PRIVACY POLICY - Declaration

Privacy Policy

NOTICE ON CONFIDENTIAL TREATMENT OF THE PERSONAL DATA OF USERS OF TOURIST SERVICES IN GREEN VALLEYS LTD.

The personal data that the administrator collects and processes from you are: 

Names, social security number, address and data from an identity card/identity document, gender, citizenship, telephone number, e-mail.

Special category of data: health status data of travelers with specific needs.

The basis that entitles us to process your data is:

Processing is based on your consent.

The processing of your data is necessary for the performance of a contract with you or our intention to enter into a contract for the provision of a travel service.

The processing is necessary to comply with our legal obligation under the Tourism Act, ZSch and secondary regulations.

All legitimate interests pursued by us as an Administrator when processing your data are for the purpose of concluding a contract with you and fulfilling our obligations as a tour operator, including protecting our rights and interests in this regard.

The following organizations/individuals will have access to your personal data: 

Employees at Green Valleys Ltd.

Third parties if required according to the travel service:

tour operators/agent/provider of tourist services in the Republic of Bulgaria, in the EU and outside the EU, on-line based reservation systems, transport companies, companies providing transfers, tour guides or companies providing additional on-site tours, other state bodies and institutions – for visa issuance, airlines – when booking plane tickets, reservation system.

– global hotel suppliers; hotels, insurance companies, the bank serving the administrator (for the purposes of successful payment of the service under the contract), an external accounting firm, the National Revenue Agency, the law enforcement authorities, the CPLD, the law enforcement authorities.

Transfer of personal data to a country outside the EU or to an international organization 
The administrator will transfer your data outside the EU only if this follows from the tourist service contract concluded with you. The data will only be transferred to countries applying an adequate level of data protection, or in respect of which the controller has provided guarantees for the applicable rights of the data subjects and effective legal remedies.

Data retention period:

We will only keep your personal data for as long as is necessary for the purposes for which it was collected and in accordance with our data protection policy. The data will be securely destroyed when its processing is no longer required.

The data will be stored in an electronic version.

Consent: 

By agreeing to accept this Privacy Policy, you give us permission to process your personal data only for the purposes we specify.

You may withdraw your consent at any time with a Data Subject Withdrawal of Consent Form, which may be provided to you by the Administrator at any time.