Data protection policy
I. SUBJECT OF DATA PROTECTIONThe subject of data protection is personal data. Data is personal if it can be attributed to an identified or identifiable natural person. This includes information such as names, addresses, email addresses and telephone numbers.
II. COLLECTION, PROCESSING AND USE OF PERSONAL DATA ON REQUEST
The use of our website is generally possible without providing personal data. You are under no obligation to visit this site or provide any personal information. If you do not provide us with personal information, you may not be able to use certain features of this website. Otherwise, there will be no consequences for you. The collection of personal data from users on our website is always carried out on a voluntary basis, except as described below. We would like to point out that data transmissions over the Internet (eg communications by email) may have security gaps. Complete protection of data from access by third parties is not possible.
We collect, process and use your personal data that you provided to us when making a reservation or registering an account in our personal account, to the extent necessary in each particular case, for the following purposes:
1. Registration and execution of the contract
- Data you provide when setting up an account, such as your name, email address, phone number, mobile number, address and details that will be provided depending on the service you use
- We collect, process and use transaction data relating to your activity on the Websites (e.g. purchases, content you create or that relates to your account)
- Billing and other information you provide for your purchase
- Data collected in the context of reviews, chats and correspondence on the website or via email, fax and message
- Other personal information we may ask you to provide for specific purposes
- If you voluntarily provide us with additional personal data during registration, these data will also be used to implement the use relationship.
2. Contact institution
If you provide us with personal data to communicate with us, this data will be used by us as necessary for the purposes of the relevant communication.
3. Marketing and public opinion research
3.1 Audioguide Bulgaria may process and use your personal data for marketing and public opinion research purposes, for example, to send general information or promotional emails (newsletter) based on the declaration of consent you have provided. You may revoke the declarations of consent provided to us in this regard at any time with effect for the future.
3.2 In addition, if you are already our customer, we may send promotional emails regarding products similar to those you have already booked, based on Audioguide Bulgaria's legitimate interest. You may opt out of receiving these emails at the time of booking or at any time thereafter.
3.3 If you wish to withdraw your consent to receive emails from us (3.1) or opt-out (3.2), simply write to us at the following address: email@example.com In this case, you will no longer receive from us such communications by email (after a short period during which your withdrawal or refusal will be technically processed).
Exercising your right to withdraw consent, refuse or object to the use of your data for marketing purposes is free of charge.
4. Information you provide to payment processors
All payments made are processed by our contracted payment processing service that complies with PCI/DSS requirements (these are Payment Card Industry Security Standards). All information collected by these third party providers for the purpose of processing your payments is not available to us unless you have otherwise provided that information to us in connection with your use of the Websites or our products and services.
5. Aggregate information
We may share your information with affiliated and unaffiliated third parties on an anonymous, aggregate basis. Although this information will not personally identify you, in some cases these third parties may be able to combine this aggregate information with other information they have about you or that they receive from third parties in a manner that allows them to identify you personally.
III. DATA PROCESSING FOR USE OF THE WEBSITE
When you visit our website, we collect the necessary data to enable you to use it (usage data). This includes your IP address and details of the start, end and subject of your use of the website, as well as any identification data (for example, your login details when entering a secure area). This data is used to provide and develop the service according to user preferences. This data is always deleted as soon as it is no longer needed and if there are no storage obligations. For information about the processing of pseudonymous usage profiles, see point VI.
V. USES FOR ADVERTISING AND MARKET RESEARCH (WEB TRACKING AND ANALYSIS)
VI. LEGAL BASIS FOR DATA PROCESSING
If you reside within the European Economic Area (EEA), our processing of your personal information will be legitimized as follows:
(i.) Whenever we require your consent for the processing of your personal information such processing will be justified pursuant to Article 6(1) lit. (a) of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This article in the GDPR describes when processing can be done lawfully.
(ii.) If the processing of your personal data is necessary for the performance of a contract between you and Audioguide Bulgaria or for taking any pre-contractual steps upon your request, such processing will be based on GDPR Article 6(1) lit. (b).”). If this data is not processed, Audioguide Bulgaria will not be able to execute the contract with you.
(iii.) Where the processing is necessary for us to comply with a legal obligation, we will process your information on basis of GDPR Article 6(1) lit. (c), for example complying in the fields of employment law.
(iv.) And where the processing is necessary for the purposes of Audioguide Bulgaria's legitimate interests, such processing will be made in accordance with GDPR Article 6(1) lit. (f), for example, to detect fraud.
VII. SOCIAL MEDIA
Our website contains links to social networks (Facebook, Instagram). These social networks are operated exclusively by third parties. If you click on the links, information may be transferred to these third parties. We use the so-called 2-click solution. In general, this means that no personal data will be transmitted if you visit our website.
VIII. TRANSFER TO THIRD PARTIES
Your personal data will only be transferred to third parties if this is permitted by law or if you have given your prior consent. In particular, we will not sell your data to third parties or sell it in any other way. We will only disclose your data to government authorities as part of a legal obligation or as a result of a formal order or court decision. We have committed our employees and partners to secrecy and compliance with data protection regulations.
IX. HOW WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES
Except as provided in this Privacy Statement or as specifically agreed to by you, we will not disclose personal information we collect from you to third parties unless we are required to share that information to fulfill your request or for legitimate business purposes . Audioguide Bulgaria shares personal information in the following cases:
We may share your information with suppliers or third parties who supply or provide goods and services or otherwise act on behalf of or at the direction of Audioguide Bulgaria. These third parties may include, for example, our third party technology providers, suppliers and partners. These third party service providers will only have access to the information necessary to perform these limited functions on our behalf.
X. DELETION OF DATA
We retain the data for the duration of your business relationship with us and as otherwise required by applicable law. Personal data will be stored for no longer than is necessary for the purposes of processing your personal data. We will retain your personal data for as long as you have a member account or as long as you require our services so that we can provide those services to you.
If you are located in the European Economic Area, when you withdraw your consent to the processing of your personal data, all personal data received and stored about you will be deleted unless we no longer need it. Unless we are required by law to retain that personal data or to comply with our regulatory obligations. In such a case, we will only store this personal data for as long as necessary.
XI. DATA SECURITY
Audioguide Bulgaria has taken the necessary technical and organizational measures to protect the personal data you provide from loss, destruction, manipulation and unauthorized access. Our employees and all persons involved in data processing are required to comply with data protection laws and respect the confidentiality of personal data. Our employees have undergone appropriate training. Both internal and external audits ensure compliance with all data protection processes at Audioguide Bulgaria.
XII. EUROPEAN UNION DATA SUBJECT RIGHTS
The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights for data subjects. If you wish to confirm that Audioguide Bulgaria is processing your personal data, or to have access to the personal data Audioguide Bulgaria may have about you, or have other questions, please contact us via firstname.lastname@example.org
You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Audioguide Bulgaria might have received the data from us; what the source of the information was (if you did not provide it directly to Audioguide Bulgaria); where the personal data is stored and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by us if it is inaccurate. You may request that we erase that data or cease processing it, subject to certain exceptions. You may also ask us for your personal data to be supplemented or updated, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. You may withdraw your consent for the processing of personal data or the further processing of personal data by us at any time. You may also request that Audioguide Bulgaria ceases using your data for direct marketing purposes. In many countries (including EEA countries), you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Audioguide Bulgaria processes your personal data. When technically feasible, we will—at your request—provide your personal data to you or transmit it directly to another controller. You have the right to receive your personal information in a structured and standard format.
In addition to the information contained in this Privacy Statement, you may be provided with additional and contextual information concerning particular services or the collection and processing of your personal data upon request.
XIII. HOW TO CONTACT US?
Audioguide Bulgaria Ltd
Bulgaria, Sofia st. "Korab Planina"
Phone: +359 888 975 886
Or by email: email@example.com
XIV. CHANGES TO THIS PRIVACY STATEMENT
We may need to update or change this Privacy Statement from time to time to reflect changes in our business practices, data collection practices, or organization. We reserve the right to change this Privacy Statement at any time and for any reason without prior notice, except by posting the revised Privacy Statement on our website or, if you have provided us with your email address, by sending you an email with notice of the revised Privacy Statement. It is strongly recommended that you check the Website frequently, referring to the last modified date indicated at the top. We will not limit your rights under this Privacy Statement without your express and informed consent. If you do not agree to the changes, you should stop using the Website and stop providing us with personal information before the modified Privacy Statement becomes effective. If you continue to use the Website or provide personal information after the revised Privacy Statement becomes effective, you will be bound by the revised Privacy Statement.