Privacy Policy

Privacy Notice

The company Letisko M. R. Štefánika - Airport Bratislava, a.s. (BTS) (hereinafter referred to as the “Operator”) uses its website to communicate with its clients and to provide basic information about its activities.

In connection with the collection of personal data, the Operator provides, upon request (registration required at https://www.bts.aero/flights/aircraft-monitoring/) information on arrivals and departures of aircraft for the purpose of aircraft observation.

The processing of personal data is necessary in connection with the services provided by the Operator. Below you will find information on how your personal data is processed.

The Operator processes personal data only to the extent necessary to fulfill the purpose, in accordance with Act no. 18/2018 Coll. on the protection of personal data and amending certain laws (hereinafter the "Personal Data Protection Act") and pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement repealing Directive 95/46 / EC (hereinafter referred to as "the Regulation").

1.Who is responsible for processing your personal data on this website?

Letisko M.R. Štefánika - Airport Bratislava, a.s. (BTS)
Letisko M.R. Štefánika,

823 11, Bratislava II

2. Contact details of the responsible person

POBEST, s.r.o.
Zavarská 10H/8032
917 01 Trnava
[email protected] 

3.For what purposes do we process your personal data?

Authorized persons of the operator process personal data from the data subjects for the purpose of civil aviation security, for the purpose of identifying a natural person in the legitimate interest of the operator, processing a request for free access to information, registration and investigation of submitted anti-social activity notifications, enabling registration through registration form on our website, or in order to protect the rights and legally protected interests of the operator - real estate management.

4. What categories of personal data do we process?

Other categories of personal data are processed in accordance with specific legal regulations and purposes defined by the Operator. These are listed individually in the Processing Purpose Information.

We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not violate your privacy.

Use of cookies: this website uses Google Universal Analytics and Google Search Console. We do not collect your personal data through these services; we use these tools to analyze website traffic.

5. On what legal basis do we process your personal data?

• Act 18/2018 Coll. on the protection of personal data, as amended,
• Act no. 229/1991 Coll. on the adjustment of ownership relations to land and other agricultural property, as amended,
• Act no. 503/2004 Coll. on the return of ownership of land as amended,
• Act no. 162/1995 Coll. on the Real Estate Cadastre and on the Registration of Ownership and Other Rights
• Act No. 54/2019 Coll., on Certain Measures Related to the Notification of Anti-Social Activities and on Amendments to Certain Acts.

6. How long do we keep your personal data?

Data provided via the registration form is retained until consent is withdrawn. If a registered user does not log in for two years, they will be contacted by e-mail. If the Operator does not receive a reply within 30 days, the account will be deleted along with the associated personal data.

For other information systems, data retention is governed in accordance with Act no. 395/2002 Coll. on archives and registries and on the amendment of certain laws, as amended. The Operator does not store your personal data for longer than the purpose for which they were collected. As a minimum requirement, the retention of (personal) data is subject to the legal conditions for its retention.

7. Who will have access to your personal data?

Authorized employees of the operators may have access to your personal data.

8. Will your personal data be transferred to third countries or an international organization?

Personal data is not transferred to third countries or international organizations.

9. Does the processing of your personal data by the operator involve automated individual decision-making or profiling?

The processing of your personal data by the Office does not involve automated individual decision-making or profiling.

10. What are your rights and how can you exercise them?

The person concerned has the right to request from the Operator:

• confirmation as to whether their personal data is being processed by the Operator, as well as access to their personal data and other information,
• rectification of inaccurate or incomplete data,
• erasure of personal data (right to be forgotten) under the conditions set out in Art. 17 of the Regulation, for example if:
  • the Operator no longer needs them,
  • the person is processed illegally,
• restrictions on the processing of personal data under the conditions set out in Article 18 of the Regulation.

11. Is your personal information shared with social media?

No, your personal data is not shared with social media platforms.

12. How is the security of our site ensured?

We protect your data when transferring between your browser and our site by using SSL encryption.

13. To whom can your personal data be provided?

Under certain legal conditions, we may disclose your personal information to third parties (such as law enforcement authorities) if necessary and proportionate to specific and lawful purposes.

14. You have the right to lodge a complaint with the supervisory authority, ie the Office

Contact address of the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
www.dataprotection.gov.sk
+421 2 3231 3220

A data subject who believes that their personal data has been unlawfully processed or misused may file a complaint with the Office for Personal Data Protection of the Slovak Republic (hereinafter the "Office") to initiate proceedings on personal data protection. Such a motion may be submitted in writing, in person (orally, written down for the record), by electronic means (provided it is signed with a qualified electronic signature), or by telegraph or fax; in the latter cases, it must be supplemented in writing or orally for the record within 3 days at the latest.

The motion in question must, in accordance with the provisions of § 63 par. 2 of the Personal Data Protection Act, include:
the name, surname, address of permanent residence and signature of the applicant, identification of the entity against whom the motion is directed (name or surname, registered office or permanent residence, or legal form and identification number), a description of the subject matter of the motion, including specification of which rights, according to the applicant, were violated in the processing of personal data, evidence in support of the claims made in the motion,
a copy of the document proving the right pursuant to § 28 has been exercised, if applicable, or reasons worthy of special consideration.

15. How can you exercise your rights?

If you wish to exercise your rights as a data subject in connection with the processing of your personal data, you can contact us at the email address [email protected]. You will then receive a request form (REC 4.2). By filling out and submitting the form to our e-mail address and completing identification, we, as the entity concerned, on the basis of the information provided in the request, will register and process it within the statutory deadline.

The Data Protection Officer / DPO is also available to answer any questions you may have.