PRIVACY POLICY

Camping “Gardenia” is a personal data controller to the CPPD and processes the provided data and personal information in accordance with the Personal Data Protection Act and the General Data Protection Regulation (EU) 2016/679. This Privacy Policy applies to Gardenia Camping and its official website. As a data controller and as professionals with many years of experience in the tourism industry, we respect the privacy of our users. This security policy aims to inform you about the process of collection, processing, storage, use and redirection of personal data. Therefore, please familiarise yourself with its contents by reading it carefully. In case you have any questions, you can ask them via the Contact Form on the website.

DEFINITIONS

For the purposes of this policy and in accordance with Regulation (EU) 2016/679: Personal data is any information relating to an individual who is identified or identifiable, directly or indirectly, by an identification number or by one or more specific attributes. The data may relate to facts (for example – name, e-mail address, location or date of birth) or to an opinion about the Data Subject’s actions or behaviour. A controller is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for its determination may be laid down in Union law or the law of a Member State; Processing of personal data is any act or set of acts which may be carried out under

PROCESSING OF PERSONAL DATA

In order to secure and improve the services we provide and for the purposes of administering the resources to them, we store, use and process personal data in compliance with applicable legal requirements.

TYPES OF PERSONAL DATA PROCESSED

The types of personal data that the controller collects and processes are different according to the purposes for which they are collected and the grounds for their processing: 1. In order to make a booking and confirm a reservation, the HOTEL collects and processes the following types of data: a/ When booking through a website: – Name and surname of the contact person; – E-mail address and telephone number of the contact person; b/ When booking by telephone: – Feedback telephone number and e-mail address for confirmation of the reservation – Name and surname of the contact person; These data are stored until the reservation is made. The data is then destroyed and no further processing is possible. 2. For the purpose of accommodation of guests in the HOTEL, the administrator processes and stores the following data. The data collected for the purpose of registration at the hotel are collected on the basis of Art. 116, paragraph 2 of the Tourism Act and are necessary for keeping a register of the tourists accommodated. The data shall be stored for a period of 5 /five/ calendar years. 3. For the purpose of corporate or personal events in the HOTEL, the following data is processed and stored. In case of corporate events, a contact person indicated by the legal entity organizing the event; – e-mail address and telephone number of the contact person These data are stored for up to 3 /three/ calendar years after the event.

PROCESSING PRINCIPLES

When processing personal data, we comply with the following principles: – lawfulness – when collecting, processing and storing your data, we comply with the provisions of the applicable Bulgarian and European legislation; – fairness and transparency – the data we collect, process and in accordance with this Privacy Policy, which is available to each user; – relevance of processing to the purposes and minimization of data – the types of data we collect are minimized in accordance with the purposes for which they are collected. The purposes for which your data are processed are those for which we are legally obliged, for which we have a contractual relationship or for which we have obtained your consent to collect them; – storage limitation – we process and store the data received for a period of time in accordance with the purposes for which they are needed and in accordance with your consent. – user consent for data processing – in order to use your data for marketing purposes to improve the services we provide to you, we must obtain your explicit consent to do so. Please note that when you send an inquiry to the HOTEL (for price conditions, for a reservation, for clarification on an already made reservation, for an event and/or other questions related to the services provided by the hotel) you give your consent to the HOTEL to store and process the personal data provided by you for the purpose of the inquiry. In this case, your data will be deleted in accordance with current regulations and this privacy policy.

DATA PROTECTION

We use electronic methods to process personal data to ensure accurate and prompt service delivery and to assist users. The processing of your personal data provided to Camping “Gardenia” is carried out in accordance with the applicable data protection legislation, and Gardenia Camping respects your privacy. Camping “Gardenia” guarantees that the persons authorized by it to process the personal data have undertaken a commitment to confidentiality or are obliged by law to respect confidentiality.

PERSONAL DATA SECURITY

Camping “Gardenia” applies technical and organizational security measures to protect the personal data you have provided from accidental or unlawful destruction, accidental loss, unauthorized access, alteration or dissemination, as well as from other unlawful forms of processing by unauthorized persons. The security measures we apply are subject to constant improvement and adaptation to the latest technologies. The personal data collected may be provided to partners of “Camping Gardenia” who act as data processors on behalf of Gardenia Camping and are committed to complying with all applicable data protection regulations. We comply with the condition that the relevant information may only be used within the limits set by the legal basis on which it is collected or by your personal consent in respect of processing carried out on behalf of Camping “Gardenia”, and that such information is to be treated as confidential. “Camping Gardenia” may disclose and provide personal information in accordance with applicable law if a court or administrative authority so orders or requires, or if the provision of the personal information is related to the performance of a legal obligation of “Camping Gardenia”. The data collected for the purpose of accommodation at “Camping Gardenia” is accessible to the third parties specified in the Tourism Act – the Ministry of Tourism, Municipalities, the Ministry of Interior, the National Revenue Agency and the National Statistical Institute.

USERS’ RIGHTS CONCERNING THEIR DATA

1. In accordance with current legislation, you have the right of ownership and access to the data you have provided for processing. By submitting a written request via the Contact Form on the website, you can obtain information about the type of personal data provided and the purpose of processing it, as well as request that we remove any records of your personal information without the possibility of further processing. By accessing your data, you can request that it be corrected in case you find errors or discrepancies.

2. Users have the right to object to the processing of their data. The objection shall be addressed to Gardenia Camping, in accordance with paragraph 1 of this section. Camping “Gardenia” undertakes to consider your objection and inform you of the outcome of the internal review within 30 calendar days of receipt.

3. Consumers have the right to complain to the competent supervisory authority. Under the current legislation, the competent supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection.

4. Users have the right to receive their data that Camping “Gardenia” stores when it is provided in a structured, widely used and machine-readable format. Users also have the right to transfer this data to another data controller without hindrance from Camping “Gardenia”, in the cases and in respect of data provided by consent, in the case of data provided under a contract to which the user is a party or data provided when the user takes steps and requests a contract.

CHANGES TO DATA PROTECTION RULES

“Camping Gardenia’s” privacy policy may be changed unilaterally by Camping Gardenia in order to improve it, offer new services, changes in the way we serve and communicate with our customers, and in connection with legislative changes. When changes are made to this Privacy Policy, Camping “Gardenia” will bring the changes to your attention by posting them on our website, giving you a reasonable period of time to review them, after which they will apply to the processing of your personal data without further notice. If you declare within this period that you reject the changes, you will be deemed to have withdrawn your consent to the processing of your personal data and Camping “Gardenia” will cease processing it in the future. This may also involve the termination of your registrations for our games, services, e-newsletters, etc., for the purposes of which you originally provided us with your personal data.

CONTACT WITH THE TEAM OF “CAMPING GARDENIA”

If you have any questions regarding our privacy measures and policies, please send a message via the Contact Form on the website.