Privacy policy

The controller of the personal data processed through this website and at the complex is:

• Ovech Resort Complex
• 9260 Asparuhovo
• Bulgaria
• hotelovech@gmail.com
• +359885140108

For the purposes of this policy and in accordance with Regulation (EU) 2016/679:

• Personal data is any information relating to an individual who is identified or can be identified, directly or indirectly, by an identification number or by one or more specific characteristics. The data may relate to facts — such as a name, e-mail address, location or date of birth — or to an opinion about the actions or behaviour of the data subject.
• A data controller is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data.
• Processing of personal data is any operation or set of operations performed on personal data, by automated or other means — collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, provision, updating or combination, blocking, erasure or destruction.

In order to provide and improve our services and to administer them, we store, use and process personal data in accordance with the applicable legal requirements. The types of data we collect differ according to the purpose for which they are collected and the legal basis for processing them.

1. Enquiries and reservations

When you send an enquiry through the contact form on this site, we collect and process:

• the contact person’s first name and surname;
• the contact person’s e-mail address and telephone number.

When you enquire or book by telephone:

• a telephone number for our reply and an e-mail address to confirm the reservation;
• the contact person’s first name and surname.

This data is kept until the reservation has taken place. It is then destroyed and no further processing of it is possible.

2. Accommodating guests

For the purpose of accommodating guests at the complex, we process and store:

• the Bulgarian personal identification number (ЕГН) or the personal number of a foreigner (ЛНЧ);
• the guest’s name — in Cyrillic for Bulgarian citizens and in Latin script for foreign nationals, as it appears in their national document;
• date of birth;
• sex;
• citizenship;
• identity card number or the number of a valid national identity document;
• the country that issued the national document.

This data is collected under Art. 116(2) of the Tourism Act and is required for keeping the register of accommodated tourists. It is stored for a period of 5 calendar years.

3. Weddings, celebrations and corporate events

For the purpose of arranging and holding private or corporate events at the complex, we process and store:

• the two names of the person organising the event — for corporate events, of the contact person named by the organiser;
• the contact person’s e-mail address and telephone number.

This data is stored for up to 3 calendar years after the event has taken place.

When processing personal data we observe the following principles:

• Lawfulness — in collecting, processing and storing your data we comply with the provisions of applicable Bulgarian and European legislation.
• Good faith and transparency — we process data in accordance with this policy, which is available to every visitor to the site.
• Data minimisation — the types of data we collect are kept to the minimum required for the purposes for which they are processed. Those purposes are ones we are legally obliged to fulfil, ones for which we have a contractual relationship, or ones for which we have obtained your consent.
• Storage limitation — we process and store the data we receive for a period of time appropriate to the purposes for which it is needed and consistent with your consent.
• Consent — to use your data for marketing purposes we must obtain your explicit consent.

Please note that when you send us an enquiry — about prices, a reservation, a clarification concerning a reservation already made, holding an event, or any other matter relating to the services we provide — you consent to our storing and processing the personal data you provide for the purposes of that enquiry. In this case your data will be erased in accordance with the applicable regulations and with this policy.

We use electronic methods of processing personal data in order to provide our services accurately and promptly and to assist our guests.

Your personal data is processed in compliance with the applicable data protection legislation. We ensure that the persons we authorise to process personal data have undertaken a commitment of confidentiality or are under a statutory obligation of confidentiality.

We apply technical and organisational security measures to protect the personal data you provide against accidental or unlawful destruction, accidental loss, unauthorised access, alteration or disclosure, as well as other unlawful forms of processing by persons not authorised to do so. The security measures we apply are subject to continuous improvement and adaptation to current technology.

The personal data collected may be provided to partners acting as processors on our behalf, who have undertaken to comply with all applicable data protection rules. That information may be used only within the limits set by the legal basis on which it was collected or by your consent, and is treated as confidential.

We may disclose and provide personal information in accordance with applicable law where a court or administrative authority orders or requires it, or where providing the data is connected with the performance of a legal obligation. The data collected for accommodation purposes is accessible to the third parties designated by the Tourism Act — the Ministry of Tourism, municipalities, the Ministry of the Interior, the National Revenue Agency and the National Statistical Institute.

• In accordance with the applicable regulations you have the right of access to the data you have provided for processing. By written request through the contact form on this site you can obtain information about the type of personal data provided and the purpose of processing it, and you can require us to remove any record of your personal information with no possibility of further processing. Having accessed your data, you may ask for it to be corrected if you find errors or inconsistencies.
• You have the right to object to the processing of your data. An objection is made in the manner described in point 1 above. We undertake to consider it and to inform you of the outcome of our internal review within 30 calendar days of receiving it.
• You have the right to lodge a complaint with the competent supervisory authority. Under the applicable regulations, the competent supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection.
• You have the right to receive the data we hold about you in a structured, commonly used and machine-readable format, and to transfer that data to another controller without hindrance from us — in the case of data provided on the basis of consent, data provided under a contract to which you are a party, or data provided while taking steps towards entering into a contract.

Our personal data protection rules may be amended unilaterally with a view to improving them, offering new services, changing the way we serve and communicate with our guests, and in connection with legislative changes.

When we make changes we will bring them to your attention by publishing them on this site and allowing you a reasonable period to familiarise yourself with them. After that period the changes begin to apply to the processing of your personal data without further notice. If you declare within that period that you reject the changes, you will be deemed to have withdrawn your consent to the processing of your personal data and we will cease processing it in future.

If you have questions about our personal data protection measures and rules, send us a message through the contact form or write to the e-mail address given above.