PRIVACY POLICY
This Statement describes the policy of Boruna Tours Ltd. in collecting, processing, storing and destroying information in accordance with the Personal Data Protection Act, Art. 43, para 1 and 2 of the Qualified Information Protection Act. as well as the information requirements under Art. 13 and Art. 14 of the General Regulation on Personal Data Protection and in line with the requirements of EU Regulation 2016/679 of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data data and repealing Directive 95/46 / EC (hereinafter referred to as “Regulation 2016/679″ or “GDPR”) and other applicable acts of the European Union and of the Republic of Bulgaria.
1. DETAILS ABOUT THE ADMINISTRATOR
Boruna Tours Ltd. is a legal person, a personal data administrator, registered under number 47611 at the Commission for Personal Data Protection. The main activity of the company is the provision of tourist services. The collection of personal data by staff and tourists is voluntary and is governed by the statutory regulations in the Law on Tourism and all related regulations and rules, as well as the Law on Statistics, the Law on Local Taxes and Fees, according to which for us as hoteliers obligations to collect personal data of all tourists result in the establishment of the valid representation of the individual as a party to the contract for the tourist service provided by the company.
Boruna Tours Ltd., BULSTAT 205971173, with headquarters and address of management 26 Sozopol, 32 Odessa Str., Phone 0886 407296, e-mail apartpanorama@abv.bg or personally for requesting – at the reception desk at Hotel Briz, located at the above address.
2. CONTACT DATA WITH THE DATA PROTECTION OFFICER
The Data Protection Officer of Boruna Tours Ltd. can contact the above-mentioned telephone numbers or at the email address apartpanorama@abv.bg, in which you should indicate the necessary data for your individualization and contact for feedback.
3. OBJECTIVES AND GROUNDS FOR THE PROCESSING OF PERSONAL DATA, CATEGORIES OF DATA PROCESSED:
Boruna Tours Ltd implements the powers provided for in the Tourism Act, all related regulations and rules, the Law on Statistics, the Law on Local Taxes and Fees and other legal acts, in which it processes personal data in connection with the following main activities:
- Keeping a register for reservations and payments by bank and cashier
- Keeping a register of Bulgarian tourists
- Keeping a register for foreign tourists
Boruna Ltd does not disclose personal data to third parties and recipients, unless there is a legal basis for receiving the data or the data is not publicly available.
Data recipients may be public authorities and bodies entrusted with public functions, within their powers, such as: NRA, NSS, MoF, MoI and others.
4. DATE OF STORAGE AND METHOD OF DISTILLATION
As a personal data controller, Boruna Tours Ltd. processes data for a minimum duration according to the processing objectives and provided for in the legislation in force in accordance with the principle of the restriction of storage.
Online data collected is securely stored with full confidentiality. Their deletion is after the expiration of the Travel Service Agreement
For a period of 50 years, the data relating to labor and social security relations are kept. For financial documents such as income, expense invoices, and contracts with tour operators, the retention period is 5 years. The registration forms in paper form at tourist accommodation are kept until the end of the tourist season.
Storing the collected data on paper is done in lockable cabinets with restricted access. The storage of electronic documents is on a personal computer with a high level of protection, with a limited level of access, encryption with an electronic signature.
5. RIGHTS OF PROTECTION OF PERSONAL DATA
Your rights include – the right of access to your personal data:
5.1 Right to Repair Your Personal Data;
5.2 Right to restrict the processing of your personal data;
5.3 Right to data portability;
5.4 Right to object to the processing of your personal data (including objection to profiling and other rights in automated decision-making);
5.5 Right to withdraw your consent and submit a complaint to the supervisory authorities and the Personal Data Protection Commission.
6. UPDATE AND RIGHT OF INTELLECTUAL PROPERTY.
Boruna’s current policy is to protect your personal data legally. It will be supplemented and updated according to all new regulatory requirements.
The current text and its publication on Boruna’s sites are exclusive intellectual property of the company and are subject to copyright protection. This Statement aims to familiarize you with the accommodation offered by the Company in accordance with the information requirements under Art. 13 and Art. 14 of the General Regulation on Personal Data Protection, and in compliance with the requirements of EU Regulation 2016/679 of April 27,
Any distribution or reproduction without permission or Boruna’s written consent of the statement is strictly prohibited.