Personal Data Protection

Declaration on the protection of personal data

Firstly we need to say that we see the protection of your personal data as an important task. The House of Congress, s.r.o., registered office at Kadnárova 2536/86, 831 51 Bratislava, ID no.: 47435518 incorporated in the Companies Register kept by the District Court in Bratislava I, Section: Sro, File no. 92930/B  (“THoC” or “The House of Congress”), appreciates your trust which you put into us when using our services. We promise to protect the personal data which you provide.

On this website you will find information on why, when, how and what personal data are processed by the company The House of Congress. You will learn how to contact us if have any inquiries regarding the processing of your personal data or how to correct the personal data.

The personal data protection regulation may be changed and updated by The House of Congress in certain circumstances. Therefore we ask you to visit this website, in your own interest, and make sure to keep yourself updated about its content.

The House of Congress undertake to adopt all measures to prevent the misuse of the personal data provided by you. Your personal data will only be processed when there are legal grounds for their processing. Thank you for using our services!

Basic terms and information

Before we go onto describe why, when, how and what personal data are processed by The House of Congress, we have to explain some basic terms regarding the protection of personal data. We believe you will gain a better understanding and insight into the reasons why The House of Congress process the personal data in the particular manner.

Personal data

Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (name, number, online identifier) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Special categories of personal data

This is just a new term for sensitive personal data. This category covers personal data which may harm the data subject in society, at work, at school or which may result in his or her discrimination. Such personal data usually reveal his or her racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and involve the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Data subject

A data subject is a natural person to whom the personal data relate and who can be identified or is identifiable by the personal data.

Controller of personal data

The controller is a natural or legal person who determines the purposes and means of the processing of personal data and who is primarily responsible for the processing. Unless otherwise stated in these rules or specific service conditions, The House of Congress is the controller of personal data.

Processor of personal data

The processor is a natural or legal person which processes personal data on behalf of the controller on the ground of the controller’s instructions.

Processing of personal data

Processing means any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Which legal regulation covers personal data processing?

The processing of personal data is governed primarily by Regulation of the European Parliament and of the Council (EU) 2016/679 (“GDPR”). National regulations may in certain cases (where allowed by the GDPR) define different rules. Such rules are laid down in Act no. 18/2018 Coll., on the Protection of Personal Data, as amended by later regulations.

When is it possible to process personal data?

For the processing of your personal data to be lawful, at least one of the requirements specified in Article 6 of GDPR must be satisfied. In the case of special categories of personal data at least one of the requirements specified in Article 9 of the GDPR must be satisfied. In both cases the principles of personal data processing mentioned in Article 5 of the GDPR have to be complied with.

 

Processing of personal data in The House of Congress

Why do The House of Congress process personal data?

We provide organization, technical realization or consulting for industry events. Some of your personal information is necessary for the purpose of purchasing or booking a ticket, issuing tickets, invoicing, sending information about events or providing other services. You do not have to disclose any other personal data. But when you decide to disclose this information, we can do for you more than transport you.

What personal data do we process?

The following table shows what kind of personal data we need for a particular service.

  • Organized, technically organized event registration, or in which The House of Congress provides advice, registration management, ticket issuance
    Personal data processed:

    1. title
    2. first name
    3. surname
    4. e-mail address
    5. telephone number
    6. the name of the employer and the job position
    7. Payment card data (if you have used it) or bank account number
    8. billing information
    9. ticket or reservation number
    10. information about a special diet / diet (if you provide us with information)
    11. other information provided by you

 

  • Sending information emails, business announcements and newsletters
    Personal data processed:
  1. title
  2. e-mail address
  3. first name
  4. surname

 

  • Complaints of Services
    Personal data processed:
  1. first name
  2. surname
  3. ticket number
  4. bank account number
  5. telephone number
  6. other information provided by you

 

  • Refund of the ticket
    Personal data processed:
  1. first name
  2. surname
  3. bank account number
  4. telephone number
  5. other information provided by you
  • Issuing a tax document
    Personal data processed:
  1. first name
  2. surname
  3. e-mail address
  4. the billing address
  5. other information provided by you

 

  • Questions
    Personal data processed:
  1. first name
  2. surname
  3. e-mail address
  4. other information provided by you
  • Website visits
    Personal data processed:
  1. IP address
  2. The House of Congress website uses cookies and similar technologies. More information is available below.

Beyond the scope defined above any other personal data may be processed only if you voluntarily provide such data to The House of Congress. We reserve the right to destroy unwanted personal data. The data subject shall be informed on this procedure.

Conditional processing of personal data 

Some of the services offered by the The House of Congress are made conditional upon the fulfillment of additional requirements. A typical requirement is the achievement of a certain age. Unless data subjects have reached the required age, it is not possible to provide certain services to them or process their personal data without the consent of their statutory (court-appointed) agent.

Processing of personal data for other purpose

Certain cases may involve further processing of personal data which goes beyond the purpose for which the personal data were obtained. An example may be the registration for an event or purchase of a ticket. At the same time, however, the Czech Airlines have the obligation to archive the air ticket (for tax purposes) under applicable legal regulations.

Place of storing personal data

The House of Congress possess a large volume of data. Some of these data have the nature of personal data. To ensure their security and easy availability we use the cloud services provided by Google (the data stored by Google are kept in the data centers located in Saint-Ghislain/Belgium, Hamina/Finland, Dublin/Ireland and Eemshaven/Netherland) and webhosting form company WebSupport.

 Security of personal data

Technical, organizational and other measures

The House of Congress endeavor to ensure that the data disclosed by you are as secure as possible. To that end we have implemented a number of technical and organizational measures which protect your personal data from unauthorized or unlawful processing and from unintentional loss, destruction or damage.

The House of Congress aim at minimizing the processing of personal data. We only process information which is indispensable or information which you provide us with your consent beyond the scope of the necessary processing. All the interfaces of our website or applications through which our services are provided are designed to offer the highest possible standard of privacy, which you can set at your desired level.

Personal data processing period

Maximum period of processing of personal data

The maximum period for which the The House of Congress process the personal data of their clients is 10 years from the day when the legal relationship between the data subject and The House of Congress was terminated or 10 years from the end of the tax period in which the relevant performance was provided. The reason for such processing is the statutory obligation and the legislation of the Slovak republic. After the expiry of this period your personal data will always be erased.

Standard processing time for personal data

We process personal data for communication purposes for 5 years. For this period of time you also give us consent if you subscribe to our newsletters, information emails or business announcements.

Other period of processing of personal data

If you submit an enquiry to gdpr@congress.sk or in the case of usual interaction with The House of Congress your personal data are erased at a much earlier stage. Your personal data are stored for the period for which we need them to fulfill the purposes specified in these personal data protection principles or to comply with statutory obligations.

Cookies and other tracking technologies

What are cookies?

Cookies are small text files stored by web pages on your computer or your mobile device at the time when you start using the web pages. Thanks to that the pages remember for a certain time your preferences and operations (e.g. logging information, language, font size and other display preferences) so that you do not have to enter this information again and switch from one page to another. Our cookie files cannot identify an individual user, they can only identify, through a randomly generated identification code, the computer or mobile device which you use.

Why do The House of Congress use cookies and other tracking technologies?

Cookies and other tracking technologies may be used on our website and in our application in various ways, such as for the operation of the website, clickstream analysis or advertisement purposes. We primarily use cookies and other tracking technologies to be able to increase the quality and effectiveness of our services.

Cookies and other tracking technologies used by The House of Congress

Our website uses Google Analytics, a web analytics service provided by Google Inc., to obtain and analyse data about the use of our website. In this way we can improve the quality of our web services. Google Analytics uses only first-party cookies for data analysis. This means that cookies are tied to the domains of our website and collect statistical data. They are not used to identify personal details about the website’s visitors. If you wish, however, you can disable cookies via your browser settings.

More information on cookies, banning cookies

For more information on cookies, how cookies work, how to manage or delete them visit the web page at http://www.allaboutcookies.org/.

In the settings of some internet browsers (Internet Explorer, Safari, Chrome) cookies and other tracking technologies may be banned. Another way to manage cookies is via http://www.youronlinechoices.com/uk/your-ad-choices.

If you decide to ban certain cookies, the functionality of the Czech Airlines website may be limited.

 

Exercise of right by data subjects

Right to information

The House of Congress respect the principle of transparency of personal data processing. In accordance with this principle we always provide information to data subjects on the manner in which their personal data are processed. If you wish to know in general which of your personal data we process, you may submit your request here.

If you wish to find out concrete personal data which are processed directly for you, you can submit your request here and specify which concrete piece of information you require. The information to which you are entitled is described in Articles 13 and 14 of the GDPR. If you do not submit specific requirements, your request will be viewed as a general request under the previous paragraph. We need to point out that if we are not able to verify your identity electronically or if there is reasonable doubt as to your identity, we may ask you to submit proof of identity. Only in this way we can rule out the possibility that your personal data are disclosed to a person who only pretends to be you. Your request will be handled in as short time as possible. But keep in mind that often this is a very complicated process which may take several days or weeks.

Right to rectification

If you find out that some of your personal data that we process are incorrect or outdated, please, let us know here. Also in this case The House of Congress may require the submission of a proof of identity. This is the only way to prevent unauthorized alteration of your personal data.

In certain cases we cannot rectify your personal data. This includes cases when your incorrect or outdated personal data (surname at birth) are contained in an invoice which we have to archive by law.

If your personal data correction relates to the information systems in which you created your profile, you can rectify your personal information by yourself.

Withdrawal of consent to personal data processing and right to be forgotten

If The House of Congress process your personal data on the basis of your consent with the processing of your personal data, you can stop their further processing at any time. You only have to withdraw your consent to such processing at gdpr@congress.sk

You can also exercise your right to be forgotten. In such case The House of Congress will destroy all your personal data that we process. Exception are cases when the processing is performed on the basis of a statutory obligation or for a legitimate interest of The House of Congress. Also in this case The House of Congress may demand identification of the data subject before destroying the personal data.

Updating personal data protection principles

The House of Congress keep the personal data protection principles up-to-date and in compliance with applicable legal regulations. For this reason they may be changed from time to time. We ask all our clients to pay due attention to these principles.

Liability for processing of personal data

Liable for lawful processing of your personal data are The House of Congress. The administrative body performing supervision over the processing of personal data in Slovakia is the Office for Personal Data Protection.