the objectives of keeping personal data, or during the timeframe allowed by EU legislature or other legislators who have jurisdiction over the controller.
If the objective which required storing personal data cannot be fulfilled or the timeframe for keeping personal data set by EU legislature or other competent legislators expires, the personal data of the data subject will be routinely erased or blocked in accordance with the legal prerequisites.
Rights of the data subject
THE RIGHT TO OBTAIN CONFIRMATION OF PERSONAL DATA
Every data subject has the right guaranteed by EU legislature to obtain confirmation from the controller about whether their personal data are being used or processed. If the data subject wants to exercise this right to obtain confirmation, they can contact the controller at any time at the e-mail address: firstname.lastname@example.org.
THE RIGHT OF ACCESS TO PERSONAL DATA
Every data subject has the right guaranteed by EU legislature to obtain information from the controller about their stored personal data, as well as a copy of demanded personal data, free of charge and at any time. Furthermore, European regulations and directives allow the data subject to access the following information:
the purpose of the processing;
the categories of personal data concerned;
the recipient or the category of recipients to whom the personal data have been or will be disclosed, especially the recipients from third countries or international organizations;
when possible, the foreseen timeframe of keeping the personal data, or in case of impossibility, the criteria that determines the timeframe;
the existence of the right to request rectification or erasure of personal data, restriction of processing, or the right to object to the processing of personal data;
the existence of the right to submit a complaint to a supervisory authority;
if the personal data are not collected directly from the data subject, available information about the source of the data;
the existence of an automated decision-making process which is referred to by the article 22, paragraphs 1 and 4 of the General Data Protection Regulation, and in the specific case the available information about the logic of the automatism, as well as the importance and foreseeable consequences relative to the data subject.
Furthermore, the data subject has the right to be informed whether their personal data are transmitted to third countries or international organizations. In that case the data subject has the right to be informed about security measures taken in the data transmission.
If the data subject wants to use this right of access, they can contact the controller at any moment at the e-mail address: email@example.com
THE RIGHT TO RECTIFICATION OF PERSONAL DATA
Every data subject has the right guaranteed by EU legislature to receive a rectification of inaccurate personal data from the controller at any moment. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If the data subject wants to use this right to rectification, they can contact the controller at any moment at the e-mail address: firstname.lastname@example.org
THE RIGHT TO ERASURE (THE RIGHT TO BE FORGOTTEN)
Every data subject has the right guaranteed by EU legislature to demand from the controller the erasure of personal data connected to them without delay, at any moment. The controller has the obligation to erase all personal data without delay, where at least one of these condition is applicable, as long as the processing is not necessary:
The personal data are no longer necessary in relation to the purpose for which they were collected or processed.
The data subject withdrew consent for the processing of personal data on which the processing is based according to article 6, paragraph 1, or article 9, paragraph 2 of the General Data Protection Regulation, and where there is no other legal ground for the processing.
The data subject objects to the processing in accordance to article 21, paragraph 1 of the General Data Protection Regulation, and there are no legitimate grounds for the processing, or the data subject objects to the processing in accordance to article 21, paragraph 2 of the General Data Protection Regulation.
The personal data have been unlawfully processed.
The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;.
The personal data have been collected in relation to the offer of information society services referred to in article 8, paragraph 1 of the General Data Protection Regulation.
If at least one of the listed reasons is applicable, and the data subject requests the erasure of personal data which are collected by the website In Lux d.o.o., they can contact the controller at the e-mail address: email@example.com
The controller will make sure that the erasure gets carried out without delay.
Where the controller has made the personal data public and is obliged according to article 17, paragraph 1 of the General Dara Protection Regulation to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data. The controller will implement the mentioned measures in each individual case on the In Lux d.o.o. website.
THE RIGHT TO RESTRICTION OF PROCESSING
Every data subject has the right guaranteed by the EU legislature to obtain from the controller the restriction of processing where one of the following applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
The data subject has objected to processing pursuant to article 21, paragraph 1 of the General Data Protection Regulation, pending the verification whether the legitimate grounds of the controller override those of the data subject.
If at least one of the reasons listed above applies, and the data subject requests the restriction of processing of the personal data which get collected by the website In Lux d.o.o., they can contact the controller at the e-mail address: firstname.lastname@example.org. The controller will provide the restriction of processing.
THE RIGHT TO DATA PORTABILITY
Every data subject has the right guaranteed by the EU legislature to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to article 6, paragraph 1, point a, or article 9, paragraph 2, point a of the General Data Protection Regulation or on a contract pursuant to article 6, paragraph 1, point b of the same Regulation; and the processing is carried out by automated means, for as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to article 20, paragraph 1 of the General Data Protection Regulation, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and where it does not adversely affect the rights and freedoms of other data subjects.
In order to exercise their right to portability of personal data, the data subject can contact the controller of the website In Lux d.o.o. at any moment at the e-mail address: email@example.com
THE RIGHT TO OBJECT
Every data subject has the right guaranteed by the EU legislature to object based on their individual situation, at any moment, to the processing of personal data which relate to the data subject, which is based on article 6, paragraph 1, points E and F of the General Data Protection Regulation. It can also be applied to profiling based on the same Regulation.
In case of an objection, the In Lux d.o.o.. website will not continue the processing of the personal data unless a compelling legitimate grounds exist for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the In Lux d.o.o. website will not continue processing the personal data of the data subject for direct marketing purposes.
Additionally, the data subject has the right to object to processing of personal data by the In Lux d.o.o. website, on grounds relating to their particular situation, where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to article 89, paragraph 1 of the General Data Protection Regulation, unless the processing is necessary for reasons of public interest.
In order to exercise their right to object, the data subject can contact the controller of the In Lux d.o.o. website at any moment. The objection can be sent to the following e-mail address: firstname.lastname@example.org
Additionally, in the context of the use of information society services, despite Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING
Every data subject has the right not to be subject to decisions based solely on automated processing, including profiling, which can produce legal effects concerning them or similarly significantly affect them, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller; or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or (3) is based on the explicit consent of the data subject.
If the decision (1) is necessary and (c) of paragraph 2, the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the decision (1) is necessary for a contract between the data subject and the controller; or (3) is based on the explicit consent of the data subject, the In Lux d.o.o. website will implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the data subject wants to exercise their rights relative to the automated individual decision-making, they can contact the controller of the In Lux d.o.o. website at any moment, at the e-mail address: email@example.com
THE RIGHT TO WITHDRAW CONSENT
Every data subject has the right guaranteed by EU legislature to withdraw their consent for processing of personal data at any time.
If the data subject wants to exercise their right to withdraw their consent, they can contact the controller at any time at the e-mail address: firstname.lastname@example.org
WHAT IS A COOKIE?
A „cookie“ is a small file which gets stored on your computer by the web-browser when you visit a website, and which, by saving your settings, informs the website during a later visit that you have reconnected.
A „cookie” contains information about your needs, preferences and settings which are stored while browsing a website.
„Cookies“ store information if the user enables them in the settings of the web-browser and are specific to the website which utilizes them.
„Cookies“ do not store personal information which could identify you. The user has the opportunity to decide when inquired about giving consent to store cookies.
WHAT ARE “PERSISTENT COOKIES”?
„Persistent cookies“ are stored and remain on your computer even after you close your web-browser.
WHAT ARE „SESSION COOKIES”?
„Session cookies“ are stored temporarily on your computer and get deleted after you close your web-browser.
WHAT ARE „FIRST PARTY COOKIES“?
„First party cookies“ originate from the website that the user browses and can be “persistent” as well as “session” cookies.
The web-browser utilizes these “cookies” in order to store information which will be used again by the user on their next visit to the same website.
WHAT ARE „THIRD PARTY COOKIES“?
„Third party cookies“ originate from additional partner components which are used on the website which the user accesses. If a third party is allowed to collect information about consumer habits, the same information can be used in analytical and marketing purposes.
DOES In Lux d.o.o. USE „COOKIES“?
Yes, specifically in order to enable all of the built-in features of offered products, the feeling that you are welcome to our website, and when you visit again- in order to recognize and enable useful features as well as to understand your habits and needs.
WHICH „COOKIES“ DOES In Lux d.o.o. use?
In Lux d.o.o. uses „session cookies“ which get deleted when you close your web-browser, which are used in order to establish and maintain the user session and to display user-defined information for the duration of the session. We use the „session cookies” in order to provide our users with the feeling of a safe environment while they order on-line.
In Lux d.o.o. uses „persistent cookies” which remain in your web-browser until they expire, or until you delete them. We use these „cookies“ in order to better understand your needs and habits, in favor of improving and adjusting our website to your needs. This information is anonymous.
In Lux d.o.o. uses „session cookies“ which are stored temporarily on the computer and get deleted after closing the web-browser.
ARE THERE „THIRD PARTY COOKIES“ ON THE WEBSITE?
MEASUREMENT OF WEBSITE TRAFFIC
In Lux d.o.o. uses a „third party“ service in order to measure website traffic: Google Analytics.
If you want to disable the mentioned servers from storing cookies, you are able to do so by clicking the following link:
Google Analytics – https://tools.google.com/dlpage/gaoptout
HOW TO DISABLE „COOKIES“?
You can disable cookies by refraining from accepting the option „cookies“ while entering our website.
ADDITIONAL INFORMATION AROUND DISABLING COOKIES?
You have the possibility of managing the use of „cookies“ and eventually disabling them if you configure your web-browser as follows: