ASTERA I EAD, entered in the Commercial Register at the Registry Agency with UIC 103872649, with registered office and management address: Varna, St. St. Constantine and Helena Resort, administrative building, www.asterahotel.com, is a personal data administrator to the CCommission for Personal Data Protection and processes the provided data and personal information in accordance with the Personal Data
Protection Act and the General Data Protection Regulation (EU) 2016/679.
We, as a personal data administrator and as professionals, with years of experience in the field of tourism, respect the privacy of the users. This security policy aims to inform you about the process of collecting, using and redirecting personal data. Therefore, please carefully read its contents. If you have any questions, you can use the following e-mail address: firstname.lastname@example.org
For the purposes of this Policy:
Personal Data means any information relating to a natural person identified or identifiable directly or indirectly by an identification number or by one or more specific features. The data may relate to facts (e.g. name, e-mail address, location or date of birth) or to an opinion on the actions or behavior of the data subject.
Personal Data Administrator is a natural or legal person, a public authority, an agency or other entity which, severally or jointly with others, defines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or national law, the administrator or the specific criteria for determining the administrator may be laid down in Union law or in the law of a Member State;
Processing of Personal Data shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or other wise making available, alignment or combination, blocking, erasure or destruction.
Marketing is a set of activities aimed at improving the quality of our services and their compliance with the exact needs and interests of our guests, as well as an analysis of their satisfaction. This includes activities such as online advertising campaigns, e-mail marketing, surveys, user profiling, and more.
PROCESSING OF PERSONAL DATA
To secure and improve our services and for the purposes of the administration of resources to them, we store, use and process personal data under the applicable legal requirements.
TYPES OF PERSONAL DATA WE PROCESS
Art. 4. (1) The types of personal data the administrator collects and processes are different according to the purposes for which they are collected and the reasons for processing them:
(2) The types of data collected according to their purposes are as follows:
4.2.1. For realization of booking and confirmation of booking, ASTERA I EAD collects and processes the following types of data:
A) When making an online reservation (via website):
- Contact person's name and surname;
- Contact person's e-mail address and phone number;
B) When making a reservation by phone: - Phone number and an e-mail address to confirm the reservation; - Contact person's name and surname;
This data is stored until the reservation is made. The data is then destroyed and their subsequent processing is impossible.
4.2.2. For the purpose of accommodating guests at Astera Hotel & SPA, the administrator processes and stores the following data:
- Personal number/ Personal number of a Foreign citizen;
- Name of the person (for Bulgarian citizens - in Cyrillic alphabet, for foreign citizens - in Latin, according to their national document);
- Date of birth;
- Identity card/ Valid national identity document number;
- Country of issue.
The data collected for registration at the hotel is collected on the basis of Art. 116, para. 2 of the Law on Tourism and are necessary for keeping a register for accommodated tourists. The data is stored for a period of 5 (five) calendar years.
4.2.3. For the purpose of conducting corporate or personal events in Astera Hotel & SPA, the following data are processed and stored:
- Two names of the organizer of the event. For corporate events, a contact person designated by the organizer of the event;
- Contact person's e-mail address and phone number These data are stored up to 3 (three) calendar years after the event.
4.3.4. For marketing purposes, including analyzing and profiling target audiences and tracking the satisfaction of our customers, we process the following data: - E-mail address - IP address - Location - Language - Language - Sex - Interests - Behavior on the site www.asterahotel.com
For the processing and storage of these data, the data subject's consent is explicitly required. Data processed for direct marketing purposes is kept for a period of 26 (twenty-six) months or until withdrawal of consent.
The purpose of collecting this data is to provide you with personalized offers and services tailored to your needs and expectations.
Principles of Processing
When processing personal data, we comply with the following principles: - Lawfulness - when collecting, processing and storing your data, we comply with the applicable Bulgarian and European legislation;
Relevance of processing to targets and minimization of data– the types of data we collect are minimized according to the purposes for which they are processed. The purposes for which your data is processed are those for which we have obtained your consent;
Storage limitation - we process and store the data we've received for a period of time, according to the purposes for which it is needed and your consent.
User consent for data processing - in order to use part of our services, and for us to use your data for marketing purposes, in order to improve the services we provide to you, we are required to obtain your explicit consent to this.
When you send a request to Astera Hotel & SPA (for prices, reservation, clarification about a reservation already made, event and/or any other issues related to the services provided by the hotel), you give your consent that ASTERA I EAD may store and process the personal data provided by you for the purpose of that request.
After sending your request, ASTERA I EAD will send you a proposal to give your consent to process your data for the following purposes:
for direct marketing purposes, as well as to receive newsletters for our current offers, travel ideas and organized games and events;
for surveys about your satisfaction with our services;
PROTECTION OF PERSONAL DATA
Personal Data Privacy
We use electronic methods of processing personal data to ensure accurate and fast service delivery and user assistance.
The processing of your personal data provided to ASTERA I EAD is performed in accordance with the applicable data protection legislation, and ASTERA I EAD respects your privacy.
Individualization and cookies
New technologies enable us to customize our website for each individual customer. Cookies are text files containing information that allows the identification of returning users. Cookies are stored locally on the device you use to access our website (http://www.asterahotel.com) and do not cause harm to your system.
Thanks to cookies, you won't need to enter data more than once, they facilitate the delivery of specific content, and help identify your preferences (viewability and usability settings). Accumulating and analyzing this information enables us to improve our e-services and overall consumer experience so that they fit as closely as possible to your needs.
You can learn about the cookies and the other technologies we use from our Cookies Policy
SECURITY OF PERSONAL DATA
ASTERA I EAD takes technical and organisational security measures in order to protect the personal data that you provided against accidental or unlawful destruction, accidental loss, unauthorised access, modification or disclosure, and other illegal forms of illegal processing. The security measures we apply are subject to constant improvement and adaptation to state-of-the-art technologies.
The collected personal data may be made available to the partners of the ASTERA I EAD, which act as processors of personal data on behalf of ASTERA I EAD and I are committed to comply with all applicable standards for the protection of personal data. We take into account the condition that the information can only be used within the limits set by the legal basis on which it is collected or by your personal consent in respect of the processing carried out on behalf of ASTERA I EAD, and that this information should be treated as confidential.
ASTERA I EAD may disclose and provide personal information in accordance with applicable law, if the Court or an administrative body has ordered or requested or if the provision of personal data is related to the performance of a legal obligation of ASTERA I EAD. Data to be collected for the purposes of accommodation at Astera Hotel & SPA is available to the third parties laid down in the Law on Tourism – the Ministry of Tourism, Varna Municipality and the Minister of the Interior, the National Revenue Agency and the National Statistical Institute.
USERS RIGHTS CONCERNING THEIR DATA
- In accordance with the applicable regulations, you have the right to ownership and access to the data you have provided for processing. By sending a written application to email@example.com, you can obtain information about the type of personal data provided and the purpose of processing it, as well as require that we remove any records of your personal information without the possibility of further processing. By accessing your data, you can ask for them to be corrected in case you find errors or discrepancies. The written application can be made personally (or by a person authorized by a notarized power of attorney) at the specified contact address or electronically from the e-mail address you provided as processing details. Address for contact and for exercising the rights described above: ASTERA I EAD, address: Varna, St. St. Constantine and Helena Resort, administrative building, e-mail: firstname.lastname@example.org
- Users are entitled to object to the processing of their data. The objection shall be addressed to ASTERA I EAD under i. 1 of this Section. ASTERA I EAD undertakes to consider your objection and to inform you about the outcome of the internal review within 30 calendar days of its receipt.
- Users are entitled to complaints to the competent supervisory authority. According to the current legislation, the competent supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection.
- Consumers are entitled to receive their data, which ASTERA I EAD keeps when provided in a structured, widely used and machine-readable format. Consumers are also entitled to transfer this data to another personal data administrator without hindrance by ASTERA I EAD in the cases and with regard to data provided by consent in the case of data provided under a contract to which the consumer is a party or data provided when the user takes steps and a request for a contract.
CHANGES TO THE RULES ON PROTECTION OF PERSONAL DATA