Privacy Policy

Taking care of your personal data is fundamental to us. We respect the right to privacy.

In connection with the provision of our services and the performance of our activities, HB HOLIDAY Ltd /HOTEL ATMOSPHERE/ processes the personal data of its guests as a data controller, as well as the personal data of other individuals specified below, in accordance with the rules and principles outlined in this Policy.

HB HOLIDAY LTD is a company with UIC 203631688, VAT number: BG203631688, with registered office and address of management in the village of Radinovo 4204, industrial zone, and correspondence address: Pavel Banya 6155, Hotel ATMOSFERA, tel.: +359 888 607060, e-mail: marketing@hotel-atmosphere.com. tel.: +359 888 607060, e-mail: marketing@hotel-atmosphere.com.

HB Holiday Ltd. as a personal data controller and hereinafter referred to as the “Controller” collects and processes certain information about individuals.

This information may relate to employees, managers, customers and guests of Hotel Atmosphere, suppliers, contractors, business contacts and other individuals with whom the Controller has a relation or wishes to establish business contact.

This privacy policy governs how personal data is collected, processed and stored to meet the standards within the Controller’s organisation and to comply with legal requirements.

This privacy policy is issued on the basis of the Data Protection Act and REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC General Data Protection Regulation (“GDPR” or GDPR).

What is meant by 'personal data' and 'processing of personal data'?

“Personal data” is any information that can be used to identify a natural person directly or indirectly by one or more characteristics specific to that person, such as: name, identification number/personal identification number, contact details – location/postal address, telephone number, email address, online identifier/IP address, images from video recordings, etc. These characteristics may be part of the physical, physiological, genetic, psychological, mental, economic, cultural, or social identity of the natural person.

“Processing of personal data” means the set of acts performed on personal data or a set of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Our treatment on your personal data

Hotel Atmosfera attaches great importance to the protection of personal data and collects and processes personal data only in compliance with the requirements of local and European legislation. The purpose of this Privacy Policy is to inform you about how we process your data and what personal data we may collect about you, for what purpose, for how long, and what your rights are.

The security of the data you entrust to us is very important to us. Therefore, we protect your data by implementing all appropriate technical and organisational means that are adequate to the possible risks to the rights and freedoms of natural persons in order to prevent unauthorised access, unauthorised or malicious use, loss or premature deletion of information.

What information do we collect and why?

We may collect personal information about you when you use https://hotel-atmosphere.com /our website/ or select our services. In most cases we require your personal data for the purpose of entering into a contract, to comply with a legal obligation or to protect our legitimate interest. In certain cases, we process data based on your consent.

Depending on the services you use, we may collect and process the following information about you:

  • Person’s name, unique citizenship number (for the purposes of registering with the hotel and issuing an invoice, if requested);
  • Contact details – contact address, telephone number and electronic address (email).

Principles that guide us and we follow

We strictly adhere to the basic principles established as mandatory in the processing of personal data:

  • Personal data is processed lawfully, fairly and transparently;
  • Personal data shall be collected for specified, explicit and legitimate purposes and shall not be further processed in a manner incompatible with those purposes;
  • The personal data shall be appropriate, relevant and limited to what is necessary in relation to the purposes for which it is processed;
  • Personal data is accurate and kept up to date where necessary;
  • Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
  • Personal data shall be processed in a manner that ensures an adequate level of security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, implementing appropriate technical and organisational measures.

We process the personal data we collect most frequently for the following purposes:

  • At the conclusion and execution of a contract – for the registration of the guest at the hotel, the preparation of accounting documents such as a bill or invoice for the services provided to you; for the purpose of notifications related to our services;
  • In the performance of a legal obligation – for the purpose of obligations provided for in the Tourism Act, the Accounting Act and the Tax and Social Security Procedural Code and other related regulations, in connection with the keeping of proper and lawful accounts; in obligations to provide information to all state commissions and regulatory bodies, as well as a court of law; in the performance of obligations in connection with online bookings (distance selling) and off-site sales;
  • With your consent – for direct marketing of our products and services.

What are your rights?

When collecting and processing your personal data, you have the right to:

  • Information about the processing of your personal data and access to the personal data collected about you;
  • Correction / completion if the data is incorrect / incomplete – on your initiative or on the initiative of the Atmosphere Hotel;
  • Deletion of personal data, if there are legal grounds for this;
  • Restriction of the processing of your personal data by Hotel Atmosphere, if there are legal grounds for this;
  • Portability of personal data between controllers – this right allows you to receive your data from Atmosphere Hotel and transfer it to another controller in a usable format;
  • Object to the processing of your personal data where there are lawful grounds for doing so;
  • The right to a judicial or administrative remedy if your rights have been violated;
  • You can protect your rights by writing to us at: marketing@hotel-atmosphere.com or at the following address: Pavel Banya 6155, Hotel Atmosfera;
  • Your personal data is stored with us in accordance with the purpose for which it was collected and for the statutory required period.

When can we disclose your personal data?

We implement a range of measures to protect your personal data from loss, theft and misuse, as well as from unauthorized access, disclosure, alteration or destruction.

We do not disclose your personal data to third parties until we are satisfied that all technical and organizational measures have been taken to protect that data, and we endeavor to implement strict controls to fulfil this purpose.

Some of the recipients of personal data may be: courier companies, external consultants and specialists, collection companies and law firms, banks, security companies, sales agents and representatives, etc.

Your personal data may be disclosed in circumstances specified by the law. For example, your personal data may be disclosed to third parties with your explicit consent or with the permission of the Data Protection Commission. The provision of personal data is in some cases mandatory in order to comply with our legal requirements, such as: Regulatory authorities, including state commissions, institutions and agencies, NRA, NSSI, courts, prosecutor’s office, and others to whom we are obliged to provide personal data under applicable law. Your personal data may, where necessary or appropriate, be provided for national security purposes or where issues of public importance arise.

Security

Hotel Atmosphere takes precautions to keep your personal information secure from accidental loss and unauthorized access, use, alteration, or disclosure. Policies and processes are in place to prevent information loss, misuse, and unauthorized disclosure. In addition, we implement additional information security measures, such as access controls, strong physical security, and effective information collection, storage, and processing methods.

On the other hand, we implement technical measures such as encryption, pseudonymisation and anonymisation of the collected personal data.

When do we delete your personal data?

We retain all information we have collected about you and destroy it within the statutory time limits and, if none, within the time limits set by us after final settlement of all our financial dealings. We do not keep your data indefinitely.

Transfer between countries

The transfer, storage and processing of personal data is secured by modern technical means. Hotel Atmosphere will not transfer your data outside the EEA without complying with legal possibilities, and will put in place appropriate safeguards to keep your information confidential.

Destruction

At the end of the retention period, the data shall be destroyed as soon as possible by destroying the paper media by shredding, and the technical media by deleting and erasing the relevant files from the Company’s computers and systems.

Changes to this Privacy Policy

This procedure for protecting personal information may be modified over time. Such changes will be effective immediately upon their disclosure. Regularly reviewing this page ensures that you will always be aware of what information we collect, how and for what purposes Atmosphere Hotel uses it, and under what circumstances /if any/ we will share it with other parties.