"KARACHI" JSC, entered in the Commercial Register at the Registry Agency with UIC 203295839, with registered office and address of management: Varna, Sts. Constantine and Helena Resort, administrative building, www.aquahouse.bg, is a personal data administrator at the CPDP and processes the provided data and personal information in accordance with the Personal Data Protection Act and the General Regulation on Personal Data Protection (EU) 2016/679. This Policy for personal data protection applies to the Thermal Complex "Aquahouse Thermal & Beach" and its official website www.aquahouse.bg. We, as a personal data administrator and as a professional with many years of experience in the field of tourism, respect the privacy of the individual consumers. This security policy aims to inform you about the process of collecting, using and redirecting personal data. Therefore, please read its contents carefully. In case you have questions, you can ask them at the following e-mail address: gdpr@stconstantine.bg
Definitions
For the purposes of this Policy, Personal Data is any information relating to a person who is identified or can be identified directly or indirectly by an identification number or by one or more specific features. The data may refer to facts (for example - name, e-mail address, location or date of birth) or to an opinion about the actions or behavior of the Data Subject. Personal data controller is a natural or legal person, public body, agency or other structure, which alone or together with others determines the purposes and means for the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for determining it may be laid down in Union law or in the law of a Member State; Processing of personal data is any action or set of actions that can be performed on personal data by automatic or other means, such as collection, recording, organizing, storing, adapting or modifying, recovering, consulting, using, disclosing by transmission , distribute, make available, update or combine, block, delete or destroy. Direct marketing is a set of activities aimed at improving the quality of our services and their compliance with the exact needs and interests of our guests and analysis of their satisfaction. This includes activities such as: online advertising campaigns, e-mail marketing, surveys, user profiling and more.
Processing of personal data
In order to provide and improve the services we provide and for the needs of administering the resources to them, we store, use and process personal data in compliance with the applicable legal requirements.
Types of personal data that are processed
The types of personal data that the controller collects and processes are different, according to the purposes for which they are collected and the reasons for their processing. The types of data collected according to their purposes are the following:
- For issuing personal subscription cards for the guests of Aquahouse Thermal & Beach, "KARACHI" JSC collects and processes the following types of data:
- Name and surname of the person holding the card - e-mail address and contact phone number of the cardholder This data is stored for the period of validity of the card. The data is then destroyed and further processing is impossible.
- For the implementation of the loyalty program of Aquahouse Thermal & Beach, the administrator processes and stores the following data:
- Name and surname of the person holding the card - e-mail address and contact phone number of the cardholder The data for the realization of the loyalty program of Aquahouse Thermal & Beach are stored for a period of 3 / three / calendar years.
- For the purposes of the realization of corporate or personal events in Aquahouse Thermal & Beach the following data are processed and stored:
- Two names of the person organizing the event. In case of corporate events, contact person designated by the legal entity, organizer of the event; - e-mail address and telephone number of the contact person These data are stored for up to 3 / three / calendar years after the event.
- For the purposes of direct marketing, including analyzing and profiling target audiences and tracking the satisfaction of our customers, we process the following data:
- Name and surname - e-mail address - Location - Language - Behavior of users of the site www.aquahouse.bg
The processing and storage of this data requires the explicit consent of the data subject. The data that are processed for the purposes of direct marketing are stored for a period of 26 / twenty-six / months or until the withdrawal of consent. The purpose of collecting this data is to provide you with personalized offers and services that meet your needs and expectations.
Principles of processing
When processing personal data, we follow the following principles: - legality - in the collection, processing and storage of your data, we comply with the provisions of applicable Bulgarian and European legislation; - good faith and transparency - the data we collect, process and comply with this privacy policy, which is available to each user; - correlation of the processing with the purposes and minimization of the data - the types of data that we collect are minimized, according to the purposes for which they are processed. The purposes for which your data is processed are those for which we have obtained your consent; - storage restriction - we process and store the received data for a period of time, according to the purposes for which they are needed and according to your consent. - consent of users for data processing - in order to use your data for marketing purposes, in order to improve the services we provide, we must obtain your explicit consent.
Please note that when you send an inquiry to Aquahouse Thermal & Beach (for price conditions, for offers, for holding an event and / or other issues related to the services provided by the complex) you give your consent to "KARACHI" JSC to store and process the personal data provided by you for the purposes of the inquiry. After sending your request, you will receive from "KARACHI" JSC and a proposal to give your consent, to process your data for the following purposes: - for the purposes of direct marketing, as well as to receive information bulletins about our current offers, offers and organized games and events; - for surveys regarding your satisfaction with our services; By giving your consent for the processing of your data for the purposes of direct marketing, you will not only receive up-to-date information about our most attractive offers, but you will also contribute to the improvement of our services. By giving our consent, we will provide you with information on preferential terms and offers, as well as a wide range of products and services, or we will direct your attention to those that may be of interest to you. This information may include references to special offers, new products and new services. If you are no longer interested in receiving such information from us, you can refuse at any time by withdrawing your consent to the processing of your data by sending your request to the e-mail address: gdpr@stconstantine.bg. In this case, your data will be deleted in accordance with applicable regulations and current privacy policy.
Protection of personal data
Confidentiality of personal data We use electronic methods to process personal data in order to ensure accurate and fast service delivery and customer assistance. The process of processing your personal data provided to "KARACHI" JSC is carried out in accordance with the applicable legislation in the field of personal data protection, as "KARACHI" JSC respects your personal privacy.
Individualization and cookies
New technologies allow us to customize our website for each individual client. Cookies are text files that contain information that allows the identification of returning users. Cookies are stored locally on the device used by you to access our website: www.aquahouse.bg and do not cause damage to your system. Cookies relieve you of the need to enter data more than once, make it easier to transmit specific content and help identify your preferences (appearance and usability settings). Accumulating and analyzing this information allows us to improve electronic services and the overall user experience so that they meet as closely as possible to your needs. You can get acquainted with the cookies and other technologies we use in our Cookies Policy.
Security of personal data
"KARACHI" JSC applies technical and organizational security measures in order to protect the personal data you have provided from accidental or unlawful destruction, accidental loss, unauthorized access, alteration or distribution, as well as from other illegal forms of processing by unauthorized for this persons. The security measures we apply are subject to constant improvement and adaptation to the latest technologies.
The collected personal data may be provided to partners of "KARACHI" JSC, who act as processors of personal data on behalf of "KARACHI" JSC and have undertaken to comply with all applicable standards for personal data protection. We comply with the condition that the relevant information may be used only within the limits set by the legal basis on which it is collected or by your personal consent to the processing carried out on behalf of "KARACHI" JSC, and that this information should be treated as confidential. "KARACHI" JSC may disclose and provide personal information in accordance with applicable law, if a court or administrative body orders or requests this or if the provision of personal data is related to the fulfillment of a legal obligation of "KARACHI" JSC. The data collected for the purposes of implementing the services of Aquahouse Thermal & Beach is available to third parties specified in the Tourism Act - the Ministry of Tourism, the Municipality of Varna and the Minister of Interior, the National Revenue Agency and the National Statistical Institute.
Consumers' rights regarding their personal data
In accordance with current regulations, you have the right of ownership and access to the data you have provided for processing. With a written application to the e-mail address: gdpr@stconstantine.bg, you can receive information about the type of personal data provided and the purpose of their processing, as well as request that we remove any records of your personal information, without the possibility of further processing. When accessing your data, you can request that it be corrected in case you find errors or inconsistencies. The written application can be sent in person (or by a person authorized by a notarized power of attorney) to the specified contact address or electronically, from the e-mail address you provided to us, as data for processing. Address for contact and exercise of the rights described above: "KARACHI" JSC, Address: Varna, Sts.Constantine and Helena Resort, administrative building, Email: gdpr@stconstantine.bg
Users have the right to object to the processing of their data. The objection is addressed to "KARACHI" JSC, by the order of item 1 of this section. "KARACHI" JSC undertakes to consider your objection and to inform you within 30 calendar days of its receipt of the result of the internal inspection.
Consumers shall have the right to complain to the competent supervisory authority. According to the current legislation, the competent supervisory body in the Republic of Bulgaria is the Commission for Personal Data Protection.
Users have the right to receive their data, which "KARACHI" JSC stores when they are provided in a structured, widely used and machine-readable format. Users also have the right to transfer this data to another controller of personal data without hindrance by "KARACHI" JSC, in the cases and in relation to the data provided by consent, in the cases of data provided under a contract to which the user is a party or data provided when the user takes steps and a request for a contract.
Changes in the rules for personal data protection
The rules of "KARACHI" JSC for personal data protection may be changed unilaterally by "KARACHI" JSC in view of their improvement, offering new services, changes in the way of servicing and communication with our clients, as well as in connection with legislative changes. .
When making changes to the current rules for personal data protection, "KARACHI" JSC brings to your attention the changes made by publishing them on our website www.aquahouse.bg, giving you a reasonable period of time to familiarize yourself with them after the expiration of which they begin to apply when processing your personal data without further notice. If you state within this period that you reject the changes, it will be considered that you have withdrawn your consent to the processing of your personal data and "KARACHI" JSC will suspend their processing in the future. This may be related to the termination of your registrations for our games, services, e-newsletters, etc., for the purposes of which you initially provided us with your personal data.
Contact the team of "KARACHI" JSC If you have any questions regarding our measures and rules regarding the protection of personal data, please send a message to the following address with the subject "KARACHI" JSC - Personal data protection: gdpr@stconstantine.bg