The Policy reflects the requirements of Regulation 2016/679, the Personal Data Protection Act and its implementing regulations in relation to the receipt, processing, storage and destruction of individuals’ personal data

Information about us

Park Hotel Kaylaka is a company registered in the Commercial Register of the Registry Agency with UIC205721814, with registered office and registered address: 5800 Pleven, Tel: +359 885 992 230, e-mail: info@parkhotelkaylaka.com

Contact information of PARK HOTEL KAYLAKA EOOD regarding the protection of personal data of our clients

Park Hotel Kaylaka EOOD, 5800 Pleven, info@parkhotelkaylaka.com

Data Protection Officer: Vasil Savkov-Hotel Manager

Park Hotel Kaylaka processes your personal data in order to provide you with better, higher quality and more varied hotel services. We protect your data by applying all appropriate technical and organizational means at our disposal to prevent unauthorized access, unauthorized or malicious use, loss or premature deletion of information.

We only collect and process personal data in compliance with local and European law. We are aware that the processing of your data is linked to a specific reason and cannot be carried out without restriction.

This “Data Protection and Privacy Policy” is intended to explain to you how and why we process your personal data.

How and why we use your personal data

The processing of your personal data is carried out in order to:

establishing the identity of the client upon enquiry, preliminary reservation and/or accommodation in the Park Hotel “Kaylaka” in Pleven

preparing and sending a bill/invoice for the provided hotel services

to collect the amounts due for the services used by you;

We process your identification data and other personal data in order to comply with obligations that are stipulated in a legal act, for example:

Providing information to the Data Protection Commission in relation to obligations set out in data protection legislation – Data Protection Act, Regulation (EU) 2016/679 of 27 April 2016, etc.;

obligations provided for in the Accounting Act and the Tax and Social Security Procedure Code and other related regulations in connection with the keeping of proper and lawful accounting;

provision of information to the court and third parties, in the framework of court proceedings, in accordance with the requirements of the procedural and substantive regulations applicable to the proceedings;

Categories of personal data we process:

identification data :

full name, unique citizenship number or unique number of foreigner, permanent address; passport data

other data:

personal contact details – contact address, phone number and contact information (email, phone number), age group; nationality

credit or debit card information, bank account number or other banking and payment information in relation to payments made to and from the Kaylaka Park Hotel in the event of cancellation of a booking;

• For children under the age of 16, the processing of personal data is lawful to the extent that consent has been given by the person with parental responsibility for the child.

Where we process your basic personal data and the other data described for the purposes of providing hotel services and their payment, for responding to your requests for services, and in order to comply with our legal obligations, this processing is mandatory. If you do not provide us with identification data, we cannot provide you with our hotel services.

How we protect your personal data

In order to ensure adequate protection of the data of the Park Hotel “Kaylaka” and its guests, we apply all necessary measures provided for in Regulation (EU) 2016/679 of 27 April 2016 and Bulgarian legislation.

We make every effort to ensure that personal data collected from you is protected from loss and/or unauthorized access. This protection applies to information stored electronically and on paper. Access to your personal information is limited to selected employees or representatives. In addition, we use generally accepted information security techniques, such as firewalls, access control procedures, etc., to protect personal information against loss and/or unauthorized access.

Storage and Safeguarding of Personal Information:

We keep the personal information provided to us for as long as necessary to fulfil the purpose for which the personal data was collected and processed, in accordance with Regulation (EU) 2016/679 of 27 April 2016 and Bulgarian law. Once the purpose for which it was collected has been achieved, the personal data will be destroyed.

DATA SHARING

Booking.com: We have teamed up with Booking.com B.V. with address: Herengracht 597, 1017 CE Amsterdam, The Netherlands (www.booking.com) (hereinafter referred to as Booking.com) to offer you our online booking services. Although we provide the content on this website and you book directly with us, bookings are processed through Booking.com. Therefore, the information you enter on this website will also be shared with Booking.com and its partners. This information may include personal details such as your name, your contact details, your payment details, the names of guests travelling with you, and any preferences you have indicated when booking.
To learn more about the Booking.com corporate family, visit About Booking.com.

Booking.com will send you a confirmation email prior to arrival and provide you with information about the area and our accommodation. In addition, Booking.com will provide you with international customer service around the clock from its local offices in more than 20 languages. Sharing your details with Booking.com’s worldwide customer service staff enables them to respond to you when you need assistance.

If you have any questions about Booking.com’s processing of your personal data, please contact dataprotectionoffice@booking.com.

BookingSuite: Your personal data may be shared with BookingSuite B.V. with address: Herengracht 597, 1017 CE Amsterdam, The Netherlands, the company that operates this website and the suite.booking.com website. BookingSuite will provide your information, which may include personal data, to Booking.com for the purposes described above.

Cookie Policy

Use of cookies

“Cookies are small text files created by the websites you visit. The cookie will help the website recognize your device the next time you visit and so store your preferences and actions for a period of time. The use of so-called “cookies” or “cookies” is solely for the convenience and ease of users when working online. “Cookies do not contain information that can identify a person (such as first name, last name, email address, phone number), but a combination of a computer and a web browser. As a prime example of information stored in a cookie, whether you have responded “ok” about this site’s cookie policy so that you will not be asked again.

How are cookies used?

We use cookies on this Website primarily to facilitate the usability of the Website, improve its performance and store information about user behaviour. No personal data is stored in this process, i.e. we cannot identify you as an individual through the cookies on the website, therefore the Data Protection Act does not apply to the collection of this information. The information collected from cookies is generally used in aggregate form to analyze user behaviour on the Website, which allows us to improve the functionality of the Website, the user paths and the content used.

How can I manage my use of cookies?

Depending on the browser you are using, you have the option to allow or refuse the storage of cookies from all sources or set up a notification that will ask for permission to accept or refuse each new cookie.
Most browsers are set to accept cookies by default. Cookies can be deleted by the user at any time. Acceptance or rejection of these cookies can be enabled or disabled by you through your browser settings. The settings required for this can be found in the relevant menu section of your internet browser. Details can be found in the “Help” menu of your internet browser. You can control

and/or delete cookies whenever you wish – see aboutcookies.org for more information.

All cookies used on our Website are automatically deleted after a certain period of time. This period varies up to 365 days depending on the purpose of the specific cookie.

Categories of recipients to whom personal data may be disclosed:

-to individuals to whom the data relates;

-to persons for the protection of the life and health of the data subject;

-to persons if provided for in a legal act

-to persons in the performance of a task in the protection of the public interest;

-to persons under contract;

-to processors of personal data

We do not provide your personal data to third parties, foreign countries or international organizations.

You have the following rights when processing your personal data:

Right to information:

You have the right to request:

information about whether data relating to you is being processed, information about the purposes of that processing, the categories of data and the recipients or categories of recipients to whom the data is disclosed;

a notice in an intelligible form containing the personal data which is being processed and any available information about its source;

Right of rectification:

In the event that we process incomplete or erroneous/incorrect data, you have the right, at any time, to request:

to delete, correct or block your personal data the processing of which does not comply with the requirements of the law;

Right to object:

At any time, you have the right to:

object to the processing of your personal data where there is a lawful basis for doing so; where the objection is justified, the personal data of the individual concerned may no longer be processed;

Right to restrict processing:

You may request restriction of the processing of personal data if:

you contest the accuracy of the data for the period in which we need to verify its accuracy; or

the processing of the data is without legal basis, but instead of deleting it, you request its limited processing; or

we no longer need the data (for the specified purpose) but you need it to establish, exercise or defend legal claims; or

you have objected to the processing of the data, pending verification that the controller’s grounds are lawful.

Right to data portability:

You may request that we provide the personal data you have entrusted to our care in an organized, orderly, structured, commonly accepted electronic format.

Right of appeal:

you believe that we are in breach of applicable law, we ask that you contact us to clarify the matter. You can protect your rights by filing a complaint with the CPDP www.cpdp.bg. Sofia, 2 Prof. Tsvetan Lazarov Blvd., e-mail kzld@cpdp.bg, or to the court.

Withdrawal of consent:

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

Updates and changes to the policy

In order to implement the most up-to-date protection measures and to comply with current legislation, we will regularly update this Privacy Policy. We invite you to regularly review the current version of this Privacy and Data Protection Policy, to keep informed about how we are protecting the personal data we collect.