Personal data

We are concerned about maintaining your privacy and have a duty to protect your personal information. This privacy statement informs you how we manage your personal information, your privacy rights and how the law protects you. Please read this privacy statement carefully before using our services.

The following words, terms and abbreviations have the following meanings:

“Services” means all products, services, content, features, technologies or features and all related websites, applications and services offered by us.

“Platform” means websites, mobile applications, mobile sites or other online properties through which we offer our services.

“Personal data” means all data that contains identifying information (eg name, address, telephone number, email, etc.).

“Personal data controller” means a person or company who determines the purposes or means of the processing of personal data.

 

DECLARATION FOR THE PROTECTION OF PERSONAL DATA AND CONSENT TO THEIR USE

The platform https://www.hotelbehi.com owned by ET “Behi – Behide Chausheva” with address Kardzhali, Bulgaria Blvd. 37, bl.51. We strictly comply with the provisions of the General Data Protection Regulation (Regulation 2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and relevant internal data. laws and regulations and all instructions of the Commission for Personal Data Protection in the process of data collection, processing and use.

By accepting this Privacy Statement, you give your free consent to https://www.hotelbehi.com to collect, process and use and store data, in compliance with the legal regulations for data protection in order to conclude and perform the contract for purchase and sale of goods and the following conditions. You can withdraw your consent at any time and only at the will of the data subject and this will take effect from that moment on. You can object to the company against the processing of your personal data if there is a legal basis for it.

COLLECTION, PROCESSING AND USE OF PERSONAL DATA

Personal data is all that data that can be linked to a specific person or a person that can be identified. These include, for example, your name, phone number, postal or email address.

Our employees and consultants related to the maintenance of the platform will have access to your personal data for the purposes of website management, but they are bound by a confidentiality obligation regarding the data they have access to as part of the relevant core IT operations.

Employees and consultants shall be duly informed of the importance of complying with the obligation of confidentiality and shall be responsible for complying with that obligation.

Usually the use of our website is possible without providing personal data.

For the purposes of processing your order, we store and process your first and last name, address, email and your mobile phone number. For the purposes of the necessary payment processing in certain cases, the following data is additionally required: when paying by card, your full name, email address and credit / debit card details are required.

We do not store credit / debit card numbers, but transfer them directly to the payment service provider.

The data necessary for the performance of the contract for the sale of goods shall be provided only to the extent necessary for other third parties (eg courier and forwarding companies, payment services, etc.) within the registration and for the sale of goods. . Our service providers have the right to use the data provided to them only for the performance of their duties, but not for any other purposes.

We do not collect personal data that:

-reveal racial or ethnic origin;

-reveal political, religious or philosophical beliefs;

– disclose membership in political parties or organizations, associations with religious, philosophical, political or trade union goals;

-relate to health, sex life or the human genome;

Our company does not provide personal data to third parties for advertising purposes.

STORING YOUR DATA

The data we collect about you will be stored and processed on secure servers.

We will retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of compliance with legal, accounting or reporting requirements.

За да определим подходящия период на запазване на личните Ви данни, ние вземаме предвид  количеството, естеството и чувствителността на личните Ви данни, потенциалния риск от вреди от неразрешено използване или разкриване на Вашите лични данни, целите, за които обработваме Вашите лични данни и дали можем да постигнем тези цели чрез други средства и приложимите законови изисквания.

In case you have questions about the period of storage of your personal data, please contact us via the contact form.

PAYMENT SERVICE PROVIDERS

Our website allows you to make a purchase of goods. For this purpose, we provide your data in case of need to any of the following payment service providers specified in the ordering process. Payment can only be made using the online payment methods listed.

• Cash payments are processed by ET “Behi – Behide Chausheva”.
• Payments by bank are processed by ET “Behi – Behide Chausheva”.
• Payments by debit / credit card are processed by ET “Behi – Behide Chausheva”.

USER LOGIN / CUSTOMER PROFILE

You have the opportunity to create a client profile with us. In the password-protected part of the client’s profile you can view the information about your reservations.

Fields marked as required (*) contain personal data and are used only for the maintenance and operation of the user profile.

This data is used both for the implementation of the request of the reservations made by you, as well as for automatic filling of the information when making a second reservation.

In case you have confirmed your consent, they are placed in your device through the function to stay in the account, etc. persistent cookies. With their help, re-registration will not be required for subsequent visits to the website. You will not be able to access this feature if you have disabled the storage of such cookies from your browser settings.

You can update or delete your personal customer account at any time, or request that it be deleted, and thus the personal data associated with it.

Affected by deletion remain those personal data that are stored in accordance with legal deadlines and are necessary for the performance of the contract.

DATA SECURITY

We maintain the security of the personal data of users of our website and related systems, using various technical and organizational measures. To ensure the secure transfer of personal data, we use the SSL encryption protocol (RSA-2048 for the public key infrastructure is used as the primary encryption method). This method is successfully applied throughout the world wide web. In this way, all personal data (names, addresses, payment details, etc.) are encrypted and securely transferred to the Internet. By the symbol (locked padlock) in your browser you will recognize that you are in a protected area.

Please note that despite the measures we have taken to protect your data, the transfer of data over the Internet or other open networks is never fully protected and there is a risk that your personal data will become available to unauthorized third parties.

THIRD PARTY LINKS

The platform may contain links to third party websites or applications. If you click on any of these links, keep in mind that everyone has their own privacy policy. We do not control these websites / applications and are not responsible for their policies. When you leave the Platform, we recommend that you read the privacy notice on each website you visit.

“COOKIES”

We use for our Platform etc. “Cookies”. These are small files that are stored on your disk and that store certain settings and data for communication with our system through your browser. Some of the cookies we use are deleted after the end of each browser session, ie. after its closure. These are the so-called “Cookies” for individual sessions. Others remain on your device and allow both us and our partners to recognize your browser the next time you visit (persistent cookies). This helps us build our website in a way that suits you and offers you an easier way to use it, such as by storing certain of your data in a way that eliminates the need to enter it all the time. From your browser settings, you can choose restrictions on the use and deletion of cookies. In the browser help section, you can find information about which settings to choose. Refusing to use cookies may prevent you from using our online services.

YOUR RIGHTS

Under the Data Protection Act, you have the right to free information about what your data is stored, as well as the right to correct, delete or block the data. For this purpose, or for additional information and to assert your right to appeal, please contact us via the contact form or the data specified in the “Contacts” section.

In certain circumstances, you have rights under applicable data protection laws and in relation to your personal data.

If you wish to exercise any of the rights listed below, please select your account settings / privacy settings or contact us via the contact form:

The right to request access to your personal data (commonly referred to as a “request for access by the data subject”). This allows you to obtain a copy of your personal data that we store and verify that it has been lawfully processed.

The right to request correction of your personal data that we have about you. This allows you to correct any incomplete or inaccurate data we have about you. However, we may need to verify the accuracy of the new data you provide to us.

The right to request a restriction on the processing of your personal data. This gives you the opportunity to contact us with a request to stop the processing of your personal data in the following cases: a) if you want us to prove the accuracy of the data; b) when you believe that our use of the data is illegal; c) when you require us to store the data, even if we no longer need it, as you need to establish in order to exercise or prove your claims; or (d) when you have objected to the use of your data, but we need to check that we have legal grounds to use it.

The right to request the deletion of your personal data. This right allows you to contact us with a request to delete or remove your personal data when there is no good reason to continue processing it. In addition, you have the right to request that we delete or remove your personal data when you have successfully exercised your right to object to the processing (see, below), when you suspect that we may have processed your information inconsistently with the law. requirements or when we are required to delete your personal data in order to comply with legal requirements. Please note that for certain purposes we may be legally obliged to store your personal data.

Right to object to the processing of your personal data when it is based on a legitimate interest (or that of a third party) and there are grounds for your specific interests, which makes you oppose the processing of your personal data on this basis, considering that the processing violates your fundamental rights and freedoms. You have the right to object when we process your personal data for the purposes of direct marketing.

The right to request the transfer of your personal data to you or to a third party. We will provide you or your designated third party with your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information that you have originally given your consent to use or that we have used to enter into a contract with you.

You have the right to withdraw your consent to the processing of your personal data at any time. This does not affect the legality of the processing we have already carried out on the basis of your prior consent.

There is usually no fee: You have no obligation to pay a fee for access to your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, recurring, or excessive. We may refuse to comply with your request in these circumstances.

Deadline for response: We will do our best to respond to any legitimate request within one month of its submission. It may take us more than a month if your request is particularly complex or if you have made several requests. In this case, we will notify you and keep you informed. In addition, you have the right to lodge a complaint with the Data Protection Commission at any time. Before filing a complaint with the Commission for Personal Data Protection, we would like to know your grounds for complaint and claims and do everything possible to resolve them.

RETARGET

In order to optimize our offers on the web, as well as for product recommendations, we use the technology of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) to create user profiles under a pseudonym for marketing purposes and to track the online behavior of visitors to our site. For this purpose, cookies can be used, which enable the recognition of an Internet browser when revisited. The information stored about online behavior is analyzed using an algorithm so that targeted product recommendations in the form of banner ads or advertisements on third-party websites are subsequently displayed based on interest. User profiles under a pseudonym are not connected to the respective user through his personal data without his special and explicit consent. You can opt out of creating usernames under a pseudonym at any time for the purpose of running ads based on your interests by visiting https://www.google.de/settings/ads. You can find more information about ads based on your interests at http://www.google.com/policies/technologies/ads/.

This platform uses the pixel to retarget Custom Audiences on the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. Using the remarketing pixel, Facebook can use visitors to our platform as a target group to display ads on the social network. For this purpose, a cookie is stored on your computer on Facebook. Further information on the purpose and scope of data collection and further processing and use by Facebook, as well as on your privacy settings, can be found in the data protection guidelines. on Facebook at the following addresses: https://facebook.com/policy.php and https://www.facebook.com/ads/settings. You can opt out of Custom Audiences at https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads

WEB ANALYSIS

1. GOOGLE ANALYSIS

This website uses Google Analytics, an ad analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called Cookies – text files that are stored on your computer and allow you to analyze the use of the website. Google tracking codes for this website use the “_anonymizeIp ()” feature. In this way, the IP address is processed in the EU member states or in the other countries of the European Economic Area only in abbreviated form, in order to exclude the possibility of direct connection with a specific person. Only in exceptional cases can the full IP address be sent to a Google server in the United States, abbreviated there. Upon assignment by the person operating this website, Google will use this information for the purpose of evaluating your use of the website and compiling a report on advertising activities in order to provide further services relating to your use of the website and the Internet. generally. The IP address sent by your browser in Google Analytics will not be associated with other data from Google. You can disable the storage of cookies using the appropriate setting of your browser, but please note that in this case you will not be able to use all the features of this website in their full range. You can also avoid sending data generated by cookies and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the following browser plug-ins: http://tools.google.com/dlpage/gaoptout?hl=en

SOCIAL PREFIXES

1. FACEBOOK

In our website we use the so-called social plug-ins (“plug-ins”) of the social network Facebook, which is owned by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plug-ins are marked with the Facebook logo or with the texts “Social plugin from Facebook” and “Facebook social plugin”. An overview of Facebook plugins and what they look like can be found at: https://developers.facebook.com/docs/plugins.

When you open a page on our website that contains such a social plug-in, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted from Facebook directly to your browser and is embedded in the page. Through this embedding, Facebook receives information that your browser has called up the relevant page of our website, even if you do not have a Facebook account or are not logged in. Your browser will send this information (including your IP address) directly to a Facebook server in the United States and it will be stored there.

If you are logged in to Facebook, the social network can add your visit to our site to your account on it. When you interact with plug-ins, such as using the Like button or leaving a comment, this information will also be sent directly to a Facebook server and stored there. In addition, the information will be posted to your Facebook account and your friends will have access to it.

Facebook may use this information for the purposes of advertising, market research and custom design of social media pages. In addition, Facebook will create profiles of usage, interests, and links to evaluate, for example, your use of our site in connection with the ads you display on Facebook, to inform other Facebook users of your activity on our website, and to provide additional services related to the use of Facebook. If you do not want Facebook to associate the collected data for our website with your account, you must log out of your account before visiting our website.

Information about the purpose and scope of data collection and further processing and use by Facebook, as well as your related rights and settings to protect your privacy, can be found on the instructions page for the protection of personal data by Facebook, located at: http://www.facebook.com/policy.php.

If you do not want Facebook to link the collected data about our website directly to your account, you must log out of your social network page before visiting our website. You can also completely disable the loading of Facebook plug-ins by using browser utilities, such as Facebook Blocker (https://www.comparitech.com/blog/vpn-privacy/stop-facebook-tracking/).

2. TWITTER EXTENSIONS (eg TWITTER POST BUTTON)

On our website we use the so-called social plug-ins (“plug-ins”) of the Twitter service, which is owned by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The plugins are marked with the Twitter logo in the form of a blue bird. An overview of Twitter plugins and what they look like can be found at: https://dev.twitter.com/web/tweet-button.

When you open a page on our website that contains such a social plug-in, your browser establishes a direct connection to Twitter’s servers. The content of the plugin is transmitted from Twitter directly to your browser and is embedded in the page. Through this embedding, Twitter receives information that your browser has called up the relevant page of our website, even if you do not have a Twitter account or are not logged in. Your browser will send this information (including your IP address) directly to a Twitter server in the United States and it will be stored there. If you are logged in to Twitter, the service may add your visit to our website directly to your account on the platform. When you interact with plugins, such as using the publish button, this information will also be sent directly to a Twitter server and stored there. In addition, the information will be posted to your Twitter account and displayed to your contacts there.

Information on the purpose and scope of the data collection and further processing and use by Twitter, as well as your related rights and settings to protect your privacy, can be found on the instructions page for the protection of personal data by Twitter, located at: https://twitter.com/privacy.

If you do not want Twitter to link the collected data about our website directly to your account, you must sign out of our Twitter page before visiting our website. You can also completely disable the loading of Twitter plug-ins by using browser utilities, such as “NoScript” (http://noscript.net/).

3. GOOGLE + EXTENSIONS (EXPECT BUTTON +1)

On our website we use the so-called social plug-ins (“plug-ins”) of the social network Google+, which is owned by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Plug-ins are, for example, the “+1” buttons on a white or colored background. An overview of Google plug-ins and what they look like can be found at: https://developers.google.com/+/plugins.

When you open a page on our website that contains such a social plug-in, your browser connects directly to Google’s servers. The content of the plugin is transmitted by Google directly to your browser and embedded in the page. Through this embedding, Google receives information that your browser has called up the relevant page of our website, even if you do not have a Google+ account or are not signed in. Your browser will send this information (including your IP address) directly to a Google server in the United States, and it will be stored there. If you’re signed in to Google+, the service can add your visit to our site directly to your platform account. When you interact with plug-ins, such as using the +1 button, the relevant information will also be sent directly to a Google server and stored there. In addition, the information will be published on Google+ and displayed to your contacts. Information about the purpose and scope of the data collection and further processing and use by Google, as well as your associated rights and settings to protect your privacy, can be found on the instructions page for Google’s privacy policy, located at: http://www.google.com/intl/de/+/policy/+1button.html.

If you do not want Google to link the collected data for our website directly to your Google+ account, you must sign out of our social network page before visiting our website. You can also completely disable the loading of Google plug-ins by using browser utilities, such as “NoScript” (http://noscript.net/).