Privacy Policy

NOTIFICATION OF CONFIDENTIAL TREATMENT OF PERSONAL DATA

When you use the services of NIKI-2004 Ltd, you entrust us with your personal information. This privacy notice is designed to help you understand what data we collect, why we collect it and what we do with it. This is important and we hope you will take the time to read the information carefully.

If you have any questions about privacy, you can contact us by sending us a request to the following email – svetinikolakavatsite@gmail.com

What is personal data?

Pursuant to Article 4 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 20169 (GDPR), personal data is defined as:

“Any information relating to an identified natural person or an identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person’.

Why does NIKI-2004 EOOD collect and store personal data?

NIKI-2004 EOOD collects and stores your personal data when concluding and executing contracts for the purchase and sale of goods with customers on our e- magazine www.

(a) individuals visiting the Website (Website);

(b) individuals who make reservations on their own behalf or on behalf another individual or entity through the Website;

(c) natural persons using the services provided by GRAND HOTEL MILE-NIUM SOFIA, including but not limited to hotel accommodation services, restaurant and related services, provision of premises for organizing conferences and other events, etc.as well as natural persons representing or otherwise acting on behalf of legal entities using these services;

(d) natural persons who, on their own behalf or on behalf of another person whom they represent, have made inquiries (including, but not limited to, by , fax, call, etc.), requests, signals, complaints or other correspondence to GRAND HOTEL MILE-NIUM SOFIA;

(e) individuals whose information is contained in enquiries (including by ), requests, signals, complaints or other correspondence

NIKI-2004 EOOD also collects your personal data for financial and accounting activities in accordance with the provisions of the Accounting Act, the Value Added Tax Act, the VAT Act and other applicable regulations;

They are used to correspond with you or to provide you with you have requested, for identification, marketing activities or advertising.

We ensure that the information we collect and use is necessary for any of the above purposes and is not for the purpose of invading your privacy or personal space.

For the purpose of communication with advertising and marketing intentions, NIKI-2004 Ltd will ask for your explicit consent to receive them.

What categories of personal data do we collect and process?

We collect and process the following personal data: contact information; information relating to your booking, stay or visit; information relating to the purchase and receipt of products or services; personal characteristics, nationality, passport number and date and place of issue; payment information, guest preferences; communication and branding preferences; information, other information you choose to provide to us or we may obtain about you. This data is necessary for us to contact you at any time if this is necessary for the successful, qualitative and timely execution of the concluded contract, as well as to respond to your inquiries.

In order to prepare your personalised advertisements, to provide remarketing and to measure results, we also collect and process your IP address.

We receive your personal data, as our customers, online or offline, on the of your voluntary consent, on the basis of a contract concluded between us or under statutory provisions.

When registering at our establishment, we collect additional personal data required under the Tourism Act. We also use a video surveillance system and with sound or video recording to ensure the protection of our guests, employees and visitors to the facility where permitted by law. There is also video recording with sound at the reception desk. This filming (surveillance) is done for the safety and security of our guests only, in the public areas of the hotel only (and not in your room), and you should be informed that the filming does not concern the processing and storage of personal data and is not done for such a purpose, and the recordings are deleted within the statutory period.

Where we have received your enquiry via one of our contact forms, we will use the contact details provided to contact you and provide you with the information or assistance you require.

If you choose to participate in activities or offerings on social networks organized by NIKI-2004 Ltd, we, as a co-controller of personal data with the social networks in question, may receive certain information from your social network account in accordance with your settings on the social network service, such as location, registrations, activities, interests, photos, status updates and friends list. We may also provide you with the opportunity to participate in photo contests, such as photos taken during your stay with us, which you can share with your social networking contacts for evaluation with voting, shared suggestions or other promotions. The photos in question are not processed by us in the hypoethesis of personal data and should not be considered as such.

What types of cookies does the NIKI-2004 Ltd website use?

We use our own and third-party cookies to manage site content, tailor ads, measure results and analyze traffic. Learn more about our Cookie Policy.

The personal data we collect will only be used for one or any of the following purposes:

• To provide information requested by you
• Marketing and/or promotional information;
• Creating custom ads, remarketing and measuring results. The basis that gives us the right to process your data is:

The basis that gives us the right to process your data is:

your ; the performance of a contract with you or our intention to enter into a contract; the processing is necessary to comply with our legal obligation or to protect your interests or the interests of another person or to protect our legitimate interes

The following organisations may receive your personal data from us, only where necessary:

• The banking institution with which we are working on the execution of the concluded contract for the purchase and sale;
• The lawyer we work with.
• The accounting firm that serves us;

Social networks

Your access to social networks such as Facebook, Instagram, Google, YouTube, Twitter and others requires separate registration and acceptance of the terms and conditions of these sites. NIKI-2004 Ltd is not responsible for the protection of your personal data upon acceptance of these terms and conditions. Please read the terms and conditions of these sites in detail.

Consent:

By agreeing to accept this Privacy Notice, you give us permission to process your personal data for one or more of the purposes we have specified.

Consent is for us to process both types of personal data (ordinary and special), but it needs to be explicit

Where we ask for consent for special (sensitive) personal data, we will always justify why and how this information will be used.

You may withdraw your consent at any by submitting a paper withdrawal of consent to the processing of personal data, and a form for such withdrawal will
will be provided to you in a timely manner, upon your request on site or by written request to
svetinikolakavatsite@gmail.com

Transfer of personal data to a non-EU country or international organisation

NIKI-2004 does not intend to transmit your personal data to third parties without first informing you and obtaining your consent. Data may only be transferred outside the EU to companies that have signed the Privacy Shield.

Data retention period:

NIKI-2004 EOOD will store your personal data in the following way: on paper and/or online in its information infrastructure, for the following period of time: 5 years.

Your rights as a data subject are as follows:

At any time while we are storing or processing your personal data, you, as the subject, have the following rights, which you can exercise by informing us svetinikolakavatsite@gmail.com :

• You have the right to request a copy of your personal data from NIKI-2004 and the right to access your personal data at any time;
• You have the right to request from NIKI-2004 your personal data in a form convenient for transfer to another data controller, or to request that we do so without being prevented from doing so by us;
  
  
• You have the right to ask NIKI-2004 to correct, without undue delay, your inaccurate personal data as well as data that are no longer up-to-date;
• You have the right to ask NIKI-2004 to delete your personal data without undue delay on any of the following grounds:

– the personal data are no longer necessary for the purposes for which they were collected;

– when you have withdrawn your consent;

– where you have objected to the processing,

– where the processing is unlawful;

where the personal data must be erased in order to comply with a legal obligation under EU or Member State law that applies to us as a data controller;

– where the personal data have been collected in connection with the provision of services to the information society.

• We have the right to refuse to delete your personal data for the following reasons:

– in the exercise of the right to freedom of expression and the right to information;

– to comply with a legal obligation on our part or to carry out a task of public interest,

– in the exercise of any official authority vested in us by you;

– for public health reasons;

– for archiving purposes in the public interest, for statistical purposes in so far as erasure is likely to render impossible or seriously impede the achievement of the purposes of such processing;

– or for the establishment, exercise or defence of legal claims.

• You have the right to ask NIKI-2004 Ltd. to restrict the processing of your personal data, in which case the data will only be stored but not processed. Our refusal to restrict will only be expressly in writing, and we are obliged to justify it with the lawful reason;
• You have the right to withdraw your consent to the processing of your personal data at any time with a separate request addressed to NIKI-2004 Ltd. You have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);
• You have the right to object to automated processing, including profiling;
• You have the right not to be subject to a decision based solely on automated processing involving profiling;
• If we need to use your personal data for a new purpose that is not covered this Privacy Notice, we will provide you with a new notice and, where and when necessary, require your prior consent to the new processing.

You have the right to complain to the supervisory authority:

You have the right to file a complaint directly with the , as such for NCI-2004 appears:

Data Protection Commission

Address: 1592 Sofia Blvd. “Prof. №2

Website: www.cpdp.bg

In case you wish to lodge a complaint regarding the processing of your personal data by NIKI-2004 Ltd, you may do so at the contact details of NIKI-2004 Ltd or directly to the Data Protection Officer at the contact details below.

Voluntary settlement policy:

It is our policy to voluntarily settle any disputes that arise in relation to the processing of your personal data and for this we would welcome it you would first contact our Protection Officer before making a complaint directly to the supervisory authority.

How do we use your personal data?

In this privacy notice, we detail the purposes and reasons for collecting and processing your personal data, including cookies.

We will not sell your personal data to third parties, nor will we pass it on in order to gain any benefit.

NIKI-2004 may, if , transfer your personal data our sub-service providers who have entered into a proper contract with us.

All third parties who may receive your data are obliged by us to keep your data secure and to use it only to fulfil their to us. When they no longer need data to fulfil these obligations, they will have detailed instructions for its destruction in accordance with the procedures established and in force at NIKI-2004 Ltd.

Where we need to transfer special personal data to a third party, we will only do so after we have obtained your consent (there will only be an exception if we are required to do otherwise by law).

Recipients of your data may also be state , such as the NRA, the National Social Security Institute, to which we submit them under specific and clear legal obligations.

How will we store and protect your personal data that we collect?

NIKI-2004 EOOD will process (collect, store and use) the information provided by you in a manner compatible with the requirements of the General Data Protection Regulation GDPR and the Personal Data Protection Act in force in the country. We will strive to keep the information accurate and up-to-date.

We will not retain information about you longer than reasonably necessary to fulfill the specific purposes for which it was collected and for which you are notified here.

Some of the retention periods depend on legal obligations to keep documents and information for certain minimum periods, such as the Accounting Act or the Laundering Act. We will take all foreseeable technical and organisational measures to ensure that your data is protected from unauthorised access, such as encryption, anonymisation, masking and deletion after the retention period has expired.

How can you find out what personal data we have about you and how we process it?

NIKI-2004 EOOD will, upon your request, answer you what personal data we store and how we process it.

NIKI-2004 EOOD will, upon your request, answer what information we have about you, how we store and process it. In case we have your personal data, you can request the following information:

• Contact details of the organisation that processes or on whose behalf your data is processed.
• Contact details of the Protection Officer. The purposes of the processing;
• The legal basis for the processing;
• The relevant categories of personal data ;
• The recipients or categories of recipients to whom disclosure has been or will be made;
• The recipients or categories of recipients to whom disclosure has been or will be made;
• If the processing is based on the legitimate interests of NIKI-2004 Ltd or a third party, information about these interests.
• The intended period for which the personal data will be stored;
• Details of your rights to request rectification or erasure of personal data or restriction of processing of personal data, and to object to such processing;
• Information about your right to withdraw your consent at any ;
• Details of your right to complain to a supervisory authority;
• Information as to whether the provision of personal data is a mandatory or contractual requirement or a requirement necessary for the conclusion of a contract, and whether or not you are obliged to provide the personal data and the possible consequences of failing to provide such data.
• The source from which your personal data was collected, in where it was not collected directly from you.
• Any details and information about the existence of automated , such as profiling, and any meaningful information about the underlying logic of these operations, as well as the significance and expected consequences of this processing.

How can you access your data that we process?

You need to make a request directly to the contact details of the Data Protection Officer.

To authenticate your identity, you will to: provide your three names and email address, and confirm your identity by clicking the link we will send to your email address to communicate with us.

Location:

Country: Republic of Republic of Bulgaria

Address. Sozopol, ul. 124 №8

Phone: +359 (0) 877 08 94 73

Email: svetinikolakavatsite@gmail.com

Website: https://sveti-nikola-kavatsite.com/

Contact details of the Data Protection Officer:

You can contact our Data Protection Officer directly here:

Email: svetinikolakavatsite@gmail.com

Phone: +359 (0) 877 08 94 73