Update date: 25 February 2024
This document contains the Personal Data Protection Policy of AS Hoteli EOOD, registered in the Commercial Register at the Registry Agency with UIC: 131261782, with registered office and registered address in Sofia 1618, Vitosha district, residential area Bakston, block 20, entr. 5 (D), fl. 1, app. 85 with the subject of activity: hotel and restaurant and additional tourist services (“Policy”) and is an integral part of the General Terms and Conditions of Use of the website of Rena Hotel (“Hotel”). If you do not agree to the Terms, you will not be able to use the Site. If the Policy changes, the changes will be posted here.
For the purpose of providing travel services (“Services”) on the www.renasunnybeach.com website (the “Site”), AS Hoteli EOOD processes personal data of individuals who are customers of the Hotel or other individuals identified below (“Data Subjects”/”You”/”Your”) in accordance with this Policy.
In processing personal data, AS Hoteli EOOD complies with all data protection legislation applicable to the business, including but not limited to Regulation (EU) 2016/679 (“Regulation”).
Definitions:
personal data is any information relating to you by which you can be identified, directly or indirectly;
processing of personal data (“Processing”) means any act or set of acts which may be performed upon personal data, whether or not by automatic means.
Purposes of Processing
AS Hoteli EOOD collects the data provided by you in connection with the conclusion of a contract for the use of the hotel’s services, the documentation of processing activities, the fulfilment of the controller’s legal obligations, and the protection of legitimate interests under applicable law.
1.1. Conclusion and execution of a contract. These are the purposes necessary for the steps involved in the conclusion and performance of the contract between you and the Hotel, including the processing of data necessary for this purpose when performing registration, account creation and the activities of providing the Services accessible through the Site. In addition, these purposes include the communication with you, including by email, necessary in connection with the provision of the Services and/or notifying you of changes to the Services provided. Processing of some or all of the above categories of data may be necessary for this purpose.
1.2. Legitimate interest. The purposes of the legitimate interests of AS Hoteli EOOD and its subcontractors or service providers) include:
Ensuring the proper functioning and use of the Site for you and other users, maintaining and administering the Services, resolving disputes, identifying and preventing malicious activity;
Communicating with you, including electronically, about important matters relating to the Services;
Receiving and processing signals, complaints, requests and other correspondence received;
Enforcing and protecting AS Hoteli EOOD’s rights and legitimate interests, including through legal proceedings, as well as assisting in the enforcement and protection of the rights and legitimate interests of other Site users and/or third parties involved.
1.3. Legal Obligations. These are objectives such as:
Financial and accounting activities where it is necessary to process and store information required by law in order to meet tax, accounting and other reporting obligations;
Activities to comply with statutory obligations to retain or provide information;
Activities to comply with documentation, reporting, and other obligations related to the requirements of Regulation (EU) 2016/679 and applicable law, including the obligations conferred by the Processing Agreement and other relevant obligations.
1.4. Explicit Consent. Your data may be processed on the basis of your explicit consent, in which case the processing shall be specific and to the extent and scope provided for in the relevant consent.
AS Hoteli EOOD processes personal data solely in accordance with this Policy and to the extent permitted by law. When you register on our website, make a booking, subscribe to our material, provide answers, questions, or comments, or fill out a form, we collect information.
2. Personal data collected, stored and processed. Storage period
Personal data | Purpose | Storage period |
Name | Conclusion and performance of the contract with the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
ID Number | Conclusion and performance of the contract with the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
Identity card, passport | Conclusion and execution of the contract with the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
Address, telephone, email | Address, telephone, email Conclusion and execution of the contract with the hotel, including the reception and processing of complaints and signals, increasing the quality of the services provided by the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
Other data voluntarily provided by you | Performance of the contract by the hotel | Up to 5 years from the date of termination of the contract |
Data of persons under 18 years of age | Execution of the contract by the Tour Operator | Up to 5 years from the date of termination of the contract |
Logs for the use of the website | Execution of the contract by the hotel | Up to 1 year from the date of booking |
The use of the website is possible without the need for registration and the provision of any data by any user.
The personal data you provide will be processed for the purposes of providing tourist information and service information, as well as customizing the webpage to meet your needs and improving it. AS Hoteli EOOD may share some of the information you provide with third parties in order to fulfill your requests, requests, and orders.
This website’s services are intended for people who are at least 18 years old. AS Hoteli EOOD does not collect, use, or disclose minors’ personal information without the prior consent of a parent or guardian. AS Hoteli EOOD declares compliance with child protection legislation.
Rights regarding personal data
As an individual data subject, you have the following rights:
3.1. Right to information.
The purpose of this Policy is to inform you in detail about the processing of your personal data in relation to the Services provided.
3.2. Right of Access.
You have the right to receive confirmation whether your personal data is being processed, to access it and to obtain information about its processing and your rights in relation to it.
3.3. Right to rectification.
You have the right to rectify your personal data if it is incomplete or inaccurate.
Your data may be rectified by you and/or your authorised representative.
3.4. Right to erasure.
You have the right to request erasure of data, except where there is a substantial ground for processing and/or a legal obligation.
3.5. Right to restriction in relation to data processing.
The Regulation allows you to restrict the processing of your personal data if there are legitimate grounds for doing so.
3.6. Right to notify third parties.
Where applicable, you have the right to request that AS Hoteli EOOD notify third parties to whom your data has been provided about the rectification, erasure, or restriction of the processing of your personal information.
3.7. Right to data portability.
You have the right to receive the personal data you have provided in a structured, machine-readable format and to use that data for another controller of your choosing.
3.8. The right not to be subjected to a decision based solely on automated processing, including profiling, that has legal consequences for you or otherwise significantly affects you, unless the grounds for doing so are provided for in the applicable data protection legislation and appropriate safeguards are in place to protect your rights, freedoms, and legitimate interests.
No technologies falling into this category are used in the provision of the Services on the Site.
3.9. Right to withdraw consent.
You have the right at any time to withdraw your consent to the processing of personal data based on the consent you provided. Such withdrawal shall have no effect on the legality of the processing based on the consent granted prior to the withdrawal.
Data submitted on the legal basis of permission include dietary preferences, allergies, and other information at your choice that AS Hoteli EOOD does not need in order to conclude the trip service contract.
3.10. Right to object.
You have the right to object to data processed on the basis of a legitimate interest.
If we receive such an objection, we will review your request and, if reasonable, comply with it. If we feel there are compelling legitimate grounds for processing or that it is required for the establishment, exercise, or defense of legal claims, we will notify you.
3.11. Right to file a complaint with a supervisory authority.
You have the right to file a complaint with a supervisory authority if you feel that the processing of personal data about you violates applicable data protection laws. The Commission for Personal Data Protection is the regulatory authority in the Republic of Bulgaria, with the following address: Sofia 1592, 1592 Sofia, 2 Tsvetan Lazarov Boulevard.
Data Protection Officer.
If you have any questions regarding this Policy, please contact the Data Protection Officer:
e-mail:
phone:
address:
NON-DISCLOSURE OF PERSONAL DATA
AS Hoteli EOOD gathers personal data in compliance with applicable data protection regulations. Except as stated in this Policy, personal information will not be given to any third parties. Where it is necessary to disclose your personal data to AS Hoteli EOOD contractors in connection with services supplied, such data will only be processed in accordance with the law and the services requested.
Certain personal data may be revealed to competent authorities in accordance with the law, a court order, or another appropriate act, and/or if disclosure is required for the identification of crimes at home or abroad.
RESPONSIBILITY
AS Hoteli EOOD is not liable for the personal data processing policies of the websites to which this website links.
PRIVACY
When processing personal data, AS Hoteli EOOD takes all necessary precautions to protect it from loss, misuse, disclosure, alteration, or destruction, as well as publication to unauthorised third parties.