Reservation

БЪЛГАРИЯ
СЛЪНЧЕВ БРЯГ
тел.: +359 554 / 22 814
факс: +359 554 / 22 819
e-mail:hotelnobel@dafnadk.com

I. POLICY ON PROTECTION OF PERSONAL DATA

 

Compliance with the rules of the General Data Protection Regulation (Regulation 2016/679) aims to protect the rights of individuals from all EU Member States and to harmonize the regulations for their processing.

 

II. Principles for the processing of personal data:

 

the data are processed legally, in good faith and transparently;

Explicitly received consent from you as a customer;

collected for specific, explicit, and legitimate purposes and not further processed in a way inconsistent with these purposes;

we process data related to and beyond what is necessary for the purposes we have specified;

accounting purposes;

statistical purposes;

the data are stored for no longer than is necessary for the purposes for which they were collected;

the data is properly protected.

 

In the processing and storage of personal data, Dafna DK Ltd. may process and store personal data in order to protect its following legitimate interests, listed incompletely below:

 

Labor law relations

fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.

 

 

III. Your rights as a data subject are as follows:

 

you have the right to request a copy of your personal data from Dafna DK Ltd. and the right of access at any time to your personal data;

you have the right to request from Dafna DK Ltd. your personal data in a form convenient for transfer to another personal data controller or to ask us to do so without being hindered by us;

you have the right to ask Dafna DK Ltd. to correct without undue delay your inaccurate personal data as well as data that are not current;

you have the right to request that your personal data be deleted without undue delay in any of the following circumstances:

when you have withdrawn your consent;

personal data are no longer necessary for the purposes for which they were collected;

where the processing is unlawful;

when personal data must be deleted for the purpose of complying with a legal obligation under EU law or the law of a Member State that applies to us as a data controller;

when personal data has been gathered in connection with the provision of information society services.

 

IV. Refusal to delete your personal data - reasons:

in the exercise of the right to freedom of expression and the right to information;

to comply with a legal obligation on our part or to carry out a task in the public interest,

in the exercise of the official powers granted to us (in case you are a body of authority);

for reasons of public interest in the field of public health;

for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, insofar as erasure is likely to make it impossible or seriously hindering the achievement of the purposes of such processing; or for the establishment, exercise or protection of legal claims.

 

You have the right to request from Dafna DK Ltd to restrict the processing of your personal data, in which case the data will only be stored but not processed. Our refusal to restrict will be explicit only in writing, and we are obliged to motivate it for the legitimate reason;

you have the right to withdraw your consent to the processing of your personal data when you have given it at any time with a separate request addressed to the administrator;

you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);

you have the right to object to automated processing, including profiling;

you have the right not to be the subject of a decision based solely on automated processing involving profiling;

if we use your personal data for a new purpose that is not covered by this privacy statement, we will provide you with a new data protection notice and when and where necessary, we will require your prior consent for the new processing;

you have the right to submit a complaint directly to the supervisory authority, the competent authority of which is the Personal Data Protection Commission;

In case you wish to file a complaint about the processing of your personal data via Dafna DK Ltd. (recipients, including outside the EU and international organizations), you can do so at the contact details of Dafna DK Ltd. or directly to the Privacy Officer data.

 

V. How will we use your special categories of personal data

Special categories of sensitive personal data require a higher level of protection and additional justification for their collection, storage and use. It is possible to process special categories of personal data in the following non-exhaustive cases:

To comply with our obligations under labor and social security legislation;

Where processing is in the public interest;

Processing is in defense of legitimate interest.

In rare cases, it is possible to process sensitive data when it is necessary to protect a legal dispute or to protect your interests or those of someone else and you are unable to give valid consent or when you have disclosed this sensitive information in the public domain.

 

VI. How we collect your personal information

We collect your personal data for performance of a contract or in the context of our pre-contractual relationship with you. We do your personal data to provide the products and services you have requested and which you use with us to perform the contractual and pre-contractual obligations and to benefit from the rights under the contracts concluded with you.

The processing is done in order to establish the identity of the client through all channels; managing and executing your service requests, executing contracts; preparing a contract proposal; prepare and send an invoice for the services you use with us; to provide you with the full service required, and to collect the due amounts for the products and services used;

We process personal data in order to comply with obligations that are provided in a statutory instrument.

We collect your personal data during the process of applying for employment and selection. This information is provided either directly by you as a candidate or through a recruitment agency. Sometimes we may also receive personal data from third parties - for example, ex-employers and others.

The collection, processing, storage and protection of personal data shall be carried out only by persons to whom it is expressly indicated and whose duties or specific tasks require it.

 

Access to the personal data can also be made by the relevant state bodies - court, investigation, prosecution, revision bodies, etc. The aforementioned may request data in due order in connection with the exercise of their powers.

How we share information

In some cases, we share your personal information with our service providers and partners. We use third parties to help us operate and improve our services. These third parties help us with various tasks, including payment processing and security operations.

We may also share information with other partner companies.

 

VII. Agree:

Consent is necessary to be able to process your normal and special categories of personal data.

 

VIII. Right to withdraw your consent

You may withdraw your consent at any time with a DATA SUBJECT FORM, by submitting a scanned completed and signed copy of the form as an attachment directly to the e-mail, controlled and verified by the Data Protection Officer.

If you have given us consent to process your personal data for a particular purpose, you have the right to withdraw that consent. In order to withdraw your consent, please contact the company's manager / DPLD. Upon receipt of your request, we will discontinue the processing of the data for the purpose (s) you initially agreed to, unless we have another legal basis to continue the processing for which we will notify you in good time.

 

IX. If you do not provide us with the personal data we require

Failure to provide the personal information you request may prevent us from fulfilling your contract with you or complying with a statutory requirement. Your refusal to provide the necessary information for the performance of the rights and obligations under the contract may cause it not to be concluded and, if you already have one, to terminate it.

 

X. Information related to convictions and violations

We can use information related to convictions and violations only in cases where the law allows it. Typically, this will be the case when such processing is necessary to fulfill our legal obligations.

 

 

XI. Transfers of data outside the EU and EEA

We will not provide your personal data to non-EEA countries.

 

XII. Data security

We have put in place appropriate measures to prevent incidental loss, use or unauthorized access, alteration or disclosure of your personal data. Employees will process personal data only on the basis of our instructions and in accordance with our obligation of confidentiality.