The following contract is a privacy notice General Data Protection Regulation. It is made by Union of the Blind in Bulgaria / UBB / – Hotel “Pop Hariton” (hereinafter referred to as “Hotel”) especially for our guests.
In this document you will find the following information:
About the responsible processing of your personal information;
What kind of personal data do we use;
Under what condition do we use personal data;
About the objectives and legal bases;
Storage deadlines and data security measures;
How to use your rights about GDPR;
As well as in which cases and in what order we share your data with third parties.
Who is responsible for processing your personal information?
Union of the Blind in Bulgaria (registered in the Commercial and Legal Register, kept by the Registry Agency with UIC: 000703155) is responsible for processing your personal data. In case you wish to access, correct or delete your personal information, or you suspect that someone has an unauthorized access, or you want to object or withdraw your consent to processing, or if you have any questions and comments related to this Notice, please feel free to contact to the authorized from UBB Manager of hotel “Pop Hariton” at town of Dryanovo, Dryanovo monastery, post box 114, mob.phone: 00359 886100119 or via e-mail: info@complex-pophariton.bg.
WHAT KIND OF INFORMATION DO WE COLLECT FOR YOU?
In the context of our business, it is necessary to collect and process information about our guests. The information is collected directly from our guests and in particular concerns your name and other identification data, contact details (email, address, telephone) as well as video, insofar as video surveillance is carried out in certain places on the territory of the hotel, marked with relevant information signs. Finally, we collect the following categories of your personal data: PIN/Personal Identification Number, Names, Birth Date, Sex, Citizenship, Number, Validity and Issuing State of a Personal Identity Document.
WHY DO WE COLLECT YOUR DATA?
The main reason for collecting your personal data is to identify you and ensure the execution of commitments made to you regarding your reservation and stay on the territory of the hotel, as well as when you have a complaint about our services to ensure your security and the security of our staff and hotel equipment. In case you agree, your data will be used also to provide information about promotions and other interesting information related to our services. The Union of the Blind in Bulgaria processes your data also to fulfil the emerging obligations under national law, including, but not limited to, the Law for Tourism.
ON WHAT LEGAL GROUND YOUR PERSONAL DATA IS BEING PROCESSED?
The Union of the Blind in Bulgaria processes personal data only on a valid legal basis. The legal basis for processing your data is the fulfillment of your commitments under the hotel service contract to which you are a party, especially to identify you as a guest on the hotel’s premises. Next, data processing is also necessary to protect your rights as a user when submitting a complaint about our services. Thirdly, as you are a guest of the hotel, we are obliged to collect certain categories of your data in order to fulfill the obligations arising under the law.
Video Surveillance as a security activity is based on our legitimate interest in protecting the security of the site, the hotel equipment in it and its employees, as well as your own security. It is made only in public places marked with the appropriate signs. To ensure your utmost peace, we inform you that the video surveillance does not take place in any of the restrooms and the relaxation rooms.
The implementation of forms of e-marketing processing requires your explicit consent to be informed by email, phone call and / or SMS for discounts, promotions, lotteries and other marketing activities. You can provide your consent by ticking the appropriate box at the end of this notice.
WHAT MEASURES FOR PROTECTING THE COLLECTED DATA DO WE TAKE?
The protection and security of your data is important to us. To prevent loss, misuse or unauthorized access, we apply all reasonable measures and remedies. However, if you suspect a violation, we ask you to contact us immediately through the contact details.
FOR HOW LONG DO WE KEEP YOUR PERSONAL DETAILS?
The data related to your stay on the territory of the hotel are kept for a period not longer than what is necessary and in any case for no more than three years. Video recordings in the hotel are kept for a period no longer than necessary, but in any case no more than a month after you have left the Hotel, unless otherwise required by law.
Data processed for e-marketing, based on the customer’s explicit consent, is kept until the agreement is withdrawn, but not more than a year after it has been granted unless you renew your consent to receive marketing information.
WHAT RIGHTS DO YOU HAVE IN THE PROCESSING OF YOUR PERSONAL DATA?
GDPR provides number of options for the protection of individuals when it comes to collection and processing of their personal data, in particular:
access and information about the processing of your data;
Right to object the processing when data are processed on the legitimate interest of the company;
Right to withdraw your consent to data processing when it is processed solely on the basis of your explicit consent;
right of portability of the data processed, based on your explicit consent and depending on your instructions, you will be provided with a copy of the same or it will be automatically transferred to another organization; Right of rectification in case the data we store for you is not accurate;
Right to request to be forgotten, when your personal data is being processed, based on your consent
Right to complain to a supervisor (see below)
IN WHAT WAYS DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?
In order to provide our hotel services, providing the hotel security and obtaining up-to-date information, we may provide your data to third parties as well as to the following for the purposes listed below:
o the competent tax authorities and other state bodies during the inspection;
o Partners of hotel “Pop Hariton” (such as tour operators, accountants, an external archives company, or lawyers in litigation);
o You will be notified if when merged, your data can be shared with the new owner(s). In any case, your data will not be shared with third parties established outside the EEМ (EU, Norway, Iceland and Liechtenstein), unless expressly permitted by local law and adequate safeguards are in place.
“COOKIES”
Our clients should be informed that their personal information and data, may be automatically collected through the standard operation of Internet servers and the use of “cookies”. Thus, collected information and data do not constitute personal data.
“Cookies” are small text files that a website uses to recognize regular visitors and to facilitate the current user access to the site and its use, while allowing the site to track user behavior and compile aggregate data in order to improve the content and target advertising. “Cookies” are not programs that penetrate into the system and damage files. Generally, they function by assigning a unique number to each user, which is devoid of private meaning and value outside the looming corresponding numbers website. If you want to prevent the collection of information using cookies, there is a procedure in most browsers allowing the user to accept or prohibit their use. It is necessary to point out, however, that the use of cookies may be necessary in order to make full use of the websites (for example, display the desired content or display the information on the site) in a particular way.
HOW CAN YOU CONTACT THE RELEVANT COMPETENT AUTHORITY
Notwithstanding the above, in case of complaints, you have the right to contact the Personal Data Protection Commission (GDPC):
In person: Sofia, 2 , “Prof. Tsvetan Lazarov” blvd.
By letter: 1592, Sofia, 2, “Prof. Tsvetan Lazarov” blvd.
Via e-mail: – kzld@cpdp.bg;
Via website: https://www.cpdp.bg/.
In view of the requirements of the legislation, the above information can be changed by the Union of the Blind in Bulgaria. For further information about processing your data, please contact us through the contact details.
☐ I declare that upon my check-in at the Hotel I have read the Privacy Notice regarding the processing of my personal data and “cookies”.
☐ I agree that the information I provide will be processed to inform me by e-mail, phone call and / or SMS for new products, promotions, lotteries, etc. My consent is not campaign-related and may be revoked at any time by e-mail send to the Manager of hotel “Pop Hariton” town of Dryanovo.