Personal data protection policy
PERSONAL DATA PROTECTION POLICY
Approved on 20.05.2020.
This Personal Data Protection Policy informs you about all aspects related to the processing of your personal data and about the rights you have in accordance with Regulation (EU) 2016/679 (EU GDPR).
Please read this Policy carefully before providing us with your personal data, as by providing them, you agree with the terms described in the Policy!
The provision of personal data by you is voluntary, for the purpose of using certain goods and services offered by us, as well as to use our website.
If you do not want us to process your personal data in the manner described in this Personal Data Protection Policy, please do not provide it to us!
Please bear in mind that in some cases we may not be able to offer you the product, service and/or information you have requested if you do not provide us with the necessary data.
If you have any questions or comments regarding this Personal Data Protection Policy, please contact us by email: ………………………………………………… .
The Single member limited liability company “VOLGA BG” (“VOLGA BG” EOOD) guarantees the maximum degree of protection of your personal data. The applied security measures are constantly being improved and adapted to the latest technologies.
The Personal Data Protection Policy regulates the processing of personal data of clients if the hotel ………………………………………….., in connection with the tourist services offered by “VOLGA BG” EOOD. This Policy has been drawn up and is based on the current Bulgarian and European legislation in the field of personal data protection.
Who processes your personal data?
“VOLGA BG” EOOD is a commercial company registered in the Trade Register and in the Register of Non-Commercial Legal Entities maintained by the Registration Agency under a Unique identification code (UIC): 206315115, location and legal address: complex “Lipite”, land plot No. 00833.6.106, Babata area, postal code 8217, Pomorie municipality, Aheloy.
“VOLGA BG” EOOD collects, processes and stores personal data as a personal data administrator in accordance with the Personal Data Protection Act (PDPPA) and Art. 4, Para. 7 of Regulation (EU) 2016/679 (GDPR).
How to contact us?
Correspondence address: “Lecardo” hotel, complex “Lipite”, Pomorie municipality, Aheloy.
Phone: …………………………….. phone ………………………………… fax: ……………………………….
e-mail: ………………………………….. website: ………………………………….
What categories of personal data do we process?
In connection with the fulfillment of its obligations required by law when providing tourism services, “VOLGA BG” EOOD processes the following categories of personal data, in accordance with the purposes for which they are collected and the grounds for which they are processed:
– registration data: Full name, uniform civil number/personal number of a foreigner, date and place of birth, gender, citizenship, permanent address, identity document data.
– contact details: Full name, postal address, email address, phone number.
– credit or debit card information, bank account number or other banking and billing information.
– data for issuing a payment document /bill, invoice/: Full name, uniform civil number/personal number of a foreigner, permanent address.
– during filling out the contact form on our website: Full name, email address, phone number.
To ensure the safety of hotel guests, as well as to protect its property, “VOLGA BG” EOOD provides video surveillance in public areas on the territory of the “Lecardo” Hotel.
By means of video images from the security cameras video pictures and behavioral data are collected.
On what legal grounds do we process your personal data?
“VOLGA BG” EOOD processes your personal data on the following grounds:
– compliance with the requirements of the law;
– fulfillment of our obligations under the contract with you;
– your explicit consent to the processing of your personal data for one or more specific purposes;
– for the purposes of the legitimate interests of the company or the legitimate interests of a third party;
– to protect your vital interests or the interests of another individual;
– to perform a task of public interest, or in the exercise of official powers granted.
For what purposes do we process your personal data?
“VOLGA BG” EOOD processes the personal data provided by you for the following purposes:
– for accommodation and registration of clients /hotel guests/;
– for issuing of hotel bills or invoices for the provided tourist services;
– to fulfill obligations under the concluded contract for the provision of tourist services;
– to process booking requests, status notifications by e-mail or phone;
– to manage and respond to customer requests, including when sending an email through the contact form on the hotel website;
– for communication with clients, if necessary;
– to ensure the safety of hotel guests by means of the video surveillance systems;
– to fulfill legal obligations and regulatory requirements towards the National Revenue Agency, the National Insurance Institute, the Ministry of Interior and other state, municipal and supervisory authorities;
– to provide information to the Commission for Personal Data Protection in connection with the obligations under the regulatory framework on the personal data protection and Regulation (EU) 2016/679.
Transfer of your personal data to third parties
“VOLGA BG” EOOD may transfer your personal data to personal data processors for processing purposes, subject to the requirements of Regulation (EU) 2016/679, including:
– individuals or legal entities who, on the basis of an agreement with the company, process your personal data on behalf of the Administrator;
– banks which handle payments made by you and to you;
– business partners in case of joint provision of services, etc.
“VOLGA BG” EOOD may disclose and/or transfer your personal data in accordance with applicable law, if this is required by an administrative, supervisory or judicial authority or if the transfer is related to the fulfillment of a legal obligation, including to public authorities defined in the Tourism Act – to the Ministry of Tourism, Pomorie Municipality, the Ministry of Interior, the National Revenue Agency, the National Statistical Institute, etc.
Transfer of your personal data to third countries
“VOLGA BG” EOOD does not transfer/send/ personal data to countries outside the EU. If such a transfer is necessary, it will only take place in accordance with the provisions of the General Data Protection Regulation (EU) 679/2016.
For how long will your personal data be stored?
“VOLGA BG” EOOD stores your personal data in hard copy or in electronic form on its own servers with a high level of information security for a period not exceeding the period prescribed by law.
Your rights regarding the collection, processing and storage of your personal data
In order to process your personal data in a fair and transparent manner, “VOLGA BG” EOOD informs you of your rights in accordance with Regulation (EU) 2016/679, namely:
Right to access your personal data
You have the right to request and receive confirmation whether “VOLGA BG” EOOD processes your personal data, as well as the right to access personal data relating to you and to the following information:
– purposes of processing;
– categories of personal data;
– recipients or categories of recipients to whom your personal data has been or will be disclosed, including in third countries or international organizations;
– if possible, the estimated period during which the personal data will be stored, and if this is not possible, the criteria used to determine this period.
The right to correct or complete your personal data
You have the right to request “VOLGA BG” EOOD to correct or complete inaccurate and/or incomplete personal data relating to you.
Right to erasure (right to be forgotten)
You have the right to request the erasure of your personal data, and “VOLGA BG” EOOD is obliged to delete them without undue delay if any of the grounds listed below exist:
- your personal data is no longer needed in relation to the purposes for which they were collected or otherwise processed;
- you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
- you object to the processing of personal data related to you and there are no legal grounds for their processing;
- your personal data have been unlawfully processed;
- your personal data have to be erased for compliance with a legal obligation under EU or EU Member State law that applies to the Administrator;
“VOLGA BG” EOOD is not obliged to erase your personal data when their processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing;
- for reasons of public interest in the area of public health;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
- for the establishment, exercise or defence of legal claims.
“VOLGA BG” EOOD does not delete data that is required to keep by law, including for protection in connection with lawsuits brought against it or to confirm its rights.
Right to restriction
You have the right to request “VOLGA BG” EOOD to restrict the processing of your personal data in the following cases:
- identification of inaccuracies in the processed personal data;
- the processing is unlawful;
- “VOLGA BG” EOOD no longer needs your personal data for the purposes of processing, but you require them for the establishment, exercise or defence of your legal claims;
- You have objected to the processing pending the verification whether the legitimate grounds override your
Right to data portability
You have the right to receive your personal data in a machine-readable format from “VOLGA BG” EOOD at any time or to request the direct transfer of your personal data to the administrator you specified, when it is technically possible.
Right to receive information
You have the right to request “VOLGA BG” EOOD to inform you about all recipients to whom your personal data was disclosed, in respect of which correction, deletion or restriction of processing was requested. “VOLGA BG” EOOD may refuse to provide this information if this proves impossible or involves disproportionate effort.
Right to object
You have the right to object at any time to processing of personal data that concerns you. In these cases, “VOLGA BG” EOOD shall no longer process your personal data, unless there are legitimate grounds for the processing.
Right to withdraw consent to the processing of your personal data
You have the right to withdraw your consent to the processing of your personal data at any time. “VOLGA BG” EOOD will stop processing data for the purposes to which you initially agreed, provided that there is no other legal basis for continuing processing, of which the company will notify you in a timely manner.
Your rights in the event of a security breach of your personal data
If VOLGA BG EOOD detects a security breach of your personal data that may create a great risk to your rights and freedoms, the company will notify you without undue delay of the breach, as well as of the measures that have been taken or should be taken.
Terms of exercising your rights
You can exercise your rights by sending a written application to “VOLGA BG” EOOD at: “Lecardo” hotel, complex “Lipite”, Babata area, postal code 8217, Pomorie municipality, Aheloy or an electronic application to the e-mail address:………………………………………………………
The application can be sent personally or by an authorized person.
“VOLGA BG” EOOD will provide you with information on the actions taken in connection with the request to exercise your rights within 14 days from the receipt of the request. This period may be extended by one month, taking into account the complexity and number of requests.
In case of violation of your rights under Regulation (EU) 2016/679, you have the right to enter a complaint with the Commission for Personal Data Protection – the Bulgarian data protection supervisory authority.
Information on the competent supervisory authority for the personal data protection:
Name: Commission for Personal Data Protection
Location and legal address: 2 Prof. Tsvetan Lazarov blvd., postal code 1592, Sofia
Correspondence address: 2 Prof. Tsvetan Lazarov blvd., postal code 1592, Sofia
Phone: 02 915 3 518 Website: www.cpdp.bg
Links to other sites
The website of the “Lecardo” Hotel contains links (hyperlinks) to other websites. “VOLGA BG” EOOD does not manage the linked websites and is not responsible for the privacy policy or the content of these websites. If “VOLGA BG” EOOD receives information about illegal activities or illegal information on these Internet pages, it will take immediate measures to remove electronic links to them.
Changes to the Personal Data Protection Policy
This Personal Data Protection policy may be updated, modified and supplemented from time to time, when circumstances require it.
Any possible future changes to this Policy will be published on this page.
