PRIVACY POLICY

PRIVACY POLICY OF AS HOTELI EOOD - Hotel Hermes

Date of update: 25 February 2024

This document contains the Personal Data Protection Policy of AS Hoteli EOOD registered in the Commercial Register at the Registry Agency with UIC: 131261782, with registered office and registered address in the town of Hermes. Sofia 1618, Vitosha district, g.k. 20, no. E, fl. 1, app. 85, with the subject of activity: hotel and restaurant and additional tourist services (“Policy”) and is an integral part of the General Terms and Conditions of Use of the Hermes Hotel website. If you do not agree to these Terms, you will be unable to use the Site. If the policy changes, they will be posted here.

AS Hoteli EOOD processes personal data of Hotel customers or other individuals identified below (“Data Subjects”/”You”/”Your”) in accordance with this Policy in order to provide travel services (“Services”) on the www.hermesresort.com website (the “Site”).

AS Hoteli EOOD processes personal data in accordance with all data protection legislation applicable to the business, including but not limited to Regulation (EU) 2016/679 (the “Regulation”).

Definitions:

  • Personal data is any information relating to you by which you can be identified, directly or indirectly;
  • processing of personal data (“Processing”) is any act or set of acts which may be performed upon personal data, whether or not by automatic means.
  1. Purposes of Processing

AS Hoteli EOOD collects the data provided by you in connection with the conclusion of a contract for the use of the hotel’s services, the documentation of processing activities, the fulfilment of the controller’s legal obligations, and the protection of legitimate interests under applicable law:

1.1.
Сключване и изпълнение на договор.
Conclusion and execution of a contract. These are the purposes required for the steps involved in the conclusion and performance of the contract between you and the Hotel, including the processing of data required for this purpose when performing registration, account creation, and activities related to providing the Services accessible through the Site. Furthermore, these purposes include communicating with you, including via email, as required in connection with the provision of the Services and/or informing you of changes to the Services provided. Processing some or all of the above categories of data may be required for this purpose.

1.2.
Легитимен интерес.
Legitimate Interest. The purposes of the legitimate interests of AS Hoteli EOOD and its contractors or service providers) include:

  • Ensuring the proper functioning and use of the Site by you and other users, maintaining and administering the Services, resolving disputes, identifying and preventing malicious activity;
  • Communicating with you, including electronically, about important matters relating to the Services;
  • Receiving and processing signals, complaints, requests and other correspondence received;
  • Enforcing and protecting AS Hoteli EOOD’s rights and legitimate interests, including through legal proceedings, and assisting in the enforcement and protection of the rights and legitimate interests of other users of the Site and/or third parties affected.

1.3.
Законови задължения.
Legal Obligations. These are purposes such as:

  • Financial and accounting activities where it is necessary to process and store information that the law requires in order to comply with tax, accounting and other reporting obligations;
  • Activities to comply with statutory obligations to retain or provide information;
  • Activities to comply with documentation, reporting, and other obligations related to the requirements of Regulation (EU) 2016/679 and applicable law, including the obligations conferred by the Processing Agreement and other relevant obligations.


1.4.
Изрично съгласие.
Explicit Consent. Your data may be processed with your explicit consent, in which case the processing will be limited to the scope and extent specified in the relevant consent.

AS Hoteli EOOD only processes personal data in accordance with this Policy and as permitted by law. Information is collected when you register on the website, make a booking, subscribe to our material, provide answers, queries or comments, or fill in certain details on a form.

2. Personal data collected, stored and processed. Storage period

Personal data

Purpose

Storage period

Name

Conclusion and performance of the contract with the hotel, legitimate interest

Up to 5 years from the date of termination of the contract

ID Number

Conclusion and performance of the contract with the hotel, legitimate interest

Up to 5 years from the date of termination of the contract

Identity card, passport

Conclusion and performance of the contract with the hotel, legitimate interest

Up to 5 years from the date of termination of the contract

Address, telephone, email

Conclusion and performance of the contract with the hotel, including receiving and handling complaints and signals, increasing the quality of services provided by the hotel, legitimate interest Up to 5 years from the date of termination of the contract

Up to 5 years from the date of termination of the contract

Other data voluntarily provided by you

Performance of the contract by the hotel

Up to 5 years from the date of termination of the contract

Data of persons under 18 years of age

Performance of the contract by the Tour Operator

Up to 5 years from the date of termination of the contract

Logs for the use of the website

Performance of the contract by the hotel

Up to 1 year from the date of booking

The use of the website is possible without the need for registration and the provision of any data by any user.

The personal data you provide will be processed for the purposes of providing tourist information and service information, as well as customizing the webpage to meet your needs and improving it. AS Hoteli EOOD may share some of the information you provide with third parties in order to fulfill your requests, requests, and orders.

У The services provided on this website are intended for people over the age of 18. AS Hoteli EOOD does not collect, use, or disclose minors’ personal information without the prior consent of a parent or guardian. AS Hoteli EOOD declares compliance with child protection legislation.

  1. Rights regarding personal data

As an individual data subject, you have the following rights:

3.1.
Право на информираност.

The purpose of this Policy is to inform you in detail about the processing of your personal data in relation to the Services provided.

3.2.
Право на достъп.

You have the right to obtain confirmation of whether your personal data is being processed, access to it, and information about its processing, as well as your rights in connection with it.

3.3.
Право на коригиране.

You have the right to correct any incomplete or inaccurate personal data. Your data can be corrected by you or your authorized representative.

You have the right to correct any incomplete or inaccurate personal data. Your data can be corrected by you or your authorized representative.

3.4.
Право на изтриване.

You have the right to request data erasure, unless there is a compelling reason for processing and/or a legal requirement.

3.5.
Право на ограничаване във връзка с обработването на данни.

The Regulation provides for the possibility to restrict the processing of your personal data if there are grounds for doing so provided for therein.

3.6.
Право за уведомяване на трети лица.

Where applicable, you have the right to request that AS Hoteli EOOD notify third parties to whom it has provided your data about the rectification, erasure, or restriction of the processing of your personal information

3.7.
Право на преносимост на данните.

You have the right to receive the personal data you have provided in a structured, machine-readable format and to use that data for another controller of your choosing.

3.8.
Право да не бъдете обект на решение, основаващо се единствено на автоматизирано обработване,
The right not to be subjected to a decision based solely on automated processing, including profiling, that has legal consequences for you or otherwise significantly affects you, unless the grounds for doing so are provided for in the applicable data protection legislation and appropriate safeguards are in place to protect your rights, freedoms, and legitimate interests.

No technologies falling into this category are used in the provision of the Services on the Site.

3.9.
Право на оттегляне на съгласие.

You have the right at any time to withdraw your consent to the processing of personal data based on the consent you provided. Such withdrawal shall have no effect on the legality of the processing based on the consent granted prior to the withdrawal.

Data provided on the legal basis of consent include food preferences, allergies, and other information at your discretion that is not required by AS Hoteli EOOD for the completion of the travel service contract.

3.10.
Право на възражение.

You have the right to object to data processed on the basis of legitimate interest.
If we receive such an objection, we will consider Your request and, if justified, comply with it. If we believe that there are compelling legitimate grounds for processing or that it is required for the establishment, exercise, or defense of legal claims, we will inform you.

3.11.
Право на жалба до надзорен орган.

You have the right to file a complaint with a supervisory authority if you believe that the processing of personal data about you violates applicable data protection laws. The Republic of Bulgaria’s supervisory authority is the Commission for Personal Data Protection, whose address is. 1592, Sofia, 2, Prof. Tsvetan Lazarov Blvd

  1. Personal Data Protection Officer.

If you have any questions regarding this Policy, please contact the Data Protection Officer

email:

Phone:

address:

  1. NON-DISCLOSURE OF PERSONAL DATA

AS Hoteli EOOD collects personal data in accordance with applicable data protection legislation. Except as stated in this Policy, personal information will not be disclosed to any third parties. Where it is necessary to provide your personal data to AS Hoteli EOOD contractors in connection with services provided, such data will only be processed in accordance with the law and the services requested.

Certain personal data may be disclosed to competent authorities as a result of a law, court decision, or other appropriate act, and/or if disclosure is required for the detection of crimes at home or abroad.

  1. ACCOUNTABILITY

AS Hoteli EOOD is not liable for the personal data processing policies of the websites to which this website links.

  1. PRIVACY

When processing personal data, AS Hoteli EOOD takes all necessary precautions to protect it from loss, misuse, disclosure, alteration, or destruction, as well as publication to unauthorised third parties.