Rules on the protection of personal data and for cookies

The CND Travel / cnd.sk portal (the "Portal") is operated by CND Travel sro with its registered office at Štefánikova 47, 811 04 Bratislava. The portal operator responsible for the processing of personal data pursuant to Act No. 18 / 2018 Zz on the Protection of Personal Data and on Amendments to Certain Rules (the "Personal Data Protection Act") and Regulation of the European Parliament and Council (EU) 2016 / 679, of 27. April 2016 on the Protection of Individuals with regard to the Processing of Personal Data and on the Free Movement of such Data (GDPR)

Personal data is collected only through Forms on the Portal where the user actively inputs these data and sends it to the portal operator. Some personal data - online identifiers are also collected through the Marketing Cookies and the third-party technologies described below.

Processing of personal data in the sense of GDPR

1. The affected person is any customer, registered portal user, reviewer, or visitor to the Portal who has agreed to send newsletters. The operator is the operator of the Portal
2. List of personal data processed by the Portal: Name and Surname, E-mail, Phone contact, IP address. For marketing purposes, only the names and e-mail addresses of the affected persons are processed
3. Purposes of personal data processing: issuing and delivering vouchers, communicating with customers regarding contract performance, booking stays, sending newsletters, bid reviews. Personal data is not processed in a way that is incompatible with these purposes. Personal information is not disclosed, with the only exception being reviews with published consent.
   
4. beneficiaries:
• business partners for whom the portal operator arranges for the conclusion of the contract, if this is necessary to mediate the conclusion of the contract
• Social media and advertising companies: Google, Facebook, Microsoft - See details in Using Google Analytics and Google Remarketing and Facebook Social Plugins. These recipients are from third countries - namely the United States of America, a country that guarantees an adequate level of personal data. Hotjar's statistics and site analytics platform only stores anonymized data on visits to its servers in the Republic of Ireland in accordance with EU legislation
5. Legal basis for the processing of personal data - Article 6, 1. letter b) GDPR: - processing of personal data (name, surname, email, telephone contact) is necessary for performance of the contract (issuing and delivering vouchers (vouchers or vouchers), arranging contracting and booking accommodation). In this case, the consent of the person concerned is not necessary. Processing of personal data (Name, email) for marketing purposes - legal basis - Article 6, 1. letter a) GDPR - the person concerned has expressed their consent to the processing of their personal data for at least one particular purpose. Processing of online identifiers ("Marketing" third-party cookies, login to the Portal) and reviews - legal basis - Article 6, par. 1. letter a) GDPR - the person concerned has expressed their consent to the processing of their personal data for at least one particular purpose.
   
6. Time of retention of personal data is for the necessary time for which data is needed for a specific purpose, but no more than 10 years. In the case of personal data processed for marketing purposes, until the technical means find that the email address is repeatedly malfunctioning, in the case of login data on the Portal, the retention period is 5 years after the last person's login to the Portal.
   
7. The requested person, for whom consent is required, by consent of 6 ods.1. (a) GDPR unreservedly agrees that the operator will process its personal data for the abovementioned purposes during the aforementioned period and to the extent indicated above. The person concerned has the right at any time to withdraw his / her consent. Revocation of consent does not affect the lawfulness of processing based on consent prior to its revocation.
   
8. The person concerned is required to provide true and up-to-date personal information. The rights of the person concerned are governed by chapter 3 GDPR. It is, for example, the right to complain to the supervisory authority, the right to object to processing, the right to require the operator to access personal data relating to the person concerned, the right to rectify, add, delete or restrict the processing of personal data, as well as the right to data portability.

Use "cookies"

"Cookies" are small files that store a crawler on the hard disk of your computer. You can delete "Cookies" at any time, or they will not be saved for a specific crawler setting. Most browsers save cookies automatically.

The portal operator uses "Cookie" files to improve portal functionality and improve customer service and improve user experience. Such files are also used for anonymous tracking of transactions and their attribution to our affiliates. Additionally, "Cookies" are used to analyze the use of the website by Google Analytics. The purpose is solely to ensure system stability and statistical analysis of website traffic. It is not about the processing of personal data. The IP addresses stored by Google Analytics are consistently anonymized. The "Cookie" functional and statistical files do not contain any personal information.

You can also use the portal without cookies, but in this case its functionality will be severely limited. We therefore recommend that you do not block "cookies" in your browser. However, if you still want to prevent "cookies" from being stored on your computer, change your browser settings. See "How to avoid cookies" for instructions.

Use the tools "Google Analytics" and "Google Remarketing"

Portal uses Google Inc. services ("Google"), Display Advertising, Analytics, and Remarketing. Cookies are used for these services. The information collected about your use of this website will be transmitted to Google's servers and stored. The IP address is anonymized by Google - truncated by the last three digits to prevent a clear association with an individual. Data for Google remarketing will not be collected until we have explicitly given you permission to process this data. Press "I understand" on the Cookie Bar to give your consent cookies list the "Marketing" category will be ticked, or by using the portal further. You may revoke this consent at any time. In addition, Google respects the US-Safe-Harbor privacy policy and is registered with the US Department of Commerce's Safe Harbor program. Google uses this information on behalf of CND Travel sro to evaluate the use of the Portal and to provide other services related to the use of the Website and the Internet. Google will only forward this information to third parties if required by law or if third parties process this information on behalf of Google. Third parties, including Google, use the stored advertising cookies on the basis of previous user visits to this website. For more details about the types of cookies and how they are used by Google, please visit https://policies.google.com/technologies/types?hl=sk. You can disable Google Cookies by opening a Google Ads Deactivation page (http://www.google.com/policies/privacy/ads/). Google Analytics for Display Advertising can disable and customize ads within the Google Display Network using the Ads Preferences Manager (https://www.google.com/settings/ads/onweb/?hl=sk).

Social Networking Add-ons

If you have given us consent to the processing of personal data through technology such as Third-party cookies of the "Marketing" type, the "Like" button ("add-on") will be made available to you on the Portal from the facebook.com website of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). If you go to a website on our website that contains the above button, your browser will establish a direct connection with Facebook. Information from the add-ons will be transferred from the Facebook server directly to your browser and further to the relevant website. We have no control over the information that Facebook and Google transmit using these add-ons.

Built-in plug-ins send information to Facebook or Google that was triggered by the appropriate page on our website. If you are signed in to these services, your provider may log you into your user account when you visit the site. When interacting with an add-on, such as pressing a button or posting a comment, the information is sent directly from your browser to Facebook where it is saved. If you are not a member of the Facebook network, there may still be a situation where the relevant operator knows your IP address and stores it.

For more information on the purpose and scope of obtaining personal data and further processing and use of personal information, please visit Facebook. You'll also find relevant information about your rights and privacy options. Provider privacy notifications:
http://sk-sk.facebook.com/about/privacy/

If you are a Facebook member and you do not want the operator to collect data from our web presentation and link it to your account data, you must log out or check out the Marketing in checkbox before visiting our web site from Facebook. Cookies list for unchecked.

Other statistical tools

How to avoid a "cookie"

1. Internet Explorer:
   1. In your browser, go to the Tools menu and select Internet Options> Privacy> Advanced.
   2. Click Override automatic cookie handling (substitution automatic processing "cookies").
   3. Specify how you want Internet Explorer to process cookies of host and foreign websites (a site other than the one you are currently viewing).
   4. To allow the "cookies" to be saved on your computer, click Accept (incoming).
   5. To prevent the "cookies" are imposed on your computer, click "Block".
   6. If you want the program to ask whether you want to allow the storage of cookies on your computer, click Prompt.
   7. To enable "cookie" sessions ("cookies" that are deleted from your computer after Internet Explorer exits) stored on your computer, click Always allow session session cookies.
2. Google Chrome
   1. In the browser toolbar, click the French key icon.
   2. Select Options in Preferences on Mac and Linux, Settings on your Chromebook.
   3. Click the Under the Hood (under the hood).
   4. In the "Privacy" (Privacy), click Content settings (Content Settings).
   5. In the Content Settings dialog box (Settings content) that appears, click the Cookies tab:
   6. Deleting files "cookie"
      1. Click 'All cookies and site data' to open the Cookies and Other Data dialog box.
      2. To delete all the "cookies", click Remove All (Remove All)
      3. To delete a specific cookie, select the location that sent it, then the "cookie" file and click Remove.
   7. Blocking "cookies" by default
      1. Block all cookies: Select "Block sites from setting any data". Keep in mind that choosing this setting prevents the activity of most sites that require your login. Each time a cookie is blocked, you'll see an icon in the address bar.
      2. Blocking only foreign domain cookies: Select the "Ignore exceptions and block third-party cookies from being set" checkbox. Ignore exceptions and block foreign domain cookies. Even if you added a location to the Exceptions List and enabled it with cookies, if this checkbox is marked, the cookies of a foreign domain of this site will not be accepted.
   8. Enabling "cookie" files by default
      1. To enable both "host" and "foreign" cookies, select "Allow local data to be set". To enable only "host" cookies, check the "Block all third party cookies without exception" checkbox without any exception.
   9. Specify exceptions for "cookies" from specific websites or domains
      1. To specify how cookies should be managed for certain specific sites or domains, click Manage exceptions. To add a rule to the display of the Cookie and Site Data Exceptions dialog box:
      2. Click the "Add a new exception pattern" field and enter the domain name for which you want to create an exception.
      3. To create exceptions for an entire domain, enter the domain name before the [*.] (Eg. [*.] Google.com).
      4. You can specify an IP address, or the address IPv6 non-http URL.
      5. Use the menu to select whether the site can send cookies. If you select Session only, the cookies of that session will be deleted whenever your browser closes.
      6. Using this dialog, you can also edit or remove exceptions.
3. Safari
   1. Select Safari -> Preferences.
   2. Click the Security panel toolbar (Toolbar command).
   3. Safari displays the preference settings.
   4. Use this switch to choose how to accept "cookies":
      1. Never: Block "cookies" altogether.
      2. Always: Receive all "cookies"
      3. Only from the locations you navigate to: The default option that allows sites to work properly without allowing for illegal cookies.
   5. To view the "cookies" that are currently on your system, click Show Cookies (See "cookies").
   6. The site that used this "cookie" will lose all the information stored in the file, which means you may need to do some things manually, Provide a site password that has previously been automatically obtained from a cookie.
   7. Click Close (Close) to save the changes.

Contact

If you have any questions, comments, requests regarding these privacy policies, contact us by email at This e-mail address is protected against spam robots. You need JavaScript enabled to view it.. Requests for revocation of consent to the processing of personal data, access to personal data, requests for correction or deletion or limitation of the processing of personal data as well as requests for data transmission. also send to the address This e-mail address is protected against spam robots. You need JavaScript enabled to view it..

These policies are attached to the General Terms and Conditions and are valid from 22.12.2019