Progled BG Ltd. („Проглед БГ“ ООД), entered in the Commercial Register of the Registry Agency with company ID (EIK) 200762821, is a personal data controller registered with the Commission for Personal Data Protection and processes the data and personal information provided in accordance with the Personal Data Protection Act and the General Data Protection Regulation (EU) 2016/679.
This Privacy Policy applies to the guest house “The Poppies House” („Къщата с маковете“) and to the official website www.thepoppieshouse.bg.
As a personal data controller and as a professional with many years of experience in tourism, we respect the privacy of our users. This policy aims to inform you about how personal data is collected, used and transferred. Please read it carefully. If you have any questions, you can send them to the following e-mail address: thepoppieshouse@gmail.com
Definitions
For the purposes of this policy:
Personal data is any information relating to a natural person who is identified or can be identified, directly or indirectly, by an identification number or by one or more specific features. The data may concern facts (for example, a name, an e-mail address, a location or a date of birth) or an opinion about the actions or behaviour of the data subject.
A personal data controller is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Processing of personal data is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, making available, updating or combination, blocking, erasure or destruction.
Processing of personal data
To provide and improve our services and to administer the resources related to them, we store, use and process personal data in compliance with the applicable legal requirements.
Types of personal data processed
The types of personal data the controller collects and processes differ according to the purposes for which they are collected and the grounds for processing them:
By purpose, the types of data collected are:
1. To request and confirm a booking, Progled BG Ltd. collects and processes the following data:
a) When booking through the website:
- first name and surname of the contact person;
- e-mail address and phone number of the contact person;
b) When booking by phone:
- a phone number to call back and an e-mail address to confirm the booking
- first name and surname of the contact person;
This data is kept until the booking is completed. After that the data is destroyed and cannot be processed any further.
2. For the accommodation of guests at the Poppies House, the controller processes and stores the following data:
- Bulgarian personal number (ЕГН) / personal number of a foreigner (ЛНЧ);
- name of the person (for Bulgarian citizens in Cyrillic, for foreigners in Latin script, as in the national document);
- date of birth;
- sex;
- citizenship;
- number of the identity card / valid national identity document;
- country that issued the national document.
The data collected for registration at the hotel is collected under Art. 116(2) of the Tourism Act and is needed to keep the register of accommodated tourists. The data is kept for 5 (five) calendar years.
Principles of processing
When processing personal data, we follow these principles:
- lawfulness – when collecting, processing and storing your data, we comply with the applicable Bulgarian and European legislation;
- fairness and transparency – the data we collect and process is handled in accordance with this privacy policy, which is available to every user;
- processing proportionate to its purposes and data minimisation – the types of data we collect are kept to a minimum, according to the purposes for which they are processed. The purposes for which your data is processed are those for which we have received your consent;
- storage limitation – we process and store the data received for a period that matches the purposes for which it is needed and your consent.
- consent of users to the processing of data – to use your data for marketing purposes, to improve the services we provide to you, we must obtain your explicit consent.
Please note that when you send an enquiry to the Poppies House (about prices, a booking, details of a booking already made, holding an event and/or other questions about the services provided by the hotel), you give your consent to Progled BG Ltd. to store and process the personal data you provide for the purposes of that enquiry.
Security of personal data
Progled BG Ltd. applies technical and organisational security measures to protect the personal data you have provided against accidental or unlawful destruction, accidental loss, unauthorised access, alteration or dissemination, and against other unlawful forms of processing by unauthorised persons. The security measures we apply are continuously improved and adapted to the latest technologies.
Progled BG Ltd. may disclose and provide personal information in accordance with applicable law if a court or an administrative authority orders or requires it, or if providing the personal data is linked to the fulfilment of a legal obligation of Progled BG Ltd. The data collected for accommodation at the guest house “The Poppies House” is available to the third parties named in the Tourism Act – the Ministry of Tourism, Chepelare Municipality and the Minister of the Interior, the National Revenue Agency and the National Statistical Institute.
Rights of users regarding their data
1. In accordance with the legislation in force, you have the right of ownership of and access to the data you have provided for processing. With a written request to the e-mail address thepoppieshouse@gmail.com, you can obtain information about the type of personal data provided and the purpose of its processing, and you can ask us to remove any records of your personal information, with no possibility of further processing. Having access to your data, you can ask for it to be corrected if you find errors or inconsistencies.
2. Users have the right to object to the processing of their data. The objection is made with a written request to the e-mail address thepoppieshouse@gmail.com
3. Users have the right to lodge a complaint with the competent supervisory authority. Under the legislation in force, the competent supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection.
4. Users have the right to receive the data that Progled BG Ltd. stores about them, where it has been provided, in a structured, commonly used and machine-readable format.