As an administrator of personal data for purchases online or on site at the address of the activity, VIP-Sliven Ltd., hereinafter referred to as the Company, meets all the requirements of the effective from 25 May 2018. a new General Data Protection Regulation, collecting only personal data to the extent necessary for the provision of the service and protecting them responsibly and lawfully.
The company operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. data.
Information about the Personal Data Administrator
Name: VIP-Sliven Ltd.
UIC / BULSTAT: 200363936
Headquarters and address of management: Nedyalsko village, Straldzha municipality, 44 Slav Bonev str.
Address of the activity and address for correspondence: Sliven, 8800, 7-G-1 Misho Todorov Str.
E-mail: firstname.lastname@example.org Phone: +359 878 387038
Information on the competent supervisory authority
Name: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov "№ 2
Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov "№ 2
Phone: 02 915 3 518
Email: email@example.com, firstname.lastname@example.org, Website: www.cpdp.bg
Grounds for collecting, processing and storing your personal data
I. The company collects and processes your personal data in connection with purchases of tourist or other services online or on the spot and concluding contracts on the grounds of art. 6, para. 1, Regulation (EU) 2016/679 on the basis of the following:
a. Fulfillment of the obligations of the Company under a Contract with you;
b.Explicit consent received from you as a customer;
c. Compliance with a legal obligation that applies to the Company;
d.For the purposes of the legitimate interest of the Company.
II. The company is a controller of personal data regarding your data as users of our products and services.
Principles and goals in the collection, processing and storage of your personal data
III. The Company collects and processes the personal data you provide to us in connection with the use of our products and services and for concluding a contract with the company, as well as for registration for participation in our events or marketing campaigns, including for the following purposes:
a. creating an account in our online platforms and providing full functionality when buying online or on site;
b. individualization of a party to the contract;
c. registration of a participant in a campaign or event organized by the Company;
d.accounting and statistical purposes;
e. ensuring the implementation of a contract for the provision of our service;
f. sending marketing and trade information, etc.
IV. The company observes the following principles in the processing of your personal data:
a.legality, transparency and good faith;
b.limiting the purposes of processing;
c. compliance with the purposes of processing and minimizing the collected data;
d.accuracy and timeliness of data;
e. limiting storage in order to achieve the objectives;
f. completeness and confidentiality of the processing and ensuring an appropriate level of security of personal data.
g. During the processing and storage of personal data, the Company may process and store personal data in order to protect legitimate interests such as fulfilling its obligations to the NRA, the Employment Agency and other state and municipal authorities.
What types of personal data does the Company collect, process and store?
V. The company performs the following operations with personal data for the following purposes:
a.Registration of a user in online platforms: VisitBulgariaOn.com and execution of a contract for the purchase of products and / or services - the purpose of this operation is to create a profile that is related to the purchase and in which you can follow the descriptions and the history of their purchases. Based on the above, the Data Protection Officer considers that the "Purchase Agreement" operation is admissible and provides sufficient guarantees to protect the rights and legitimate interests of data subjects in accordance with the requirements of the GDPR.
b. Conclusion and execution of a trade transaction with a client or partner - the purpose of this operation is the conclusion and execution of a contract with a trade partner or client and its administration;
c. Sending information messages - the purpose of this activity is to administer the process of sending messages to customers containing commercial and marketing information, as well as offers for our products and services;
d.Sending a newsletter - purpose: administration of the process of sending newsletters with innovations, commercial or marketing information to the customers who have stated that they wish to receive one;
VI. The company processes the following categories of personal data and information for the following purposes and on the following grounds:
a.Data: Your personal data (name and surname, e-mail, country, telephone); Purpose: 1) User registration in the e-commerce platform; 2) Making contact with the user and sending information to him, including if desired - to send newsletters and advertising messages; Grounds for processing your personal data - By accepting the general terms and conditions and registering on the website and purchasing a product or service, a contractual relationship is created between the Company and you, on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR.
b.Additional data provided by you - If you wish to complete your profile, you can fill in data on Gender and Age (required for some of the reservation systems. Purpose: To supplement information about the user in his user profile. Grounds for processing data: By accepting the general terms and conditions and registering on the website and purchasing a product or service, a contractual relationship is created between us and you, on the basis of which we process your personal data - Article 6, paragraph 1, item (b) of the GDPR.
c.When logging in to our website or your account, the Company collects data about the IP address used. Objective: Improving the security of the service and localization of the interface, statistical and marketing research. Grounds for data processing: The processing is necessary for the performance of a contract to which the data subject is a party - Art. 6, para. 1, p. (b) of the GDPR. Until the creation of a user profile, the IP address is collected on the basis of the legitimate interests of the administrator - Art. 6, para. 1, p. (f) the GDPR;
VII. The Company does not collect or process personal data that relate to the following:
a.genetic and biometric data, health data or data on sexual life or sexual orientation.
b. disclose political, religious or philosophical beliefs or trade union membership;
c. disclose racial or ethnic origin;
VIII. The personal data are collected by the Company from the persons to whom they refer.
IX. The company does not perform automated data generation.