<\/p>\r\n
PRINCIPLES FOR PROCESSING PERSONAL DATA<\/strong> TEMA OOD processes personal data of individuals only in the following cases: <\/p>\r\n RETENTION PERIODS<\/strong> <\/p>\r\n RULES FOR PERSONAL DATA PROCESSING<\/strong> <\/p>\r\n PROCESSED PERSONAL DATA<\/strong> <\/p>\r\n PURPOSES FOR PROCESSING PERSONAL DATA<\/strong> <\/p>\r\n RECIPIENTS AND CATEGORIES OF RECIPIENTS<\/strong> PRINCIPLES FOR PROCESSING PERSONAL DATAThe policy of TEMA OOD aims to ensure compliance with the provisions of the Regulation.TEMA OOD collects and processes personal data lawfully, fairly, and in accordance with the principles and rights of individuals regarding the processing of their personal data. TEMA OOD processes personal data of individuals only in the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":124,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-5402","page","type-page","status-publish","hentry"],"yoast_head":"\n
The policy of TEMA OOD aims to ensure compliance with the provisions of the Regulation.
TEMA OOD collects and processes personal data lawfully, fairly, and in accordance with the principles and rights of individuals regarding the processing of their personal data.<\/p>\r\n
\u2022 the processing is necessary for compliance with a legal obligation of TEMA OOD;
\u2022 the processing is necessary for the performance of a contract (including an order) with TEMA OOD, to which the individual is a party, or to take steps at the request of the individual prior to entering into a contract, where their identification is required;
\u2022 the individual has given their explicit consent for a clear and transparently defined purpose by TEMA OOD, for which the processing of their personal data is necessary;
\u2022 Processing is necessary to protect the vital interests of the individual whose personal data is being processed or another individual;
\u2022 Processing is necessary for the purposes of the legitimate interests pursued by TEMA OOD or by a third party, in accordance with the provisions of the Regulation;
\u2022 Other cases provided for in the Regulation.
TEMA OOD does not collect or process personal data of individuals that exceed its legal obligations or its business needs.
In all cases where it is necessary to use collected and processed personal data of individuals for purposes other than the original ones, TEMA OOD notifies the respective individuals, seeks their consent, and proceeds with processing their personal data for other purposes only after their explicit consent.
TEMA OOD collects and processes only the minimum necessary personal data of individuals that:
\u2022 Are provided for by law;
\u2022 Are needed to fulfill a contract;
\u2022 Are needed to fulfill the purposes for which they are collected.
TEMA OOD ensures that the processing of personal data of individuals is carried out with maximum accuracy and, whenever possible, always kept up to date.
TEMA OOD ensures that access to and processing of personal data of individuals is carried out by the minimum necessary number of persons (operators) who have the required competence for their processing and the necessary commitment to their protection.<\/p>\r\n
TEMA OOD retains personal data for the following periods:
\u2022 Data from the register of accommodated tourists as per Article 116 of the Tourism Act, which includes identification data of the accommodated persons and data related to hotel accommodation \u2013 In accordance with the procedure and period stipulated in the Tourism Act and the subordinate regulatory framework.
\u2022 Information related to requested and used services for hotel accommodation, events, and restaurant services, including for cancelled reservations for hotel accommodation (insofar as they are related to the refund of prepaid amounts and\/or retention of due amounts) \u2013 From the time of making the respective reservation\/request until 5 (five) years from the provision of the service\/completion of the contract\/cancellation of the reservation. In cases where the services are requested and used based on a contract with continuous performance, the period starts from the final performance and\/or termination of the contract.
\u2022 Financial and accounting documents; invoices; authorization forms; other information related to tax and social security control \u2013 Up to 10 (ten) years, starting from the beginning of the year following the year in which the payment obligation for the respective year is due.
\u2022 Unstructured communication, correspondence, complaints, signals, and similar \u2013 5 years.
\u2022 Data from video recordings \u2013 up to 1 week.
\u2022 Data processed based on the explicit consent of the Data Subject \u2013 From the moment consent is given until it is withdrawn by the Data Subject.
\u2022 Until requested by the individual for deletion, when there is a basis for such a request.
The personal data specified in this Policy may be processed for a longer period than those mentioned above if necessary to achieve the objectives outlined herein or to protect the rights and\/or legitimate interests (including judicial proceedings) of TEMA OOD, or if the applicable legislation requires data processing for a longer period.
In all cases, TEMA OOD ensures that at least once a year, a review of the collected and processed personal data is conducted, and those that fall under any of the above scenarios are deleted without undue delay.<\/p>\r\n
\u2022 Personal data is processed with the necessary levels and measures of protection.
TEMA OOD ensures the necessary levels of physical, organizational, and technological protection considering:
\u2022 the nature, scope, context, and purpose of the processed personal data;
\u2022 the likelihood, impact levels, and severity of the risk to the rights and freedoms of individuals in the event of a security breach of the processed personal data.
\u2022 their financial and organizational opportunities.
TEMA OOD also ensures all necessary measures for the timely recovery of collected and processed personal data in case of loss due to accidental, malicious, or force majeure events.
\u2022 Personal data is processed with controlled and traceable access.
TEMA OOD ensures the necessary and appropriate technical, organizational, and technological measures for controlled and traceable access to the personal data of individuals.
\u2022 Personal data is processed with the necessary accountability to comply with the Regulation.
TEMA OOD ensures the necessary accountability and registers to be able to prove that the provisions of the Regulation are being followed.<\/p>\r\n
DATA SUBJECTS<\/strong>
In connection with the services provided, TEMA OOD processes information regarding the following Data Subjects:
\u2022 individuals visiting the hotel’s website;
\u2022 individuals making reservations on their own behalf or on behalf of another individual or legal entity through the Website;
\u2022 Individuals using the services provided by TEMA OOD, including, but not limited to, hotel accommodation services, restaurant services, and related service, as well as the provision of premises for the organization of other events, and individuals representing or otherwise acting on behalf of legal entities using these services;
\u2022 The services of TEMA OOD can only be requested by capable individuals who are at least 18 years old.
RIGHTS OF INDIVIDUALS WHOSE DATA IS PROCESSED<\/strong>
TEMA OOD ensures the observance of the rights of individuals whose personal data is collected and processed, which includes:
\u2022 The right to be informed about the processing of personal data;
\u2022 The right to access personal data \u2013 what data is held;
\u2022 The right to correct inaccurate personal data;
\u2022 The right to delete personal data \u2013 the right to be ‘forgotten’;
\u2022 The right to restrict the processing of personal data;
\u2022 The right to be informed about actions taken as a result of a request for correction, deletion, or restriction of the processing of personal data;
\u2022 right to data portability;
\u2022 right to object to the processing of personal data;
\u2022 right not to be subject to automated decision-making, including profiling.<\/p>\r\n
Processed Personal Data as an Administrator:
\u2022 of employees;
\u2022 of individual clients;
\u2022 of individual suppliers;<\/p>\r\n
TEMA OOD, as the Administrator, performs the following operations and processes only the necessary personal data for the following purposes:
\u2022 for the conclusion, execution, and termination of employment contracts and the calculation of salaries and compensations for employees;
\u2022 acceptance, administration, and processing of reservations and their cancellation;
\u2022 administration, execution, and delivery of purchases made through the Website;
\u2022 administration and receipt of payments for the provided services, including remotely;
\u2022 for providing services to clients;
\u2022 ensuring an individualized approach in service provision, tailored to the preferences stated by the users;
\u2022 for the conclusion and execution of contracts with individual suppliers;
\u2022 for direct marketing for sales purposes;<\/p>\r\n
In connection with the fulfillment of the purposes mentioned above, TEMA OOD provides personal data of individuals to the following recipients:
\u2022 National Revenue Agency (NRA) in relation to the calculation of the staff salaries;
\u2022 National Social Security Institute (NSSI) in relation to the calculation of the staff benefits;
\u2022 Occupational Health Service company in relation to the obligation to maintain an up-to-date health status of the staff and to conduct periodic medical examinations;
\u2022 General Labour Inspectorate, NSSI, and Ministry of Interior (MoI) \u2013 in relation to occupational accidents;
\u2022 Ministry of Interior (MoI) \u2013 in relation to the transmission of information about the hotel guests;
\u2022 Other state and municipal authorities and\/or institutions \u2013 in relation to legal obligations towards them or in relation to legal requests from them for information containing personal data;
\u2022 Subcontractors for the fulfillment of contractual obligations.
VIDEO SURVEILLANCE AND SECURITY<\/strong>
In accordance with applicable legislation, TEMA OOD implements security measures that include the following technical and organizational means for access control and ensuring physical security against intrusions into buildings and facilities, as well as for the protection of the life and health of citizens: a video control system that performs 24-hour video surveillance and consists of recording and storage devices.
Video surveillance and recording may be conducted in publicly accessible areas and premises within the buildings of TEMA OOD, as well as in areas with a special access regime. No video surveillance is conducted in guest rooms, sanitary facilities, relaxation areas, and similar spaces. Data from video surveillance activities is stored for a period of seven days.
Through information boards placed in visible locations, data subjects and other visitors who may be recorded are informed about the use of technical means for monitoring and control, as well as any other relevant information related to the surveillance being conducted.
CONTACT INFORMATION<\/strong>
If you have any questions or uncertainties regarding the processing of your personal data or wish to exercise any of your rights, you can contact us at:
\u2022 Email: reservation@armirahotel.com
\u2022 Telephone: 0899 17 16 17
\u2022 Address: village of Starozagorski Bani, Armira SPA Hotel
COMPETENT SUPERVISORY AUTHORITY<\/strong>
In the territory of the Republic of Bulgaria, the competent supervisory authority is the Commission for Personal Data Protection.
If you suspect that your rights related to the protection of your personal data have been violated, you can file a complaint at:
\u2022 Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
\u2022 Email: kzld@cpdp.bg
\u2022 Telephone: 02 \/ 91-53-518<\/p>\r\n","protected":false},"excerpt":{"rendered":"