AT PERSONAL DATA В Kashmir Wellness&Spa Hotel
Last Update: 01.05.2023г.
This Security and Privacy Policy ("Security Policy") applies to Kashmir Wellness&Spa Hotel. Kashmir Wellness&Spa Hotel (referred to herein as "we" and "us") is responsibly committed to protecting your personal data and we want you to be aware of what categories of data Kashmir Wellness&Spa Hotel collects and processes about you, for what purpose, on what basis, for how long, to whom it might transfer it and how it stores it.
Please note that by using this website (Site) or its mobile version, you consent to all actions taken by us with respect to your personal information as described in this Security Policy. If you are not
agree to the terms of this Policy, please do not use the Site or provide personal information to Kashmir Wellness & Spa Hotel through our Site or otherwise.
At Kashmir Wellness & Spa Hotel, we strive to provide our customers with exceptional products, services and a top class experience. We give high priority to our business, but above it we always place Loyalty and Respect for our customers. We fully understand the importance of privacy and protecting everyone's privacy. That is why we have drafted this Policy For security и protection at in person data in Kashmir Wellness & Spa Hotel to make public and transparent our procedures for processing personal data we collect from or about you at our hotel, on this website or through our applications, through written or verbal communication with us when you visit
any of our sites or from other sources.
Please note that this Security Policy does not apply to the way we process personal data on behalf of or under the instructions of third parties, such as travel agents, airlines, car rental companies and other service providers, companies that organise or offer package travel services, marketing partners or corporate clients.
CONSENT TO THIS DATA PROTECTION POLICY AT Kashmir Wellness & Spa Hotel
"Personal data" means :
- any information relating to an identified natural person or an identifiable natural person ('data subject'); a natural person who may be an identified person is a person who can be identified, directly or indirectly, in particular by an identifier such as a name, an identification number, location data, an online identifier or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- or, in a nutshell, personal data, is any information or data that relates to you or can "lead" to you. For example - personal data is undoubtedly your three names in combination with your ID number. But personal data is also, for example, the details of the payment tools you use, which combined with additional information - places you have paid at can reveal a lot about you. That's how, and without your name or photo explicitly stated, the "traces" your data leaves can reveal your interests, your property, your routes, etc.
At Kashmir Wellness&Spa Hotel, we are well aware of the challenges faced in protecting the privacy of our customers and we strive to protect it to the fullest extent.
By using our website, registering and visiting our hotel, and/or in the course of performing any of our products or services, you consent to the collection and processing of your personal data as described in this Security Policy.
Kashmir Wellness&Spa Hotel is owned by Velina EAD, UIC: 112011596, which is the data controller for all guests.
Follow one of the links below to go to a specific section:
Principles we follow when processing your personal data
Categories of Personal Data we collect from you
Categories of Personal Data we collect about you from third parties
Use of the personal data we collect about you - lawfulness and purposes Third parties with whom we share your personal data
Period for which we store your personal data Your rights as a data subject Security
Other information
Confidential information
Links to third party websites and services
Protection of Personal Data
Storage of personal data
Choice - Marketing Communications
Changes to Security Policy
Contact us
Changes to Kashmir Wellness&Spa Hotel Privacy Policy
PRINCIPLES WE FOLLOW WHEN PROCESSING YOUR PERSONAL DATA
These are the six principles of Kashmir Wellness & Spa Hotel that guide us when processing your personal data:
- TransparencyA: When Kashmir Wellness&Spa Hotel collects and processes your personal data, we tell you all the information about how and from what sources we collect your data, for what purpose we collect it, for how long we keep it, to whom we could potentially transfer it, who are the potential recipients of your data, what are your rights as a data subject.
- ProportionalityA: At Kashmir Wellness & Spa Hotel, we only collect the minimum amount of personal data necessary to effectively carry out our business.
- Accuracy и timelinessA: We at Kashmir Wellness&Spa Hotel only process up-to-date data that corresponds to the truth. We take every measure to ensure that the personal data we hold is accurate and up to date.
- Restriction at Weather: At Kashmir Wellness & Spa Hotel, we store your personal data only for the period necessary for the effective exercise of our activities and in accordance with the provisions of the law.
- Compliance rights at Subjects at Data - We at Kashmir Wellness&Spa Hotel ensure compliance with your rights to access, rectify, delete your personal data that we process.
- Confidentiality and securityA: We at Kashmir Wellness & Spa Hotel have provided all necessary administrative, technical and organizational measures to protect your personal data against unwanted changes, accidental or unlawful loss or unauthorized use, disclosure or access.
CATEGORIES OF PERSONAL DATA WE COLLECT FROM YOU
At every point of contact or interaction (booking, check-in, visit, etc.) with you - our guests, as well as when carrying out various aspects of our business is
we may collect your personal data, which you may provide to us. These categories of personal data are:
Contact information - your contact information, name, postal address, e-mail address and telephone number;
Identification information - details from your ID, in case you are our guest
Sensitive personal data - data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the sole purpose of identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person. We at Kashmir Wellness & Spa Hotel generally do not collect sensitive information unless it is
provided voluntarily by you or if we are not required to do so under applicable laws or regulations. We may use the health information you provide to better serve you and meet your specific needs (for example, to provide access for people with disabilities).
Personal Data at children
We at Kashmir Wellness & Spa Hotel do not collect or process personal data from or about persons under the age of 18. As a parent or legal guardian, do not allow your children to send personal data without your permission.
Payment information - details from your payment service provider, credit card number or other payment account number, account details relating to mobile payments; billing address and other payment details required to make, evidence and post your payment.
Data related to your reservation, stay or visit - information about your stay, date of arrival and departure, goods and services purchased; data collected through , the use of closed-circuit television systems, your card-key and other security systems.
Data, Related с Your personal preferences и interests, expressed during your stay (e.g. smoking or non-smoking room, preferred floor, type of bedding, type of newspapers/magazines, sports, cultural interests). Your questions/comments during or after your stay at our hotel or any of its facilities.
Communication и correspondence – Information relating to the provision of the service - records and copies of your correspondence if you contact us; and any communications between you and Kashmir Wellness & Spa Hotel staff.
Information about participation in an event - Details related to your participation in an event held at PBR - conferences, trainings, seminars, etc.: If you are participating in an event held at PBR, we collect details of the event, the date of the event, the number of guests, details of guest rooms, and for corporate
events - information about your company or organization. We also collect participant data - in these cases we may share your personal data with the event organisers.
Programme For Loyal clients - Data related to our membership or loyalty program, participation in a contest, sweepstakes or marketing program, information related to the purchase and receipt of products or services from any of our on-premises locations;
Marketing Data – Data related to our surveys - we may sometimes ask you to participate in our customer surveys. Participation is always voluntary and an opportunity only.
We may invite you to participate in our contests, sweepstakes and other events, information about which you can share with your social media contacts for evaluation with voting, shared suggestions or other promotions. Participation in such promotions is always an option at your request and is not mandatory.
Video information For your security, we use a monitoring system -
video cameras located at various points in the hotel building. All security cameras are marked with information signs in visible locations. The cameras can record either
record photographs of guests and visitors in public places, as well as location-related information during your stay at our facilities. PBR does not use security or covert surveillance systems. We do not carry out covert video recording.
Your IP address
When you use the Kashmir Wellness & Spa Hotel website, we process data about your IP address. IP address is a set of numbers that are always set on your computer when you connect to your ISP or through your
LAN/WAN network. The network servers automatically identify your computer by the IP address assigned by it during your online session.
Kashmir Wellness&Spa Hotel may collect the IP addresses of users of its website for the purposes of system administration and verification of the use of our Internet addresses. We may also use IP addresses to identify
users of our Sites when we feel it necessary to enforce compliance with the Sites' terms of use or to protect our service, websites or other users.
In addition to the information we collect directly from you, we may also receive information about you from third parties.
PERSONAL DATA WE COLLECT FROM THIRD PARTIES
In a certain number of cases, we receive your personal data from third parties. These are: our partners providing online booking services such as Booking.com, Expedia.com, etc.
Social networks - If you bookmark a place of stay - our hotel - on social networks, if you choose to participate in activities or offers on social networks, from PBR, we may receive certain information from your social network account in accordance with your settings on the social network service, such as location,
registrations, activities, interests, photos, status updates and friends list.
USE OF THE PERSONAL DATA WE COLLECT ABOUT YOU
Legality at processing
Kashmir Wellness&Spa Hotel processes your identification information in accordance with the requirements of the Civil Registration Act - Article 99.
Information relating to your payment, PBR processes your personal data as necessary to comply with tax, financial or other domestic legislation. The other categories of information listed in this Privacy Policy
Kashmir Wellness&Spa Hotel processes in the framework of the performance of the service contract with its customers.
Kashmir Wellness & Spa Hotel handled by your personal Data With following Objectives:
Kashmir Wellness&Spa Hotel processes your personal data for the purposes of the accurate and fair performance of its contractual obligations to its customers, including the provision and personalization of the services that customers request and expect from us Kashmir Wellness&Spa Hotel processes your personal data related to the payment of our services in order to make the payment accurately and accurately.
Kashmir Wellness & Spa Hotel processes your personal data for the purpose of clear and accurate communication with you regarding your booking and stay with us.
Kashmir Wellness&Spa Hotel your personal data recorded on our security cameras in order to ensure the protection of public order and security on the hotel premises and
its objects.
Kashmir Wellness & Spa Hotel processes your personal data for the purposes of our customer satisfaction surveys and loyalty programmes.
Kashmir Wellness&Spa Hotel processes your personal data for the purposes of tax and accounting law requirements - to enable us to declare and report our revenue
POTENTIAL RECIPIENTS OF YOUR PERSONAL DATA
Staff at Kashmir Wellness&Spa Hotel who have access to your personal data:
At Kashmir Wellness & Spa Hotel, we ensure that our employees only have access to personal data that is directly relevant to their work. In order to offer you the best
service, we provide the necessary minimum of access of authorized employees to your data :
Reservation staff. Employees from the IT department.
Medical staff, where required. Legal department staff, if required.
Our Partners:
- suppliers at payment services - banks, out-of-cash payment systems, payment tools like PayPal, etc. Your personal data will be provided to whichever payment service provider you have chosen to make payment to us.
- Organizers at Group events и meetings: in case you visit Kashmir Wellness&Spa Hotel as part of a group event or meeting, the meeting and event planning information gathered will be shared with the organizers of those meetings and events and, where appropriate, with the guests organizing or participating in the meeting or event.
- Suppliers at accounting services that proceed our accounting State bodies и bodies at Local self-government-
- To fulfill the requirements of the Civil Registration Act Section 99, Kashmir Wellness&Spa Hotel provides your identification data as well as your stay details to the local authorities and, upon request, to the Ministry of the Interior.
- In order to comply with domestic law, Kashmir Wellness & Spa Hotel provides information to the NRA.
THE PERIOD FOR WHICH WE STORE YOUR PERSONAL DATA:
Kashmir Wellness&Spa Hotel stores your personal data for the period necessary to fulfill the purposes described in this Security Policy or as required by Bulgarian law.
Kashmir Wellness&Spa Hotel stores your personal data recorded on our security cameras for a period of permissible months.
Kashmir Wellness&Spa Hotel retains your personal information collected to fulfill guest reservations for the stated period of time from the completion of your stay.
We will destroy your personal data as soon as possible and in such a way that it cannot be reproduced or retrieved.
Kashmir Wellness&Spa Hotel guarantees that if your data exists printed on paper, it will be destroyed in a secure manner, for example by machine shredding or burning the paper documents or in any other such manner, and if in electronic form, the personal data will be destroyed by technical means so that it cannot be reproduced or retrieved.
Kashmir Wellness&Spa Hotel guarantees that in case of collection of personal data for the purpose of specific campaigns, lotteries and any other promotions, the processing period will be indicated in each case and the participants will be informed about it.
YOUR RIGHTS AS A DATA SUBJECT
By each time, You You have right Yes:
- To request access to your personal data that Kashmir Wellness & Spa Hotel processes and to obtain a copy of it.
- Request the erasure of your personal data (right to be forgotten) if
you consider that the processing is no longer necessary for the purposes for which it was collected. Please note that this right cannot be exercised in the event that a specific law expressly provides for the retention of these data for a certain period of time.
- To request the rectification of inaccurate personal data in cases where it does not correspond to the truth.
How Yes request Access To your data?
At Kashmir Wellness & Spa Hotel, we understand that you would like to be informed of what personal information we have about you. We would be happy to assist you with your request for access to your personal data. However, in order to protect your personal information, at the time of your request we will ask to ensure that it is you who is the subject of the data requested. Where
make a request in person, we will require you to provide some form of photo identification, such as a passport or driver's license, and you will be asked to sign a request form.
When you make a request for access to personal data, not on-site with us but by other means, we require that the request be made in writing by email, fax or letter,
including a copy of the identity document and signature. We also need home and business addresses and phone numbers so we can check them against our files and verify your identity.
The above porcedure is necessary to create an audit trail for how the request is processed. When a request is made, any correspondence or application is stored and added to your personal information.
Kashmir Wellness & Spa Hotel reserves the right to refuse access to your personal information in certain circumstances. If your personal information is not disclosed to you, you will be provided with the reasons for the refusal to grant you access to your personal information.
At any time, if you are concerned that your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection supervisory authority - Commission for the protection of personal data - https://www.cpdp.bg/
SECURITY
Kashmir Wellness & Spa Hotel takes steps reasonably to (a) protect personal information against unauthorized access, disclosure, alteration or destruction and (b) keep personal information accurate and up-to-date as appropriate. Kashmir Wellness & Spa Hotel employs an expert in-house team of IT professionals who are responsible for creating,
the updating and management of the Kashmir Wellness & Spa Hotel security program.
In the event of a security incident, Kashmir Wellness & Spa Hotel will notify regulatory authorities and/or users as required by applicable laws or regulations.
For online transactions, we use technological means within reason to protect the personal information you send us through our website. Please note that unfortunately, there is no security system or data transfer system over the Internet that is
guaranteed completely secure.
In order to protect your privacy, please do not send us payment card numbers or other sensitive personal data by email.
CHOICE - MARKETING COMMUNICATIONS
If you have provided us with contact information (mailing address, fax number, email address, or phone number), we may want to notify you depending on your stated preferences for our products and services or invite you to participate in events by and through email, online advertising, social media, phone, text message (including SMS and MMS), targeted notifications, in-app notifications, postal mail, our customer service call center, and other means (including on-site messaging such as in-room television).
If you prefer not to receive marketing materials by email, you can
unsubscribe at any time by using the unsubscribe function in the email received from us. Unsubscribe requests may take up to ten business days to complete.
To unsubscribe from text messages, tell the hotel reception that you do not wish to receive text messages from the hotel, or reply with "STOP" to the received text message.
Message.
To be added to Kashmir Wellness & Spa Hotel's internal Do Not Call list, send a message to: info@kashmirhotel.bg.
CHANGES IN Security Policy
We may change this Security Policy from time to time. When we make material changes to this Security Policy, we will post a link to the updated Security Policy on the home page of our site and, if you have registered for any of your products or services, we may also notify you through the communication channel provided by you. You will know when this Security Policy has been
updated by checking the link and date at the top of the Security Policy.
Any changes to our Security Policy will become effective upon the posting of
the revised Site Security Policy. By using the Site and/or any of our products and services and/or accepting the updated Security Policy following such changes, you accept the then-current modified Security Policy. Back to Top
LINK WITH US
If you have any questions about this Security Policy or the way Kashmir Wellness & Spa Hotel processes your personal data, or if you wish to provide us with a compliment or complaint, you can contact us by email at info@kashmirhotel.bg. We will respond within 30 days or sooner if applicable.
Cookies
Our websites and mobile apps may use a technology called cookies. "A cookie is a small text file that is placed on your hard drive by a server. "Cookies allow our websites and mobile applications to respond to you as a user.
The website or mobile app can tailor its operations specifically to your needs, likes and dislikes by collecting and remembering information about your preferences.
It is your choice whether or not to accept cookies. Most browsers on the web
automatically accept cookies, but you can change your browser settings to refuse cookies or receive a warning before the cookie is saved if you prefer.
If you choose to refuse cookies, you may not be able to take full advantage of the interactive features of our website. For further information regarding the use of cookies, please see our Cookie Policy.
