PRIVACY AND DATA PROTECTION POLICY

The Policy reflects the requirements of Regulation 2016/679, the Personal Data Protection Act and its implementing regulations in relation to the receipt, processing, storage and destruction of individuals’ personal data.

Information about us and contacts:

GARSON 61 LTD
gr. Kardzhali, ul.

+359887 957 109; +359 877 044 001
Email: contact@garson.bg

Data Protection Officer: Gabriela Gavrailova – Manager

GARSON 61 Ltd. processes your personal data in order to provide you with quality and diverse hotel services. We protect your data by applying all appropriate technical and organizational means at our disposal to prevent unauthorized access or malicious use, loss or premature deletion of information.

We only collect and process personal data in compliance with local and European law. We are aware that the processing of your data is necessary for a specific reason and cannot be carried out without restriction.

This “Privacy and Data Protection Policy” is intended to explain how and why we process your personal data

WHY WE COLLECT YOUR PERSONAL DATA:

We use your personal data for the following purposes:

1. To process your reservation;

2. To verify your identity at check-in in accordance with your reservation;

3. To provide you with services in accordance with your booking;

4. To communicate with you about your booking and stay;

5. To prepare and send you a bill/invoice for the hotel services provided;

6. To collect amounts due for services used by you;

7. To maintain our records /for example, the “Tourist Accommodation Register” which we are required to keep under the Tourism Act/;

8. To comply with obligations under the Accountancy Act and the Tax and Social Security Procedure Code and other related regulations in relation to the keeping of proper and lawful accounts;

9. To provide information to the court and third parties in court proceedings in accordance with the requirements of the procedural and substantive regulations applicable to the proceedings;

10. To offer you a service tailored to your needs and preferences;

11. To respond to your requests, recommendations or complaints;

12. For your security and to protect our facilities;

13. For statistical purposes;

14. Direct Marketing;

CATEGORIES OF PERSONAL DATA WE PROCESS:

Identification data:

• Three names;

• National identity number or alien identity number;

• Passport details.

Other data:

• Personal contact details;

• Contact address;

• Telephone number;

• Email;

• Age group and nationality;

• Credit or debit card information, bank account number or other banking and payment information in relation to payments made to and by GARSON 61 Ltd. in the event of cancellation of a booking.

• For children under the age of 16, the processing of personal data is lawful to the extent that consent has been given by the person with parental responsibility for the child.

This treatment is mandatory.

If you do not provide us with identification data, we cannot provide you with our hotel services.

HOW WE PROTECT YOUR PERSONAL DATA

In order to ensure adequate data protection for GARSON 61 Ltd and its guests, we apply all the necessary measures provided for in Regulation /EU/2016/679 of 27.04.2016 and Bulgarian legislation.

We make every effort to ensure that personal data collected by us is protected from loss and/or unauthorised access. This protection applies to information stored electronically and on paper. Access to your personal information is limited to selected employees or representatives. In addition, we use generally accepted information security techniques, such as firewalls, access control procedures and others.

TIME LIMIT FOR STORAGE AND PROTECTION OF PERSONAL INFORMATION

We only keep your personal data for the minimum period necessary to achieve the purposes set out in this policy, unless we are legally required or entitled to keep it for a longer period.

We determine the period of retention by taking into account a number of facts, including the length of time we have been providing services / for example, whether the price for the stay has been paid when you leave the premises / whether it is necessary for the purpose of stopping, exercising or defending our legal claims, whether we have a legal obligation to retain the data / for example, accounting records for a period of 5 or 10 years /.