Source: http://en.spahotelcalista.com/pages/terms-and-privacy
Timestamp: 2020-04-02 14:37:00
Document Index: 692369408

Matched Legal Cases: ['Art. 1', 'Art. 2', 'Art. 3', 'Art. 4', 'Art. 5', 'Art. 6', 'Art. 7', 'Art. 4', 'Art. 8', 'Art. 9', 'Art. 10', 'Art. 12', 'Art. 23', 'Art. 9', 'Art. 10', 'Art. 13', 'Art. 14', 'Art. 15', 'Art. 16', 'Art. 116', 'Art. 18', 'Art. 3', 'Art. 23', 'Art. 22', 'Art. 23', 'Art. 13', 'Art. 14']

Privacy Policy - Calista SPA Hotel ★★★★
Don’t miss our special offer if you are planning to stay in Calista SPA Hotel for more than 3 nights.
Please read carefully the present document. It contains the Privacy Policy for customers of KB Group Ltd (Calista Spa Hotel) and is aimed to explain the practices related to personal data processing in the context of the services provided and activities performed by the hotel.
The Policy is drafted in compliance with the requirements under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Art. 1. In connection with the provision of its services and performance of its activities, KB Group Ltd (Calista Spa Hotel), in its capacity as data controller, processes personal data of its customers – natural persons, as well as personal data of other individuals specified below in compliance with the rules and principles under the present Policy.
Art. 2. KB Group Ltd is a company with UIC 200164286, head office and registered address: Starozagorski bani 6062, Stara Zagora district, Calista Spa Hotel, tel.: +35941112980, email address: office@spahotelcalista.com
Art. 3. (1) In connection with the provided services CALISTA SPA HOTEL processes information regarding the following Data Subjects:
(a) Natural persons visiting the website www.spahotelcalista.com;
(c) Natural persons using the services provided by CALISTA SPA HOTEL, including, but not limited to, hotel accommodation, restaurant and related services, provision of conference and event halls, etc., as well as natural persons representing or acting in another manner on behalf of legal persons using the said services;
(d) Natural persons who, on their own behalf or on behalf of another person, have addressed inquiries (including, but not limited, by email, fax, phone and others), requests, signals, complaints or other correspondence to CALISTA SPA HOTEL;
(e)Natural persons concerning whom information is contained in inquiries, requests, signals, complaints or other correspondence addressed to CALISTA SPA HOTEL (including by phone).
(2) Services provided by CALISTA SPA HOTEL may be ordered only by legally capable persons who are 18 years old or older.
Art. 4. The information (categories of personal data) concerning Data Subjects which is processed by CALISTA SPA HOTEL pursuant to the present Policy may include:
Art. 5. (1) Under the requirements of the applicable legislation, CALISTA SPA HOTEL applies security measures including the following technical and organizational means for access control, for ensuring the physical security against violations on the buildings and sites, and for protection of the life and health of citizens: security guards, alarm systems, a 24-hour video surveillance system of recording and storage devices.
(2) Video surveillance and video recording may be performed in publicly accessible zones and premises in the buildings of CALISTA SPA HOTEL, and in zones and premises with an exclusive access regime. There is no video surveillance in the guest rooms, WCs, recreation rooms, etc. The data of video surveillance activities are stored in a monitoring room with limited access and 24-hour security.
Art. 6. (1) Subject to the Data Subject’s explicit consent, CALISTA SPA HOTEL, respectively other companies related to or partners of CALISTA SPA HOTEL, may process the following personal data: names; telephone number; address; email address; information of the type and number of used and preferred services provided by CALISTA SPA HOTEL, and other data explicitly specified in the respective consent for the purposes of direct marketing, such as offering of goods and services, including goods and/or services offered by other persons, conducting inquiries and polls for the purpose of improving the quality of the services provided, etc., within the scope of the respective consent.
(4) Profiling for the purposes of direct marketing may be carried out only based on the Data Subject’s explicit consent, subject to at least the following additional guarantees for their rights and interests: the right to human intervention by the data controller; the right to express their point of view and the right to challenge the decisions based on profiling. At present, CALISTA SPA HOTEL does not perform such processing of personal data.
Art. 7. CALISTA SPA HOTEL collects, stores, and processes the information described in Art. 4, 5, and 6 above for the purposes provided for in the present Policy and in the General Terms for use of the services provided. Depending on the legal grounds for the processing, those purposes may be:
(a) purposes related to the compliance with legal obligations of CALISTA SPA HOTEL;
(b) purposes related to and/or necessary for the performance of the contracts concluded with CALISTA SPA HOTEL or for taking steps at the request of the Data Subject prior to entering into a contract;
(c) purposes related to the legitimate interest of CALISTA SPA HOTEL and third parties;
Art. 8. The purposes of personal data processing carried out by CALISTA SPA HOTEL related to the compliance with legal requirements include:
7. other activities related to the fulfilment of CALISTA SPA HOTEL legal obligations (tax, accounting, regulatory, licensing, etc.) requiring the provision of information to and cooperation with the competent state and judicial authorities upon performance of inspections.
Art. 9. The purposes of personal data processing carried out by CALISTA SPA HOTEL related to and/or necessary for the performance of contracts or for taking steps at the request of the Data Subject prior to entering into a contract with CALISTA SPA HOTEL include:
Art. 10. The purposes related to the legitimate interests of CALISTA SPA HOTEL and third parties include:
1. Legitimate interest – (1.1.) exercise and protection of the rights and legitimate interests of CALISTA SPA HOTEL; and (1.2.) assistance in the exercise and protection of the rights and legitimate interests of customers; of other persons related to CALISTA SPA HOTEL; of employees of CALISTA SPA HOTEL; of data processors processing personal data on behalf of CALISTA SPA HOTEL; and of business partners of CALISTA SPA HOTEL:
(b) video surveillance and access control ensuring the security of CALISTA SPA HOTEL property, proving the compliance with applicable requirements, ensuring the physical security against violations on the buildings and objects, and protection of the life and health of citizens;
(b) taking actions for suspending the services provision in case of refusal of payment, violations of CALISTA SPA HOTEL established rules and policies, etc.;
(d) collection of debts due to CALISTA SPA HOTEL, including by execution proceedings and/or through assignment to third parties, as well as by transfer of debts to third parties (cessions) following the statutory procedure;
2. Legitimate interest – analysis, planning and improving the quality of services provided by CALISTA SPA HOTEL:
(a) administration and management of the services provided by CALISTA SPA HOTEL;
PROVISION OF PERSONAL DATA AND CONSEQUENCES FROM REFUSAL TO PROVIDE SUCH DATA TO CALISTA SPA HOTEL
Art. 12. (1) CALISTA SPA HOTEL clearly indicates, where applicable and in the appropriate manner, whether the provision of the respective data and/ or documents is mandatory or constitutes a requirement necessary for the conclusion or performance of a contract, as well as the consequences from the refusal to provide such data.
(2) If needed, any Data Subject may request further clarifications at the premises of CALISTA SPA HOTEL or by addressing respective query to the contact details specified in Art. 23 of the present Policy.
(3) Any refusal to provide data and documents indicated as mandatory may prove an impediment to the provision of a service by CALISTA SPA HOTEL, to the satisfaction and execution of submitted requests, applications, signals, etc., which releases CALISTA SPA HOTEL from liability for default.
(4) Any refusal to provide data and documents or any provision of false data may entail failure to provide the respective services or suspension of the access to services provided by CALISTA SPA HOTEL.
(5) Data Subjects shall not provide CALISTA SPA HOTEL with any special categories of data within the meaning of Art. 9 and Art. 10 of the Regulation (namely: personal data revealing racial or ethnic origin, political opinion, religion or philosophical beliefs, trade union membership, genetic data, biometric data, health status, or sexual life or orientation of the natural person; and personal data related to criminal convictions and offences).
Art. 13. (1) In certain cases, the personal data processed by CALISTA SPA HOTEL are not collected and received directly from the Data Subject of the relevant data, but from third parties, such as:
3. Business partners (e.g. booking sites as booking.com; tourist agencies, other persons that provide intermediary services in the context of booking or ordering of other services, etc.) of CALISTA SPA HOTEL;
(2) The persons under Para. 1, items 1-3 shall inform the Data Subjects whose data are provided to CALISTA SPA HOTEL of the fact of the data provision, the purposes and scope of such data provision, shall introduce the Data Subjects to the present Policy, and shall guarantee that they provide the data on valid legal grounds.
Art. 14. (1) For the purposes specified in the present Policy, CALISTA SPA HOTEL may assign data processing activities to third parties – data processors, in compliance with the requirements under the Regulation and the other applicable personal data protection rules.
(2) Where personal data are disclosed to and processed by data processors, such disclosure and processing will be carried out only to the extent and in the amount necessary for the performance of the tasks assigned by CALISTA SPA HOTEL.
(3) Data processors act on behalf of CALISTA SPA HOTEL and are obliged to process personal data only in strict compliance with CALISTA SPA HOTEL’s instructions. Data processors shall not be entitled to use or otherwise process the information for purposes other than for the purposes specified in the present Policy.
Art. 15. CALISTA SPA HOTEL does not disclose personal data concerning the Data Subject to third parties except where:
1. this is necessary for compliance with a legal obligation of CALISTA SPA HOTEL:
2. this is explicitly provided for in the Privacy policy and/or the general terms (the contract) for use of the relevant services, which provided by CALISTA SPA HOTEL:
(a) data processors as assigned by CALISTA SPA HOTEL;
3. this is necessary for the provision of the services of CALISTA SPA HOTEL:
(c) CALISTA SPA HOTEL business partners such as: booking sites; travel agencies and other providers of tourist services or other supportive services such as car rental, taxi and other transport services, etc.
4. the Data Subject has given his/her explicit consent – the persons provided for in the relevant consent (e.g. CALISTA SPA HOTEL related parties, CALISTA SPA HOTEL business partners, etc.);
5. this is necessary to protect the rights and legitimate interests of CALISTA SPA HOTEL, third parties or Data Subject:
Art. 16. (1) CALISTA SPA HOTEL processes and stores information about the Data Subject until achieving the relevant purposes it is collected and processed for.
(2) CALISTA SPA HOTEL, in accordance with its internal rules and procedures, as well as the applicable legislation, processes and stores information about the Data Subject for the periods as follows:
Data relating to the register for accommodated tourists within the meaning of Art. 116 of the Tourism Act, including identification data of the accommodated persons as well as data related to the hotel accommodation In accordance with the procedures and time limits stipulated in the Tourism Act and the relevant regulations
Information relating to requested and used hotel accommodation services, events and restaurant services, including such relating to cancellation of bookings for hotel accommodation (as far as they involve a refund of pre-paid amounts and/or a deduction of amounts due) From making the respective booking/ request up to 5 /five/ years from the provision of the service/ completion of the contract/ cancellation of the booking.
Financial and accounting documents; invoices; authorisation slips; other information related to tax and insurance control. Up to 10 /ten/ years from the beginning of the year following the one in which payment of the amount for the relevant year is due.
Unstructured communication, correspondence, complaints, signals, etc. 5 years
Data relating to the registration of an account in the e-shop on the Website For the entire registration period and up to 5 years after its termination.
System logs. Logs related to security, technical support, etc. (these may contain information such as: date and time, IP address, URL, information about the browser version and device) 1 year
Log of actions relating to requests for account registration or for purchase of goods with or without an account registered on the Website (the information stored may include action/ content of the request, date and time, IP address, etc.) For the entire period of maintaining an account registration on the Website and up to 5 /five/ years after its termination (if applicable)
Data from video recordings 2 months
Data from feedback cards The information from the feedback cards is filled in the internal systems of CALISTA SPA HOTEL in a fully anonymized form (only the feedback, comments and recommendations) without any information regarding the person who has given this feedback. After that the feedback cards are destroyed immediately. Up to 30 days after they have been filled in
Data processed on the grounds of Data Subject’s explicit consent As of the moment of obtaining the consent till its withdrawal by the Data Subject
The personal data referred to in this Policy may also be processed for a longer period than the ones specified above if this is necessary to achieve the objectives set forth therein or to protect the rights and/or legitimate interests (including in legal proceedings) of CALISTA SPA HOTEL or if the current legislation provides for data processing for a longer period.
1. Right of information – to be provided with information on the processing of his/her personal data from CALISTA SPA HOTEL;
5. Right of restriction of personal data processing – to require that CALISTA SPA HOTEL restricts the processing of his/her personal data within the limits provided for the Regulation if there are the grounds for this set forth therein;
6. Right to notify third parties – to require that CALISTA SPA HOTEL notifies the third parties to whom his/her personal data have been disclosed of any rectification, erasure or restriction of the processing of his/her personal data unless this proves impossible or involves disproportionate effort from CALISTA SPA HOTEL;
7. Right of data portability – to receive the personal data concerning him/her and which he/she has provided, in a structured, commonly used, machine-readable format, as well as to have the right to transmit such data to another controller without any hindrance from CALISTA SPA HOTEL.
The Data Subject shall have the right to have the personal data transmitted directly from CALISTA SPA HOTEL to another controller, where technically feasible. The right of data portability shall be exercised in a manner which does not adversely affect the rights and freedoms of other persons.
8. Rights with regard to automated decision-making, including profiling – not to be subject to an automated decision which is based solely on automated processing (i.е. processing without human intervention), including profiling within the meaning of the Regulation which produces legal effects for the Data Subject or similarly significantly affects him/her, unless there are grounds for this as set forth in the Regulation as well as suitable measures to safeguard the Data Subject’s rights and freedoms and legitimate interests. Such measure shall at least include the right to obtain human intervention on the part of CALISTA SPA HOTEL, the right of the Data Subject to express his/her point of view and to contest the decision.
If such a decision, including profiling has been made with regard to the Data Subject, the latter shall be entitled to and shall separately be provided by CALISTA SPA HOTEL with meaningful information about the logic involved, the significance and the envisaged consequences of such processing for him/her, as well as how to exercise the rights under this item.
Art. 18. The Data Subject shall have the right to object, on grounds relating to his/her particular situation, at any time to processing of personal data concerning him/her, including profiling within the meaning of the Regulation, based on public interest, exercise of official authority and the legitimate interests of CALISTA SPA HOTEL or a third party. In these cases, CALISTA SPA HOTEL shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or where necessary for establishing, exercising or defending legal claims.
(2) The request under Para 1 may also be exercised via electronic means, and for this purpose the same shall be signed by the Data Subject with a qualified electronic signature within the meaning of the Electronic Document and Electronic Certification Services Act and Art. 3 (12) of Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC; which is to be sent to CALISTA SPA HOTEL at the electronic address referred to in Art. 23 of this Policy.
Art. 22. The scope of the rights of the Data Subjects as well as the obligations of CALISTA SPA HOTEL in relation to these rights may be restricted by way of a legislative measure under Union or Member State law to which CALISTA SPA HOTEL is subject.
Art. 23. The Data Subject may seek clarifications regarding the content, the grounds and the way of exercising his/her rights under this Policy, as well as any additional information regarding his/her rights regarding the processing of personal data by CALISTA SPA HOTEL on the following contacts:
Address: Starozagorski bani 6062, Stara Zagora district, Calista Spa Hotel
Telephone: +35941112980
This Privacy Policy has been drafted by KB Group Ltd (CALISTA SPA HOTEL) in its capacity as data controller to fulfill its obligations to provide information to the data subjects under Art. 13 and Art. 14 of Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).