Privacy Policy
INTRODUCTION
Thank you for your interest in our HOTEL COMPLEX “CHATEAU AND MAISON COPSA”.
This privacy policy applies to www.copsa.bg (the website) owned and operated by HOTEL COMPLEX “CHATEAU AND MAISON COPSA”
Visitors to the website (webpage) of HOTEL COMPLEX “CHATEAU AND MAISON COPSA” are of two categories:
– Unregistered: these are persons who visit the website of HOTEL COMPLEX “CHATEAU AND MAISON COPSA” without registering.
– Registered.
The use of the website of HOTEL COMPLEX “CHATEAU AND MAISON COPSA “is possible without the indication of personal data (visiting and browsing the website does not require the provision of personal data), but if you want to make purchases of goods from HOTEL COMPLEX “CHATEAU AND MAISON COPSA “through our website, it is necessary to provide and process your personal data.
The protection of your personal data is a priority for HOTEL COMPLEX “CHATEAU AND MAISON COPSA “and we guarantee the protection of your personal data to the maximum extent.
In processing personal data HOTEL COMPLEX “CHATEAU AND MAISON COPSA “complies with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Regulation on the protection of compliance with the relevant Bulgarian laws – Personal Data Protection Act and applicable local legislation on the protection of personal data ) and they are processed in accordance with this Declaration of HOTEL COMPLEX
As the controller, HOTEL COMPLEX CHATEAU AND MAISON COPSA has implemented numerous technical and organizational measures to ensure the most complete protection of your personal data processed through this website.
Which personal data and what information are processed by the controller HOTEL COMPLEX “CHATEAU AND MAISON COPSA “and why they are collected and processed, is explained in this Privacy Policy of data subjects using the services of the website of HOTEL COMPLEX “CHATEAU AND MAISON COPSA”. This Privacy Policy is intended to inform you how to access and update your information. It is also to inform you of the rights you have.
PRINCIPLES RELATING TO THE PROCESSING OF YOUR PERSONAL DATA
HOTEL COMPLEX CHATEAU AND MAISON COPSA processes your personal data for the purpose of making reservations for the services you have requested and fulfilling sales obligations, in accordance with the following principles:
(a) Personal data is processed lawfully, fairly and transparently
The General Data Protection Regulation states that processing is lawful where at least one of the following elements is present in the processing:
o the subject has given consent for one or more specified purposes
o it is for the performance of a contract to which the subject is a party
o for compliance with a legal obligation to which the controller is subject o for the performance of a task carried out in the public interest
o is for the protection of the vital interests of the data subject
o is necessary for the legitimate interests of the controller, unless those of the data subject take precedence, for example where the data subject is a child
b) The personal data is collected for specified, explicit and legitimate purposes and are not further processed in a way incompatible with those purposes.
c) The personal data collected and processed when making sales on the website of the HOTEL COMPLEX CHATEAU AND MAISON COPSA are relevant, connected with and not excessive to the purposes for which they are processed.
d) The personal data are accurate and updated where necessary.
e) Personal data are erased or rectified when they are found to be inaccurate or disproportionate to the purposes for which they are processed.
(f) Personal data shall be kept in a form which permits identification of the natural persons concerned for no longer than is necessary for the purposes for which the data are processed.
(g) personal data are processed in a manner that ensures an adequate level of security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, implementing appropriate technical or organisational measures.
2.2. Employees who process personal data receive initial and periodic training on the protection of personal data and familiarise themselves with applicable legislation.
DEFINITIONS
Our privacy statement must be clear and understandable. To ensure this, we would first like to explain to you the terminology that is used in it.
In this privacy statement, we use the following terms:
(a) personal data
Personal data means any information relating to an identified natural person or an individual who can be identified, directly or indirectly, in particular by an identifier such as a name, an identification number, location data, an online identifier or by one or more factors specific to the physical, physiological, genetic, mental, psychological, economic, cultural or social identity of that natural person.
(b) data subject
Data subject means a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, psychological, economic, cultural or social identity of that natural person; c) processing
(c) processing of personal data
Processing of personal data means any operation or set of operations carried out
with personal data or a set of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
(d) restriction of processing
Restriction of processing means the marking of stored personal data in order to restrict its processing in the future.
e) profiling
Profiling means any form of automated processing of personal data consisting in the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict aspects relating to the performance of that individual’s professional duties, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
(f) the controller or controller responsible for the processing
Controller or controller responsible for the processing means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its determination may be laid down in Union or Member State law
(g) a processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
(h) recipient
Recipient means the natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether or not a third party. However, public authorities which may receive personal data in the framework of a specific investigation, in accordance with Union or Member State law, shall not be considered as recipients; the processing of that data by those public authorities must comply with the applicable data protection rules according to the purposes of the processing.
(i) third country
Third party means a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are entitled to process the personal data.
(j) consent
The consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by means of a statement or a clearly confirmatory action, which signifies the data subject’s agreement to personal data relating to him or her being processed.
NAME AND ADDRESS OF THE ADMINISTRATOR
The controller for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679), other data protection laws applicable in the Member States of the European Union and other provisions relating to data protection is:
“VI COPSA” Ltd, with UIC 160026157
Gr. Karlovo, 34 Gen.
Karlovo, Bulgaria
Phone: +359 882 645452
Email: [email protected]
Website: www.copsa.bg
NAME AND ADDRESS OF CONTACT PERSON
Contact person/:
Ivan Minkov
The administrator HOTEL COMPLEX “CHATEAU AND MAISON COPSA” processes and is responsible for your personal data.
You may at any time directly contact our contact person with any questions and suggestions regarding the protection of your data.
Any interested party may at any time directly contact our contact person with any questions and suggestions regarding data protection.
COOKIES
The website of HOTEL COMPLEX CHATEAU AND MAISON COPSA uses cookies.
“Cookies are text files that are placed on your device when you visit our website using your internet browser. When you visit again, the cookie enables our website to recognise your device. This is how cookies allow us to recognise our website users. The purpose of this recognition is to make it easier for users to use our website. With the help of a cookie, the information and offers on our website can be optimized with the user in mind. A website user who uses cookies, e.g., does not need to enter access data each time the website is accessed because the cookie is stored on the user’s computer system and this is taken over by the website.
Another example is the cookie on a shopping cart in an online store. The online shop remembers the items that the customer has placed in a virtual shopping cart through a cookie.
However, you can at any time via the appropriate setting of the internet browser you are using refuse all cookies or indicate when a cookie is being sent. In addition, cookies that have already been set can be deleted at any time via the internet browser or other software programs. This is possible with all popular internet browsers. If you disable the cookie setting in the internet browser you are using, some functions or services of the website may not function properly without cookies.
DATA COLLECTION AND PROCESSING
If you order a service(s), we ask you for your personal data so that we can process your order.
By registering on our website, we will store the data you provide to facilitate your purchases from our website.By creating an account on our store, you will have access to a faster order process, you will be able to save your personal settings, view previous orders.
Registrants are free to change the personal details provided during registration and ordering at any time.
If you need to otherwise contact us to place an order (such as by telephone, email or in-store), we will collect information about you through these channels as well so that we can process your order and deliver the goods to you.
What data is processed by VI COPSA Ltd:
– We process the following types of personal data provided by you and necessary for the identification and performance of the contractual obligations of :
(1) for physical identity: your first name and surname, your personal identification number – only if you are a natural person recipient and you want to be issued an invoice in case of a reimbursable delivery (Art. 7 of the VAT Act, Art. 114 of the VAT Act, Art. 84 of the VAT Code);
Names, address and other data of the proxy, entered in the document authorizing him/her to represent the data subject before; HOTEL COMPLEX “CHATEAU AND MAISON COPSA””
(2) contact details: your address: for delivery, billing, and correspondence (street, number, block, entrance, floor, apartment; area; postal code, name of the
location, country or other: e.g. shipment to a courier company’s post office), e-mail address (e-mail address), contact telephone;
(3) credit or debit card and bank account information – data collected when making payment to or for reimbursement from the price paid in the event of cancellation within the statutory time limit or in the event of failure to
(4) your account access data – your password username, order history;
(5) other information related to a booking: your signature – to certify actions: receipt of a voucher or other document, invoice; your letters, e-mails, information about the complaint, complaints, requests, complaints; other feedback we receive from you.
You can always choose what personal data you want to provide to us (if at all). However, if you wish to place an order, we require (as a minimum) your name, address and contact telephone number.
and if you choose not to provide these, we will not be able to process your order and deliver the goods to you.
– Details provided by you using a device (your computer, tablet, phone or other device):
Even if you do not place an order, when you visit our website we collect information automatically, some of which may be personal data. This information includes data such as (1) your Internet Protocol address (IP address), (2) the date and time you accessed our website, (3) the date and time you registered on our website (4) the browser types and versions used, (5) information about the operating system of your device (6) your language settings (7) the ISP of the access system (8) the viewing history (9) of the website from which the access system accesses our website (so-called referrers).
When using this data, HOTEL COMPLEX CHATEAU AND MAISON COPSA”” does not draw any conclusions about you. This information is necessary to (1) properly present the content of our website, (2) optimize the content of our website, (3) ensure the long-term viability of our information technology and website technology systems, and
(4) for the purpose of protecting the operation of the site, for example, to protect against cyber-attacks and, where necessary, to enable the investigation of criminal offences. This data will not be transferred to third parties unless there is a legal obligation to transfer the data or if the transfer serves the purpose of criminal prosecution.
– The following data are processed and generated by HOTEL COMPLEX CHATEAU AND MAISON COPSA in the process of selling the services: (1) order number, customer number, information on invoices and the amount of the obligations contained therein; (2) data necessary for the preparation of invoices for deliveries, as well as for proving their authenticity – type, quantity and value of services purchased; (3) information on the payment method chosen by you, (4) information on the payment method chosen by you, payments made and due; (5) information on amendments, additions or cancellations of orders.
PROVISION OF PERSONAL DATA BY THE DATA SUBJECT TO THE CONTROLLER AS A CONTRACTUAL OR LEGAL OBLIGATION
The possible consequences of not providing personal data
We clarify that the provision of personal data may be partly required by law (e.g. tax provisions) or may also be the result of contractual provisions (e.g. information about the contractual partner). For example, the data subject must provide us with personal data when a contract is entered into with them. Failure to provide personal data would result in the contract with the individual not being able to be concluded and performed.
Before providing personal data, the data subject may contact our contact person. Our contact person shall explain to the data subject whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract.
THE PURPOSE OF PROCESSING YOUR PERSONAL DATA
E acceptance of your purchase orders and making sales on the basis of them in the online store of HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” as your personal data is processed on the following legal grounds for processing:
(a) to establish your identity and conclude sales;
b) use of the data collected about you for the performance of the contractual obligations of HOTEL COMPLEX CHATEAU AND MAISON COPSA arising from the sale of services:
– for the activities related to the acceptance of the orders received in the online shop of HOTEL COMPLEX CHATEAU AND MAISON COPSA (i.e. made on this website) and sending the ordered services to the person who ordered them;
– to establish contact with the persons by telephone, by electronic means, to send correspondence relating to the execution of orders;
– to process the cancellation of the transaction (purchase);
– for adjustments of amounts due, where justified;
– to make payment by the customer or to refund the customer the amount paid
amount;
– to service and respond to inquiries, requests, complaints, suggestions or complaints;
– to keep accounting records of supplies made
– to update the personal data provided or information about purchases made by the customer
– to carry out processing by data processors – procurement, reporting, acceptance, payment;
(c) compliance with legal obligations
– to comply with the requirements of the Accounting Act, the Tax and Social Security Procedural Code and the applicable legislation (to issue the invoice, credit, debit note);
– to ensure control by the revenue administration;
– to provide information about the customer and purchases made by the customer upon request/inquiry/inspection by a competent authority;
– providing information at the request of the Consumer Protection Commission in relation to obligations under the Consumer Protection Act;
– provision of information to the Commission for Personal Data Protection in relation to obligations provided for in the legislation on personal data protection – Regulation (EU) 2016/679 of 27 April 2016, Personal Data Protection Act;
EXCEPT CASES IN WHICH
Where your personal data is processed in fulfilment of a legal obligation, for the performance of a contractual obligation of the controller under a contract to which you are a party, or to take steps at your request before entering into a contract, or is processed for the protection of the vital interests of you or of another natural person, or for the protection of the legitimate interest of the controller where it does not conflict with the legitimate interests of the natural person, your personal data may be processed on the basis of your explicit consent (for example, for direct m
HOTEL COMPLEX CHATEAU AND MAISON COPSA uses your personal data only for the purpose of accepting purchase orders, making sales on the basis of them on the website of HOTEL COMPLEX CHATEAU AND MAISON COPSA and fulfilling the contractual obligations of HOTEL COMPLEX CHATEAU AND MAISON COPSA arising from the sale of services. HOTEL COMPLEX “CHATEAU AND MAISON COPSA” is not entitled to and will not use the data provided for this purpose for other purposes, such as direct marketing. Consent is a separate basis for processing your personal data and the purpose of the processing is stated therein (e.g. for direct marketing), and does not overlap with the purpose stated in this Privacy Policy for data subjects making purchases through the HOTEL COMPLEX “CHATEAU AND MAISON COPSA””” Website The controller HOTEL COMPLEX “CHATEAU AND MAISON COPSA” provides the technical conditions for consent to be given as a freely given, specific, informed and unambiguous indication of the data subject’s wishes, by means of a statement or a clear confirmatory action, which indicates the data subject’s agreement to personal data relating to him or her being processed. The controller shall provide technical conditions to ensure that withdrawal of consent is as easy as giving it. The request for consent, as well as the possibility to withdraw it, shall be presented in plain language, in a way that clearly distinguishes it from other matters, in an understandable and easily accessible form.
YOUR PERSONAL DATA MAY BE PROVIDED TO THE FOLLOWING CATEGORIES OF RECIPIENTS AND PUBLIC AUTHORITIES:
Processors who process personal data on behalf of and under the authority of HOTEL COMPLEX CHATEAU AND MAISON COPSA on the basis of a written agreement or have access directly or indirectly to your personal data:
courier and transport companies in order to fulfil contractual obligations for the delivery of paper invoices, as well as letters and other correspondence
persons who maintain equipment and software used to process your personal data;
persons carrying out installation and/or maintenance activities at the address used to provide the service;
the banks handling your payments;
persons providing services for the organisation, storage, indexing and destruction of paper and/or electronic records;
persons employed on a civil contract by HOTEL COMPLEX CHATEAU AND MAISON COPSA””, assisting in the processes of online sale of goods, logistics, delivery, etc.;
providers of services in various fields – consultants, experts, lawyers, in connection with the online sale, their delivery and the return of the goods purchased
products, and for the operational support of the business.
Providing Personal Data to processors is only done if there is a legitimate reason to do so and based on a written agreement for the recipients to provide an adequate level of protection.
Processors may not process Personal Data provided to them for purposes other than the performance of the work assigned to them by HOTEL COMPLEX CHATEAU AND MAISON COPSA”” . The processors are obliged to comply with all the instructions of HOTEL COMPLEX “CHATEAU AND MAISON COPSA””
HOTEL COMPLEX CHATEAU AND MAISON COPSA shall take the necessary measures to ensure that the processors involved comply strictly with data protection legislation and the instructions of HOTEL COMPLEX CHATEAU AND MAISON COPSA and that they have taken appropriate technical and organisational measures to protect personal data.
Other data controllers to whom HOTEL COMPLEX CHATEAU AND MAISON COPSA provides your personal data, processing your data on their own basis and on their own behalf
Assignees – parties to assignment agreements to whom HOTEL COMPLEX CHATEAU AND MAISON COPSA transfers (sells) your outstanding obligations;
Your personal data may be provided to competent public authorities in order to fulfil their statutory obligation provided for in the relevant laws and regulations – court, prosecutor’s office, investigation, Ministry of Interior, auditing authorities – NRA, NSSI, supervisory authorities – Commission for Consumer Protection, Commission for Personal Data Protection, etc., when they have duly requested the data in connection with the performance of their powers.
PERIOD FOR WHICH YOUR PERSONAL DATA WILL BE STORED
The Controller shall process and store your personal data only for the period necessary to achieve the purposes set out in this Privacy Statement or to comply with the legal requirements established by the European legislator or in laws or regulations to which HOTEL COMPLEX CHATEAU AND MAISON COPSA is subject.
We cease to use your personal data for the purposes of the contractual relationship after termination of the contract, but we do not delete them before the expiry of one year from the termination of the contractual relationship, or until the final settlement of all financial obligations and the expiry of the statutory data retention obligations – e.g. under tax and accounting legislation there is a 10-year retention period for accounting documents from 1 January of the accounting period following the accounting period for which 12 Law on Accounting, Article 38 Tax and Insurance Procedural Code – invoices, credit note, etc.), expiry of the time limit set out in the Consumer Protection Act for filing a claim for damages, obligations to provide information to the court, competent state authorities and other grounds provided for in the applicable legislation (5 years).
After the expiry of the retention periods, personal data shall be deleted/destroyed (by an applicable method – e.g. by shredding, burning or permanent deletion from electronic
means, for which a report is drawn up by a committee appointed by order of the Manager), unless:
they are necessary for a pending judicial, arbitration, administrative or enforcement proceeding, or in the event of a complaint received by you which is to be considered by HOTEL COMPLEX CHATEAU AND MAISON COPSA””
You have exercised your right to request restriction of the processing of your personal data.
YOUR RIGHTS
You have the following rights regarding your personal data:
(a) Right to confirmation
You have the right to obtain confirmation from the controller HOTEL COMPLEX CHATEAU AND MAISON COPSA whether your personal data are being processed. If you wish to make use of this right of confirmation, you may contact our contact person or another employee at any time.
b) Right of access
You have the right to obtain, free of charge, from the controller HOTEL COMPLEX CHATEAU AND MAISON COPSA” information about the processing of your personal data at any time, as well as a copy of this information. In addition, you have the right to access and obtain an explanation of the processing of your personal data, which includes the following information:
– the purposes of the processing;
– the relevant categories of personal data relating to you;
– the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
– where possible, the intended period for which your personal data will be kept and, if this is not possible, the criteria used to determine this period;
– the existence of a right to have personal data relating to you rectified or erased or to restrict processing or to object to such processing;
– the existence of the right to lodge a complaint with the supervisory authority;
– where your personal data is not collected from you, any available information about its source;
– the existence of automated decision-making, including profiling, and essential information about the logic used and the meaning and intended consequences of such processing for you.
– Where your personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards in relation to the transfer.
If you wish to exercise this right of access, you may at any time contact our contact person or another employee of HOTEL COMPLEX CHATEAU AND MAISON COPSA””
The explanation of the processed data includes the information that HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” is provided to you by means of a Privacy Policy.
At your request, HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” may provide you with a copy of your personal data that is being processed.
The provision of access to personal data relating to you may not adversely affect the rights and freedoms of third parties or result in a breach of a legal obligation of. CHATEAU AND MAISON COPSA HOTEL COMPLEX””
Where your requests for access are manifestly unfounded or excessive, particularly because of their repetitive nature, HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” may charge a reasonable fee based on the administrative costs of providing the information or refuse to respond to your request for access.
HOTEL COMPLEX CHATEAU AND MAISON COPSA will assess on a case-by-case basis whether a request is manifestly unfounded or excessive.
In the event of a refusal to grant access to personal data, HOTEL COMPLEX CHATEAU AND MAISON COPSA shall give reasons for its refusal and inform you of your right to lodge a complaint with the CPD.
c) Right to rectification
You have the right to ask the controller HOTEL COMPLEX CHATEAU AND MAISON COPSA to rectify, without undue delay, inaccurate or incomplete personal data concerning you. Given the purposes of the processing, you have the right to have your incomplete personal data completed, including by adding a declaration.
If a request for rectification of personal data is granted, HOTEL COMPLEX CHATEAU AND MAISON COPSA shall inform the other recipients to whom the data have been disclosed (e.g. service providers, public authorities) so that they can reflect the changes.
If you wish to exercise this right to rectification, you may at any time contact our contact person or another employee of the controller.
d) Right to erasure (Right to be forgotten)
You have the right, granted by the European legislator, to ask the controller HOTEL COMPLEX CHATEAU AND MAISON COPSA to erase the personal data concerning you without undue delay, and the controller is obliged to erase your personal data without undue delay where one of the following grounds applies:
– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
– you withdraw your consent on which the processing is based and there is no other legal basis for the processing;
– you object to the processing and there are no legitimate grounds for the processing which override;
– you object to the processing of your personal data for direct marketing purposes;
– your personal data has been unlawfully processed;
– your personal data must be erased in order to comply with a legal obligation of the controller HOTEL COMPLEX CHATEAU AND MAiSON COPSA””
– Your personal data have been collected in connection with the provision of information society services to children within the meaning of Article 8(1) of Regulation (EU) 2016/679.
HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” is not obliged to delete personal data insofar as processing is necessary:
– for the exercise of the right to freedom of expression and the right to information;
– to comply with a legal obligation of
– reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) as well as Article 9(3) of Regulation (EU) 2016/679;
– for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of Regulation (EU) 2016/679, in so far as the right to erasure is likely to render impossible or seriously impede the achievement of the purposes of such processing;
– the establishment, exercise or defence of legal claims.
If one of the aforementioned grounds applies, and you wish to request the erasure of your personal data stored by HOTEL COMPLEX CHATEAU AND MAISON COPSA, you may at any time contact our contact person or another employee of the controller.
e) Right to restriction of processing
You have the right to request the controller HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” to restrict processing where one of the following applies:
– you contest the accuracy of your personal data, for a period that allows the controller to verify the accuracy of the personal data;
– the processing is unlawful, but you do not wish your personal data to be erased, but request instead a restriction on their use;
– the controller no longer needs your personal data for the purposes of the processing but you require it for the establishment, exercise or defence of legal claims;
– you have objected to the processing on the grounds of the legitimate interest of HOTEL COMPLEX CHATEAU AND MAISON COPSA and an examination is underway to determine whether the legitimate grounds of the controller override your interests.
If one of the aforementioned conditions is met, and you wish to request the restriction of the processing of personal data stored by the HOTEL COMPLEX CHATEAU AND MAISON COPSA, you may at any time contact our contact person or another employee of the controller.
HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” may process personal data, the processing of which is restricted, only for the following purposes:
– data storage;
– with your consent;
– for the establishment, exercise or defence of legal claims;
– to protect the rights of another natural person;
– for important reasons of public interest.
Where a data subject has requested the restriction of processing and one of the grounds set out above applies, HOTEL COMPLEX CHATEAU AND MAISON COPSA shall inform him or her before the restriction of processing is lifted.
f) Right to data portability
You have the right to receive the personal data concerning you which you have provided to HOTEL COMPLEX CHATEAU AND MAISON COPSA in a structured, commonly used and machine-readable format.
On request, this data may be transferred to another controller indicated by you, where technically feasible.
You may exercise the right to portability in the following cases:
– the processing is based on your consent;
– the processing is based on a contractual obligation;
– the processing is carried out by automated means.
The right of portability may not adversely affect the rights and freedoms of others.
In order to exercise the right to data portability, you may at any time contact our contact person or another employee of HOTEL COMPLEX CHATEAU AND MAISON COPSA””
g) Right to object
You have the right to object to the processing of your personal data by HOTEL COMPLEX CHATEAU AND MAISON COPSA if your data is processed on one of the following grounds:
– the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
– the processing is necessary for purposes relating to the legitimate interests of HOTEL COMPLEX CHATEAU AND MAISON COPSA or of a third party;
– the processing involves profiling.
HOTEL COMPLEX CHATEAU AND MAISON COPSA shall terminate the processing of your personal data in the event of an objection, unless it proves that there are compelling legitimate grounds for its continuation which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
In order to exercise the right to object, the data subject may directly contact our contact person or another employee of the HOTEL COMPLEX CHATEAU AND MAISON COPSA””
h) Right to object to personal data for direct marketing purposes
Where your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of your personal data for this purpose, including with regard to profiling related to direct marketing.
Where you object to processing for direct marketing purposes, the processing of your personal data for those purposes shall cease.
In order to exercise your right to object, you may directly contact our contact person or another employee of HOTEL COMPLEX CHATEAU AND MAISON COPSA””
i) Right to human intervention in automated decision-making
In cases where HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” makes automated individual decisions, including or excluding profiling, which have legal consequences for individuals or affect them to a significant extent in a similar way, these individuals may request a review of the decision with human intervention, as well as express their point of view.
HOTEL COMPLEX CHATEAU AND MAISON COPSA provides the natural persons subject to automated decision-making with essential information concerning the logic used and the meaning and intended consequences of this processing for the person.
If you wish to exercise your rights with regard to automated individual decision-making, you may at any time contact our contact person directly or another employee of HOTEL COMPLEX CHATEAU AND MAISON COPSA””
j) Right to withdraw your consent to the processing of your personal data
You have the right, at any time, to withdraw your consent to the processing of your personal data where the processing is based on consent provided by you. Withdrawal of consent shall not affect the lawfulness of processing based on consent given by you prior to its withdrawal. You shall be informed before giving consent. Withdrawing your consent is as easy as giving it.
If you wish to exercise your right to withdraw your consent, you may contact our contact person directly at any time
k) Right to notification of a breach of your personal data security;
The communication that HOTEL COMPLEX CHATEAU AND MAISON COPSA sends to you should contain at least the following:
o the nature of the personal data breach;
o the name and contact details of a contact or other point of contact from whom you can
more information;
o a description of the possible consequences of the personal data breach;
o a description of the measures taken or proposed by the Data Controller to address the personal data breach.
Cases where no communication to the data subject is required:
o The controller has taken appropriate technical and organisational protection measures and these measures have been implemented in relation to the personal data affected by the
security breach, such as encryption;
o the controller has subsequently taken measures to ensure that the
that the high risk to the rights and freedoms of data subjects is unlikely to materialise;
o The communication would result in a disproportionate effort. In this case, a public announcement shall be made or another similar measure shall be taken.
AVAILABILITY OF AUTOMATED DECISION MAKING
As a responsible company, we do not use automated decision making or profiling.
HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” DOES NOT COLLECT AND DOES NOT PROCESS SPECIAL CATEGORIES OF PERSONAL DATA (SO-CALLED SENSITIVE PERSONAL DATA), NAMELY THOSE THAT:
– revealing racial or ethnic origin;
– reveal political, religious or philosophical beliefs, membership of political parties or organisations, associations with religious, philosophical, political or trade union aims;
– relate to health, sex life or the human genome.
PROTECTION OF THE PRIVACY OF CHILDREN
This website is not intended for children. HOTEL COMPLEX CHATEAU AND MAISON COPSA understands and accepts the importance of protecting children’s information on the internet.
THE FOLLOWING ADMINISTRATIVE AUTHORITY EXERCISES CONTROL OVER OUR ACTIVITIES RELATED TO THE PROCESSING OF PERSONAL DATA IN BULGARIA
Commission for Personal Data Protection (CPDP)
Address. 1414 Bulgaria, “Akad. Ivan Evstratiev Geshov 15
Tel: + 359 2 915 35 18
Fax: + 359 2 915 35 25
E-mail: [email protected], [email protected]
Website: www.cpdp.bg
ENTRY INTO FORCE AND UPDATING OF
The privacy policy of the data subjects making purchases through the website of HOTEL COMPLEX CHATEAU AND MAISON COPSA””
HOTEL COMPLEX “CHATEAU AND MAISON COPSA”” reserves the right to modify this privacy policy at any time. In order to apply the best data protection measures and to comply with the legislation in force, we will regularly update this Privacy Policy for data subjects making purchases through the website of HOTEL COMPLEX CHATEAU AND MAISON COPSA”” Please check this page periodically to keep informed if you wish to monitor changes.