Protecting your privacy is important to us. We appreciate the trust placed in us and respect the resulting commitments to protect the privacy of the personal information you provide. This document is subject to periodic updates and describes how we use and process your personal information.
When you make a reservation you will be asked for your name, phone number, e–mail address and the preferences you might have regarding your stay. We might also collect information about you when you use certain services of social networks. We may use your information for the following: – We use your personal information, so we could make a reservation and receive all the data necessary in this regard. When you provide us with information, you allow Customer Service to assist you when you need assistance – including finding the right service for you and anything else related to your reservation. – We may use your contact details to invite you to send feedback after your stay. This helps other travelers to receive first hand information about the Hotel and choose the service that best meets their requirements. – In other cases we may contact you by e–mail, post and phone or via SMS, depending on what contact details you choose to share with us. This may occur for several reasons: There may be a need to respond to or to process your request. If you haven’t completed the reservation process, we may send you an e–mail reminder to do so. We may send you additional information regarding your reservation, such as how to contact us if you need assistance while you are traveling, or a summary of your previous reservations in our hotel – We may also use your personal data for marketing activities permitted by the law. For example: When you make a reservation, we may use your contact details to send you news or information on similar tourism–related products or services. When we believe that a particular proposal may be of interest to you, we may decide to call you on the phone. – We may use your personal data for the purpose of investigation and fraud prevention and in terms of other illegal or undesirable activities. – We also use personal data for the purpose of statistical analysis to improve our services, customer experience and functionality and quality of tourism information and services we offer.
In accordance with the Bulgarian legislation on protection of personal data, we comply with all reasonable procedures to prevent unauthorized access and misuse of personal data. We use reasonable working systems and procedures to protect the personal data that you provide us with. Besides, we use security procedures, as well as technical and physical measures to restrict access to and use of personal information on our servers. Only authorized personnel can access personal information in the course of their work. We at www.voyaresort.com do not assume responsibility for the security of your credit card details. United Bulgarian Bank shall be completely liable for this through the POS terminal provided for payment.
Pursuant to Regulation (EC) 2016/679 of the European Parliament and of the Council, dated 27.04.2016 and the Internal regulations of protection personal data “VD Resort” OOD, in its capacity of Personal data administrator processes and retains personal data, submitted by the customers of the company, for and in connection with the performance of the contracted services.
We do hereby inform you that “VD RESORT” OOD, in its capacity of administrator of personal data, collects, processes and retains the personal data which you provide to us in connection with the services, used by you.
In addition, “VD RESORT” OOD acts in its capacity as processor of personal data when you provide us with personal data, required for the purpose of payment of services which we provide through our site.
Your personal data is collected, processed and stored by us in accordance with the rules of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016, the Personal Data Protection Act and the Internal Rules for the Protection of Personal Data of “ VD RESORT” OOD.
“ VD RESORT” OOD meets all the requirements of the new regulation for the protection of individuals with regard to the collection, storage and processing of personal data and on the free transfer of such data by collecting data of the natural persons, only and insofar as it is necessary for the provision of our service and for the performance of the concluded contracts, and keeps it responsibly and legally.
Please, be aware in particular of the following rules and principles in our work, that protect your personal data:
1.1. “ VD RESORT” OOD collects and processes your personal data in connection with the provision of tourist, hotel and restaurant services, sale, management and rental of real estate, maintenance of tourist complexes and related utilities, and the conclusion of contracts with the company.
Your personal data is collected and processed on the basis of:
a) A contract you have concluded with us, for the performance of our obligation under which we need your personal data, or in order to take steps at your request for the conclusion of a contract;
b) Compliance with a legal obligation that applies to “ VD RESORT” OOD;
c) Your explicit consent given by you, as a client;
d) The legitimate interest of “ VD RESORT” OOD
1.2. When processing and storing personal data, “ VD RESORT” OOD may process and store personal data in order to protect its legal interests and to fulfill its legal obligations to the National Revenue Agency, the Ministry of Tourism, the Ministry of Interior, the Municipality of Nessebar and other state and municipal authorities.
“ VD RESORT” OOD collects, processes and stores the personal data you provide to us for using our services and for concluding a contract with the company for the following purposes:
creating of a profile and providing full functionality in the provision of our services;
ensuring the performance of a contract, concluded with you;
individualisation of a party to the contract;
tax, accounting and statistical purposes;
sending of information messages about services, offers and price offers, provided by “ VD RESORT” OOD;
Protection and security of individuals and their property.
“ VD RESORT” OOD shall comply with the following principles in the processing of your personal data:
– legality, good faith and transparency;
– limitation of the processing objectives;
– relevance to the processing objectives and minimization of the data collected;
– accuracy and timeliness of the data;
– limitation of storage for no longer than it is necessary for the achievment of the purposes, for which personal data is processed;
– the integrity and confidentiality of the processing and the guarantee of an adequate level of security of personal data.
“ VD RESORT “ OOD shall perform the following operations with your personal data:
– registration of a user in our database in order to fulfill our obligations under a contract with you, as well as legal obligations of our company;
– Sending informational messages in order to the customer awareness process, regarding improvements or changes to services, offers, and quotations.
5.1. “ VD RESORT” OOD shall process the following categories of personal data:
a) Data: Your individualizing data (name and surname, e-mail, country, telephone). Purpose: Registration of a user in a database, in a register of nights, preparation of written contracts; for accounting purposes and payments from you; Making a contact with the customer and sending information to him for sending newsletters and offers; Reason for processing: performance of contractual obligations under contract between you and “ VD RESORT” OOD;
b) Data: Your permanent address, date of birth (for foreign citizens), personal identity number (for Bulgarian citizens), citizenship. Purpose: Registration of a user in a database and in a register of nights, drawing up written contracts and notarial deeds, accounting purposes. Reason for processing: performance of contractual obligations under contract between you and “ VD RESORT” OOD;
c) Data: Your credit card numbers. Purpose: Making payments at your choice of payment with a credit card via an on-line system. Reason for processing: performance of contractual obligations under contract between you and “ VD RESORT” OOD;
(d) Data: Images taken from CCTV. Purpose: Providing security of individuals and property. Reason for processing: performance of contractual obligations under contract between you and “ VD RESORT” OOD and legitimate interest of the company.
5.2. “ VD RESORT” OOD does not collect or process personal data, revealing racial or ethnic origin; political, religious or philosophical beliefs, membership in trade unions and party organizations; genetic and biometric data, health data, or data on sexual life or sexual orientation of individuals.
5.3. Personal data is collected from “ VD RESORT” OOD by the persons to whom it relates.
5.4. The company does not make automated decision making with the data.
“ VD RESORT” OOD shall keep your personal data for no longer than the period of performance of your service or the term of the contract between us. Upon expiry of this period, “ VD RESORT” OOD shall take the necessary care to erase and destroy all your data without undue delay, and we will notify you further if the data retention period is to be extended with a view to meeting the objectives, the performance of the contract, in view of our legitimate interests or otherwise.
“ VD RESORT” OOD shall keep the personal data which it is required to keep under the applicable legislation for the relevant period, stipulated in the regulatory documentation.
“VD RESORT” OOD may, at its own discretion, transmit all or part of your personal data to processors for the purposes of processing, subject to the requirements of Regulation (EC) 2016/679.
“VD RESORT” OOD shall notify you in case of intent to transfer all or part of your personal data to third countries or international organizations.
If you do not wish all or part of your personal data to continue to be processed by us for any particular or for any processing purpose, you may at any time withdraw your consent to processing by request in form of a free text.
We may ask you to verify your identity and the identity of the person to whom the data relates.
Provided that you withdraw your consent for processing personal data, which is required in order for us to fulfill our contractual obligations towards you and to provide our services, we will terminate the provision of the service.
You have the right to request and obtain confirmation from “VD RESORT” OOD if the personal data, relating to you, is being processed.
You are entitled to access the data, relating to you, as well as the information, relating to the collection, processing and storage of your personal data.
“VD RESORT” OOD will provide you, upon request, with a copy of the processed personal data, relating to you, in electronic or other appropriate form.
Providing access to the data is free of charge, but “VD RESORT” OOD reserves its right to impose an administrative fee in the event of recurrence or disproportionate claims.
You may correct or fill in inaccurate or incomplete personal data, relating to you, by sending a request to “VD RESORT” OOD.
11.1. You are entitled to request from “VD RESORT” OOD to delete the personal data, related to you, and “VD RESORT” OOD will be obliged to delete it without undue delay, provided that any of the following reasons are present:
– personal data is no longer necessary for the purposes for which it has been collected or otherwise processed;
– you withdraw your consent on which the processing of the data is based and no other legal basis for the processing exists;
– you object against the processing of the personal data relating to you, including for direct marketing purposes, and there are no legitimate grounds for processing that has an advantage;
– the personal data has been processed without legal grounds;
– the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to “VD RESORT” OOD;
– the personal data has been gathered in connection with the provision of information society services.
11.2. “VD RESORT” OOD shall not obliged to delete personal data if it keeps and processes it:
– for the exercise of the right to freedom of expression and the right to information;
– in order to comply with a legal obligation which requires treatment, provided for in EU law or the law of the Member State, to be applied to the Administrator or to with a view to the performance of a public interest assignment or the exercise of official authority conferred on it;
– for reasons of public interest in the field of public health;
– for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
– for the establishment, exercise or protection of legal claims.
11.3. In order to exercise your right to be “forgotten”, you should file a written request sent to “VD RESORT” OOD, as well as to certify your identity and the identity of the person, to whom the data relates, before “VD RESORT” OOD, by submitting of an identification document for the purpose of identifying the person to whom the data relates to an employee of “VD RESORT” OOD.
“VD RESORT” OOD shall not delete the data that it has to store under legal obligation, including for defence against claims brought against it, or in order to prove its rights.
You may require “VD RESORT” OOD to restrict the processing of related data when:
– you challange the accuracy of personal data for a period that allows “VD RESORT” OOD to verify the accuracy of the personal data;
– the processing is unlawful, but you do not want your personal data to be deleted, but only to limit its use;
– “VD RESORT” OOD no longer requires personal data for processing purposes, but you require it in order to establish, exercise or protect your legal claims;
– You have objected to the processing and you are awaiting verification that the legal grounds of “VD RESORT” OOD have an advantage over your interests.
You may at any time withdraw the data that is stored and processed for you in connection with the usage of the services of “VD RESORT” OOD, by email request. You may request “VD RESORT” OOD to transfer your personal data directly to an administrator by your choice, when it is technically feasible.
You may ask us to inform you about all the recipients, to whom the personal data for which correction, deletion or limitation of the processing was requested, has been disclosed. “VD RESORT” OOD may refuse to provide this information if this would be impossible or would require disproportionate effort.
You may at any time object to the processing of personal data by “VD RESORT” OOD that refers to you, including whether processed for profiling or direct marketing purposes.
16.1. If “VD RESORT” OOD detects a breach of security of your personal data that may pose a high risk to your rights and freedoms, we will notify you without undue delay of the violation, as well as of the measures taken, or to be taken.
16.2. “VD RESORT” OOD is not required to notify you if we have taken appropriate technical and organizational safeguards with respect to the data, affected by the security breach or have subsequently taken measures that ensure that the violation will not lead to a high risk for your rights or notification would require a disproportionate effort.
“VD RESORT” OOD shall not transfer your data to third countries.
In case of violation of your rights under the above or the applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission, with address in Sofia, 1592, 2 “Prof. Tsvetan Lazarov” Str., Tel .: 02 915 3 518, email: firstname.lastname@example.org, email@example.com, web site: www.cpdp.bg.
You can exercise all of your rights to protect your personal data through forms acceptable to you, and to make your claims in any form that contains a statement and identifies you as the data holder.
We provide you with information about the data administrator:
“VD RESORT” OOD
Seat and place of management: 1784 Bulgaria, Sofia, 90 “Tsarigradsko shose” blvd, Capital Fort office centre
Address of performing the activity: 8256 Bulgaria, Sveti Vlas, 12 “Pirin” str