Privacy policy

PRINCIPLES FOR PROCESSING PERSONAL DATA

The policy of STROY MONTAGE 24 EOOD aims to ensure compliance with the provisions of the Regulation.

STROY MONTAGE 24 EOOD collects and processes personal data lawfully, fairly and in accordance with the principles and rights of individuals in relation to the processing of their personal data.

STROY MONTAGE 24 EOOD processes personal data of individuals only in the following cases:

processing is necessary for compliance with a legal obligation of STROY MONTAGE 24 EOOD
processing is necessary for the performance of a contract (including an order) with STROY MONTAGE 24 EOOD to which an individual is a party, or to take steps at the request of an individual prior to entering into a contract where identification is required;
an individual has given his/her unambiguous consent for a clear and transparently defined purpose by STROY MONTAGE 24 EOOD for which the processing of his/her personal data is necessary;
the processing is necessary to protect the vital interests of the individual whose personal data are being processed or of another individual;
the processing is necessary for the purposes of the legitimate interests of STROY MONTAGE 24 EOOD or of a third party, in accordance with the provisions of the Regulation;
the other cases provided for in the Regulation.
STROY MONTAGE 24 EOOD does not collect and does not process personal data of individuals that exceed its obligations under law or its needs for doing business.

In all cases where it is necessary to use collected and processed personal data of individuals for purposes other than the initial ones, STROY MONTAGE 24 EOOD notifies the individuals concerned, requests their consent and proceeds with the processing of their personal data for other purposes only after their explicit consent.

STROY MONTAGE 24 EOOD collects and processes only the minimum necessary personal data of individuals that:

are provided for by law;

are necessary for the performance of a contract;

are necessary for the fulfillment of the purposes for which they are collected.
STROY MONTAGE 24 EOOD ensures that the processing of personal data of individuals is carried out with maximum accuracy and, if possible, always up-to-date.

STROY MONTAGE 24 EOOD ensures that access to and processing of personal data of individuals is carried out by the minimum necessary number of persons (operators) who have the necessary competence for their processing and the necessary commitment to their protection.

STORAGE PERIODS

STROY MONTAGE 24 EOOD stores personal data for the following periods:

Data for the register of accommodated tourists within the meaning of Art. 116 of the Tourism Act, which include identification data of the accommodated persons and data related to hotel accommodation - In accordance with the procedure and term provided for in the Tourism Act and the by-laws

Information related to requested and used hotel accommodation services, for events and for restaurant services, incl. for canceled hotel accommodation reservations (insofar as they are related to the refund of prepaid amounts and/or withholding of amounts due) - From the making of the relevant reservation/request up to 5 /five/ years from the provision of the service/completion of the contract/cancellation of the reservation. In cases where the services are requested and used on the basis of a contract with continuous performance, the term begins to run from the final performance and/or termination of the contract.
Financial and accounting documents; invoices; authorization forms; other information related to tax and social security control - Up to 10 /ten/ years, starting from the beginning of the year following the one in which payment of the obligation for the relevant year is due.
Unstructured communication, correspondence, complaints, signals, etc. similar - 5 years.
Video data - up to 1 week
Data processed based on the explicit consent of the Data Subject - From the moment of granting consent until its withdrawal by the Data Subject.
Until a request from the individual for their deletion, when there is a basis for such a request
The personal data specified in this Policy may be processed for a longer period than those specified above, if this is necessary to achieve the purposes provided for therein or to protect the rights and/or legitimate interests (including in court) of STROY MONTAGE 24 EOOD or if the current legislation provides for the processing of data for a longer period.

In all cases, STROY MONTAGE 24 EOOD ensures that at least once a year a review of the collected and processed personal data is made and those of them that fall into any of the above hypotheses are deleted without undue delay.

RULES FOR PROCESSING PERSONAL DATA

Personal data is processed with the necessary levels and measures for protection
STROY MONTAGE 24 EOOD provides the necessary levels of physical, organizational and technological protection in view of:

the nature, scope, context and purpose of the processed personal data;
the probability, levels of impact and severity of the risk to the rights and freedoms of individuals in the event of a breach of the security of the processed personal data;
its financial and organizational capabilities.
STROY MONTAGE 24 EOOD also provides all necessary measures for the timely recovery of collected and processed personal data in the event of their loss as a result of accidental, malicious or force majeure events.

Personal data is processed with controlled and traceable access
STROY MONTAGE 24 EOOD provides the necessary and appropriate technical, organizational and technological measures for controlled and traceable access to the personal data of individuals.

Personal data is processed with the necessary accountability to comply with the Regulation
STROY MONTAGE 24 EOOD provides the necessary accountability and records to be able to prove that the provisions of the Regulation have been complied with.

DATA SUBJECTS

In connection with the services provided, STROY MONTAGE 24 EOOD processes information about the following Data Subjects:

natural persons visiting the hotel website;
natural persons who make reservations on their own behalf or on behalf of another natural or legal person through the Website;
natural persons using the services provided by STROY MONTAGE 24 EOOD, including, but not limited to, hotel accommodation services, restaurant services and related services, provision of premises for organizing other events, as well as natural persons representing or otherwise acting on behalf of legal persons who use these services;
The services of STROY MONTAGE 24 EOOD can only be requested by legally capable persons who have reached the age of 18.

RIGHTS OF NATURAL PERSONS WHOSE DATA ARE PROCESSED

STROY MONTAGE 24 EOOD ensures compliance with the rights of natural persons whose personal data are collected and processed, which includes:

right to be informed about the processing of personal data;
right to access personal data - what data is available;
right to correct inaccurate personal data;
right to delete personal data - the right to "be forgotten";
right to restrict the processing of personal data;
right to be informed about actions as a result of a request for correction, deletion or restriction of the processing of personal data;
right to data portability;
right to object to the processing of personal data;
right not to be subject to automated decision-making, including profiling.
PROCESSED PERSONAL DATA

Processed Personal Data in the Capacity of Administrator:

of employees;
of clients, individuals;
of suppliers, individuals;
PURPOSES OF PROCESSING PERSONAL DATA

STROY MONTAGE 24 EOOD as Administrator performs the following operations and processes only the necessary personal data for the following purposes:

for concluding, executing and terminating employment contracts and calculating employee salaries and benefits;
accepting, administering and processing reservations and canceling them;
administering, executing and delivering purchases made through the Website;
administering and receiving payments for the services provided, including remotely;
for providing services to clients;
ensuring an individual approach to providing services, consistent with the preferences stated by their users.
for concluding and executing contracts with suppliers, individuals;
for direct marketing for sales purposes;

RECIPIENTS AND CATEGORIES OF RECIPIENTS

In connection with the implementation of the purposes specified above, STROY MONTAGE 24 EOOD provides personal data of individuals to the following recipients:

NAR in connection with the calculation of staff salaries;
NSSI in connection with the calculation of staff benefits;
Occupational Medicine Company in connection with the obligation to maintain an up-to-date health status of staff and conduct periodic medical examinations;
Main Labor Inspectorate, NSSI and Ministry of Interior - in connection with occupational accidents;
Ministry of Interior - in connection with the transmission of information about hotel guests;
Other state and municipal authorities and/or institutions - in connection with legal obligations to them or in connection with legal requests from them for information containing personal data;
Subcontractors for the fulfillment of contractual obligations.

Processing of personal data for marketing purposes

We collect and process personal data for marketing purposes in order to provide you with personalized offers, news and promotions that may be of interest to you. This includes sending marketing messages via email, SMS, phone calls or other communication channels.

Categories of personal data The personal data processed may include:

First and last name
Email address
Telephone number
Legal basis for processing The processing of personal data for marketing purposes is based on your explicit consent. You have the right to withdraw your consent at any time by contacting us or using the unsubscribe option provided in each marketing message.

Data retention period Personal data will be stored until you withdraw your consent or until the legally specified period expires.

Your rights You have the right to access, rectify, erase, restrict processing and object to the processing of your personal data, as well as the right to data portability. For more information, please contact us.

COMPANY CONTACT DETAILS

If you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, you can contact:

Phone: +359 88 426 8888
E-mail: office@residencebolyarka.com

COMPETENT SUPERVISORY AUTHORITY

On the territory of the Republic of Bulgaria, the competent supervisory authority is the Personal Data Protection Commission.

In case of suspicion that your rights related to the protection of your personal data have been violated, you can file a report to:

HOTEL RESIDENCE BOLYARKA

Arbanassi, Dimitar Papazov 2 Str.
Phone: +359 88 426 8888
E-mail: office@residencebolyarka.com