Privacy policy

• Personal details: name, surname, date of birth, personal identification code;
• Contact details: address of your place of residence, e-mail address, and telephone number;
• Details related to the visitor’s card: citizenship, name, date of birth, and citizenship of the spouse and minors staying together with the visitor, also the time of the provision of the accommodation service. The following data can also be additionally required: type, number and issuing country of the travel document.

* Collection of data related to the visitor’s card is regulated by the Tourism Act.

• Credit card details: for example, card number, name of the owner, period of validity;
• Records of security cameras: if you visit areas of our hotels where security cameras are used for security reasons.
• Data regarding movement through electronic access points: if you move in our hotels through areas where electronic access is used for the purpose of security and restriction of free access.
• Data regarding preferences: for example, information related to purchased goods, treatments, catering, as well as selected packages and accommodations.
• Data regarding health conditions: in the case of certain health treatments or a package, we may require additional information regarding your health condition.

Usually, we receive such data directly from you, when:

• you send an inquiry regarding our services via telephone, e-mail or website;
• you book or buy our services via telephone, e-mail or website;
• you book, buy or use our services during your stay in the hotel.

We may also receive your data from our partners, from which you ordered services related to our company.

We use data for the following purposes:

• to provide services ordered by you;
• to perform obligations regulated by current laws;
• to manage security incidents;
• for general commercial purposes.

For example:

We use data for the following purposes:

• to provide services ordered by you;
• to perform obligations regulated by current laws;
• to manage security incidents;
• for general commercial purposes.

For example:

• Personal details in order to provide the service to the person who ordered the service or for whom the service was ordered;
• Contact details in order to contact you if necessary;
• Details related to the visitor’s card in order to perform obligations established by the law. If you do not submit such details to us, we are not allowed to provide the accommodation services to you;
• Details related to the credit card are required by us if you pay for the ordered services or purchases using a credit card;
• Records of security cameras can be forwarded to law enforcement authorities in case of security incidents;
• Data regarding movement through electronic access points in order to provide the ordered service;
• Data regarding preferences in order to provide the best service possible;
• Data regarding health conditions in order to provide appropriate health treatment services.

We process data under a number of legal bases, such as:

• the need to create a contractual relationship;
• the need to perform a concluded contract;
• the need to perform obligations established by the law;
• the need to exercise our legitimate interests, such as performance of commercial activity;
• the need to respond to your letter, request for information, request for explanation or complaint;
• the need to protect your vital interests (for example, communication of your details to emergency care workers, if necessary);
• the consent provided by you;
• other bases allowed by the law.

We do not share data that you provided to us with third persons, except in cases where it is necessary to achieve the goals described in the present Privacy Policy.  For example, we can share data:

• with companies belonging to Tervis Spa Group, if it is necessary for the provision of the services related to you;
• with different service providers, from which we can order services related to data processing, such as companies related to IT, tourism or transport; 
• with professional consultants, such as auditors, advocates, accountants and other persons that provide consulting services to us;
• due to reasons arising from the law;
• if we need to share data to ensure our legal protection.

If we share your data, we still remain responsible for the protection of your data. In such cases, we conclude a contract regarding data processing and data privacy with the third person.

We preserve your data according to the needs related to the goals for the processing of the data. We preserve personal data based on a number of different criteria:

• the needs related to commercial activities;
• the needs related to the provision of services to our customers;
• the needs arising from the law;
• the needs arising from contracts and agreements;
• the needs arising from the right to submit a claim.

For example, according to the requirements of the Tourism Act, we are obliged to preserve visitor’s cards for two years. If you joined our newsletter or other direct marketing channels, we preserve your contacts until you notify us that you no longer want to receive information distributed through the respective channel.

As the data subject, you have the following rights:

• The right to familiarise yourself with data – you have the right to know which data in your regard is preserved and how it is processed;
• The right to corrections of your data – if your personal data is incorrect, you have the right to request corrections of your personal data;
• The right to restriction of processing – in certain cases, you have the right to forbid or restrict processing of your personal data (for example, if you no longer wish to receive the newsletter); 
• The right to deletion of data, i.e., the right to be forgotten. There are limitations to the exercise of this right, as according to the law it is not always possible;
• The right to submit objections related to the processing of data in your regard – we consider every case separately, and the result depends on the specific circumstances;
• The right to transfer data – you have the right to demand from us that we transfer to you in a machine-readable format the data that was forwarded by us. You can demand the transfer of personal data used on the basis of your consent or for the performance of a contract concluded with you to other responsible processors; however, only if it is technically possible.