Personal data controller
The controller of your personal data is:
Mestské divadlo Banská Bystrica o.z.
Slnečná 3802/11, 974 04 Banská Bystrica
Company ID: 56212933
Email: info@divadlobb.sk
Phone: +421 903 802 606
The controller does not have a designated data protection officer (DPO), as this obligation does not arise from the law.
Definition of terms
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person
“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, whether by automated or non-automated means
“restriction of processing” means marking stored personal data with the aim of limiting their processing in the future;
“profiling” means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movement;
“information system” means any structured set of personal data accessible according to specific criteria, whether centralized, decentralized, or distributed on a functional or geographical basis;
“controller” means a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be determined by Union or Member State law;
‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
‘recipient’ means a natural or legal person, public authority, agency or body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or the processor, are authorized to process personal data;
“consent of the data subject” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
“personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;
“supervisory authority” means an independent public authority established by a Member State pursuant to Article;
Purposes and legal basis for data processing
We process your personal data for the following purposes:
- booking and selling tickets via the online form – the legal basis is the performance of a contract (Article 6(1)(b) of the GDPR),
- responding to inquiries sent via the contact form – legitimate interest (communication with the public),
- sending news and informational emails – based on explicit consent (Article 6(1)(a) of the GDPR),
- analysis of website traffic using Google Analytics – based solely on consent.
Personal data processed
- first and last name,
- email address,
- phone number,
- number of tickets,
- IP address, and technical data from analytics tools.
Recipients of personal data
We may provide your data to:
- web hosting provider,
- analytics service provider (e.g., Google),
- technical support for our website,
always only to the extent necessary. We have concluded personal data processing agreements with these entities.
Transfer outside the EU
No data transfer takes place
Retention period for personal data
We retain reservation data for 5 years in accordance with accounting regulations.
We retain data processed on the basis of consent until it is revoked, but for a maximum of 3 years from the last activity.
What are your rights?
Right to file a motion to initiate proceedings on personal data protection – if you believe that your personal data is being processed unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; e-mail: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. If you submit your complaint electronically, it must meet the requirements of Section 19(1) of Act No. 71/1967 Coll. on Administrative Procedure (Administrative Code).
Withdraw consent – in cases where we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, at the address of the responsible person, in writing, by notifying us of the withdrawal of consent, or in person at the office. Withdrawal of consent does not affect the lawfulness of the processing of personal data that we have processed about you on the basis of your consent.
Right of access – you have the right to obtain a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written form, unless you request another method of provision. If you have requested this information by electronic means, it will be provided to you electronically, if technically possible.
Right to rectification – we take reasonable steps to ensure that the information we hold about you is accurate, complete, and up to date. If you believe that the information we hold is inaccurate, incomplete, or out of date, please do not hesitate to ask us to amend, update, or supplement this information.
Right to erasure (to be forgotten) – you have the right to ask us to erase your personal data, for example, if the personal data we have collected about you is no longer necessary for the original purpose of processing. However, your right must be assessed in light of all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means that we will not be able to comply with your request.
Right to restriction of processing – in certain circumstances, you have the right to ask us to stop using your personal data. This includes, for example, cases where you think the personal data we hold about you may be inaccurate or where you believe we no longer need to use your personal data.
Right to data portability – in certain circumstances, you have the right to request that we transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
Right to object – you have the right to object to the processing of data based on our legitimate interests. If we do not have a compelling legitimate reason for processing and you object, we will no longer process your personal data.
Automated decision-making and profiling
We do not perform automated decision-making or profiling with legal consequences.
Use of cookies
The website uses cookies. Some are necessary for its functioning, others are used for analytical purposes (e.g., Google Analytics). These are used only for