Paradise Apartments

PRIVACY POLICY

Data Processor Information

"MDG Properties" Ltd. is a company registered under the Commercial Law of the Republic of Bulgaria with UIC 207550212, with registered address: Pleven, Danail Popov No. 1, Entr. A, Fl. 2, Apt. 4, telephone: +359877191912, email address: manager@paradise-apartments.eu

1. Bases and Purposes for Which We Use Your Personal Data

We process your personal data on the following grounds:

  • For the purposes of providing the services related to the reservation and stay at the properties offered by MDG Properties (Paradise Apartments);
  • Based on the requirements of the law, particularly the Tourism Act, and considering the need to process personal data in connection with the retention and payment of the tourist tax in accordance with the legislation of the Republic of Bulgaria;
  • For analysing user behavior on the website for which we collect only anonymised data.

In the following paragraphs, you will find detailed information regarding the processing of your personal data depending on the basis on which we process it.

2. For the purpose of using the accommodation service at Paradise Apartments

To provide you with the services that are subject to the general conditions of "MDG Properties" Ltd., namely short-term accommodation services, it is necessary for you and each Guest to collect personal data to establish identity, age, citizenship, address, and contact details.

3. Purposes of processing:
  • Establishing your identity;
  • Communication related to reservations and stays at Paradise Apartments;
  • Billing;
  • Establishing and/or preventing unlawful actions or actions contrary to our terms
4. Data we process on this basis:

On this basis, we process only data necessary for the use of the server, namely:

  • Identification data;
  • Correspondence related to the overall service - email, letters, information about your requests for troubleshooting, complaints, requests, feedback we receive from you;
  • Other information such as:
    • IP address when visiting our website;
    • Demographic data;
    • Social media profile data;
    • Information from your actions on the site

The processing of the specified personal data is mandatory for us to be able to conclude and fulfil the contract with you. Without providing the above data, we would not be able to fulfil our contractual obligations.

5. Providing Personal Data to Third Parties

It is possible that we provide your personal data to third parties – subcontractors including courier service providers for the needs of delivery of goods ordered by you or with your explicit consent for the purposes of direct marketing.

6. When We Delete the Data Collected on This Basis

Data collected on this basis are deleted 2 years after the termination of the contractual relationship, regardless of whether it is due to the expiration of the contract term, dissolution, or other reasons.

7. Based on Legal Requirements

On a legal basis, we are obliged to collect from you data necessary for the retention and payment of the tourist tax according to the provisions of the Tourism Act.

On this basis, we collect from you the following data:

  • Identification data including names, citizenship, personal identification number, address;
  • Data from a valid identity document.

The processing of the specified personal data is mandatory for us to be able to meet the requirements of the legislation of the Republic of Bulgaria.

8. Providing Personal Data to Third Parties

Personal data collected for this purpose may be provided only to the relevant state and municipal authorities, as well as to officials exercising powers according to the applicable legislation regarding tourism.

9. When We Delete the Data Collected on This Basis

Data collected on this basis are deleted 5 years after the termination of the contractual relationship, regardless of whether it is due to the expiration of the contract term, dissolution, or other reasons.

10. Use of Third Party Services - Processing Personal Data

MDG Properties, as a personal data administrator, has contractual relations with third parties who, in relation to MDG Properties, have the status of personal data processors. Such persons may be entities providing intermediary services including:

  • Platforms from which a reservation can be made in Paradise Apartments other than the integrated reservation platform on the website of Paradise Apartments.
  • Data processing service providers in connection with making reservations at Paradise Apartments used by "MDG Properties" Ltd.

We have taken sufficient measures to ensure that the data you provide to personal data processors are protected in accordance with this privacy policy.

11. How We Protect Your Personal Data

To ensure adequate protection of the company's data and its clients, we apply all necessary organisational and technical measures provided in the Personal Data Protection Act.

We have established rules to prevent misuse and security breaches, which aids in the processes of preserving and ensuring the security of your data.

For maximum security in the processing, transmission, and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymisation, etc.

12. Rights of Users

Every User of the site enjoys all rights for the protection of personal data according to Bulgarian legislation and the law of the European Union.

The user may exercise their rights by sending a message to our email - manager@paradise-apartments.eu

Every User has the right to:

  • Information (in connection with the processing of their personal data by the administrator);
  • Access to their own personal data;
  • Correction (if the data are inaccurate);
  • Deletion of personal data (right to be forgotten);
  • Restriction of processing by the administrator or the personal data processor;
  • Portability of personal data between individual administrators;
  • Objection to the processing of their personal data;
  • The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
  • The right to judicial or administrative redress in case the rights of the data subject have been violated.

The user may request deletion if one of the following conditions exists:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • The user withdraws their consent on which the data processing is based, and there is no other legal ground for the processing;
  • The user objects to the processing, and there are no overriding legitimate grounds for the processing;
  • The personal data have been unlawfully processed;
  • The personal data must be erased to comply with a legal obligation in Union or Member State law to which the administrator is subject;
  • Съюза или правото на държава членка, което се прилага спрямо администратора;
  • The personal data have been collected in relation to the offer of information society services to children and consent was given by the person holding parental responsibility for the child.

The user has the right to restrict the processing of their personal data by the administrator when:

  • They contest the accuracy of the personal data. In this case, the restriction of processing is for a period enabling the administrator to verify the accuracy of the personal data;
  • The processing is unlawful, but the User does not want the personal data to be erased and instead requests the restriction of their use;
  • The administrator no longer needs the personal data for the purposes of the processing, but the User requires them for the establishment, exercise, or defense of legal claims;
  • They have objected to processing pending the verification whether the legitimate grounds of the administrator override those of the User.

Right to Data Portability

The data subject has the right to receive the personal data concerning them, which they have provided to an administrator, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another administrator without hindrance from the administrator to which the personal data have been provided, when the processing is based on consent or on a contractual obligation and the processing is carried out by automated means. When exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one administrator to another, where technically feasible.

Right to Object

Users have the right to object to the administrator against the processing of their personal data. The personal data administrator is required to cease processing unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims. If objecting to processing personal data for direct marketing purposes, the processing must be ceased immediately.

Complaint to the Supervisory Authority

Every User has the right to lodge a complaint against unlawful processing of their personal data to the Commission for Personal Data Protection or to the competent court.