Personal Data Privacy Policy – AS HOTELS LTD – Hotel Jeravi Beach
Update date: 25 February 2024
This document contains the Personal Data Privacy Policy of “AS Hotels” Ltd., registered in the Commercial Register at the Registry Agency with UIC: 131261782, registered office and registered address: Sofia city 1618, Vitosha district, Buxton housing estate, building 20, E entrance, 1-st floor, flat 85 with scope of business: hotel and restaurant management and additional tourist services (“Policy”) and is an integral part of the General Terms and Conditions of Use of the website of Hotel Jeravi Beach (the “Hotel”). If you do not agree with the Terms, you will not be able to use the Site. If the Policy changes, the changes will be posted here.
In order to provide tourist services (“Services”) on the Site www.jeravisunnybeach.com (the “Site”), AS Hotels Ltd processes personal data of individuals – customers of the hotel or other individuals identified below (“Data Subjects”/”You”/”You”), in accordance with this Policy.
In processing personal data, AS Hotels Ltd complies with all applicable data privacy legislation, including but not limited to Regulation (EU) 2016/679 (“Regulation”).
Definitions:
- personal data is any information relating to you by which you can be identified, directly or indirectly;
- processing of personal data
(“Processing”) is any act or set of acts which may be performed upon personal data, whether or not by automatic means.
- Purposes of Personal Data Processing
AS Hotels EOOD collects the data provided by you in connection with the conclusion of a contract for the use of the hotel’s services, the documentation of the Personal Data Processing activities and the fulfilment of the legal obligations of the administrator and the protection of legitimate interests under applicable law:
1.1. Сключване и изпълнение на договор. Contract conclusion and execution. These are the purposes necessary for the steps involved in the conclusion and performance of the contract between you and the Hotel, including the processing of data necessary for this purpose in carrying out registration, account creation and the activities of providing the Services accessible through the Site. In addition, these purposes include the communication with you, including by email, necessary in connection with the provision of the Services and/or notifying you of changes to the Services provided. Processing of some or all of the above categories of data may be necessary for this purpose.
1.2. Легитимен интерес. Legitimate interest. The purposes of the legitimate interests of AS Hotels Ltd and its subcontractors or service providers) include:
- Ensuring the proper functioning and use of the Site by you and other users, maintaining and administering the Services, resolving disputes, identifying and preventing malicious activity;
- Communicating with you, including electronically, about important matters relating to the Services;
- Receiving and processing of received signals, complaints, requests and other correspondence;
- Exercise and protect the rights and legitimate interests of AS Hotels Ltd, including in court, and assist in exercising and protecting the rights and legitimate interests of other users of the site and/or third parties affected.
1.3. Законови задължения. These are goals such as:
- Financial and accounting activities where it is necessary to process and store information required by law in order to meet tax, accounting and other reporting obligations;
- Activities to fulfil statutory obligations to preserve or provision of information;
- Activities to comply with documentation obligations, reporting obligations and other obligations related to compliance with the requirements of Regulation (EU) 2016/679 and applicable law, including in relation to the obligations assigned by the Personal Data Processing Agreement and other applicable obligations.
1.4. Изрично съгласие. Your data may be processed based on your explicit consent, and the processing in this case is specific and to the extent and scope provided for in the relevant consent.
AS Hotels Ltd. processes personal data only in accordance with this Policy and to the extent permitted by law. Information is collected when you register on the website, make a reservation, subscribe to our material, provide answers, inquiries or comments, or fill in certain data in a form.
2. Personal data collected, stored and processed. Storage period
| Personal data | Purpose | Storage period |
| Name | Conclusion and execution of the contract with the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
| EGN | Conclusion and execution of the contract with the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
| ID card, passport | Conclusion and execution of the contract with the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
| Address, phone, email | Conclusion and execution of the contract with the hotel, including the reception and processing of complaints and signals, increasing the quality of services provided by the hotel, legitimate interest | Up to 5 years from the date of termination of the contract |
| Other data voluntarily provided by you | Performance of the contract by the hotel | Up to 5 years from the date of termination of the contract |
| Data of persons under 18. | Performance of the contract by the Tour Operator | Up to 5 years from the date of termination of the contract |
| Logins for use of the site | Performance of the contract by the hotel | Up to 1 year from the date of booking |
Using the website is possible without the need for registration and provision of any data by any user.
The personal data provided by you will be processed for the purposes of providing tourist information and information about services, as well as for the purposes of personalizing the website in relation to your needs, improving the website. AS Hotels EOOD may provide part of the data received to other third parties in connection with the fulfillment of your requests, requests and orders.
The services provided on this website are intended for persons over 18 years of age. AS Hotels Ltd. does not collect, use or disclose personal data of minors without the prior consent of a parent or guardian. AS Hotels Ltd. declares that it complies with the legislation in the field of child protection.
- Rights regarding personal data
As an individual, a data subject, you have the following rights:
3.1. Право на информираност.
This Policy aims to inform you in detail about the processing of your personal data in connection with the Services provided.
3.2. Право на достъп.
You have the right to receive confirmation of whether your personal data is being processed, access to it and information regarding its processing and your rights in this regard.
3.3. Право на коригиране.
You have the right to correct your personal data if it is incomplete or inaccurate.
Your data can be corrected by you and/or your authorized representative.
3.4. Право на изтриване.
You have the right to request deletion of data, except in cases where there is a substantial basis and/or legal obligation for their processing.
3.5. Право на ограничаване във връзка с обработването на данни.
The regulation provides for the possibility to restrict the processing of your personal data if there are grounds for this provided for therein.
3.6. Право за уведомяване на трети лица.
If applicable, you have the right to request that AS Hotels EOOD notify third parties to whom it has provided your data regarding the correction, deletion or restriction of the processing of your personal data.
3.7. Право на преносимост на данните.
You have the right to receive the personal data you have provided and which concerns you, in a structured, machine-readable format, as well as to use this data for another administrator at your discretion.
3.8. Право да не бъдете обект на решение, основаващо се единствено на автоматизирано обработване, including profiling which produces legal effects for you or similarly significantly affects you, unless there are grounds for this provided for in the applicable personal data protection legislation and appropriate safeguards are provided for the protection of your rights, freedoms and legitimate interests.
When providing the Services on the Site, technologies falling into this category are not used.
3.9. Право на оттегляне на съгласие.
You have the right to withdraw your consent to the processing of personal data based on your consent at any time. Such withdrawal shall not affect the lawfulness of the processing based on your consent up to the time of its withdrawal.
Data provided on the legal basis of consent are: food preference data, allergies, other at your discretion, which are not required by AC Hotels Ltd. for the conclusion of the travel service contract.
3.10. Право на възражение.
You have the right to object to data processed on the basis of legitimate interest.
In the event of such an objection, we will consider your request and, if justified, we will comply with it. If we believe that there are compelling legitimate grounds for the processing or that it is necessary for the establishment, exercise or defence of legal claims, we will inform you accordingly.
3.11. Право на жалба до надзорен орган.
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the applicable data protection legislation. The supervisory authority in the Republic of Bulgaria is the Personal Data Protection Commission, with address: 2, 1592 Sofia, Blvd. “Prof. Tsvetan Lazarov”.
- Data Protection Officer.
If you have any questions regarding this Policy, please contact the Data Protection Officer:
e-mail:
phone:
address:
- NON-DISCLOSURE OF PERSONAL DATA
AS Hotels Ltd. collects personal data only in accordance with the legislation on the protection of personal data. Except in the cases provided for in this Policy, personal data will not be provided to other third parties. When it is necessary to provide your personal data to contractors of AS Hotels Ltd. in connection with the services provided, these data will be processed only in accordance with the requirements of the law and in connection with the requested services.
It is possible that certain personal data may be disclosed to competent authorities by virtue of law, court decision or other appropriate act, and/or if their disclosure is necessary for the detection of crimes in the country and/or abroad.
- RESPONSIBILITY
AS Hotels Ltd. is not responsible for the personal data processing policies of websites to which this website contains links.
- CONFIDENTIALITY
When processing personal data, AS Hotels EOOD takes all necessary measures to protect the information from loss, misuse, disclosure, alteration or destruction, as well as publication to unauthorized third parties.