We are committed to protecting the privacy and security of the data of all users of this website. By making a booking through the website, you agree to the terms and conditions regarding the collection, recording, management, storage, use, blocking, erasure or destruction, disclosure and transfer of data in accordance with this Privacy Policy. We process your personal data exclusively in accordance with the applicable legislation, namely REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Personal Data Protection Act (PDPA) and the Electronic Commerce Act (ECA).
I. WHO PROCESSES AND BEARS RESPONSIBILITY FOR YOUR PERSONAL DATA
The accommodation services that we provide to you require processing of your personal data by an administrator of personal data observing the terms and requirements of the personal data pro-tection measures in accordance with GDPR The administrator of THE DOCTOR’S HOUSE website is responsible for the processing of your personal data.
II. PERSONAL DATA PROCESSED BY US
As our customers, regardless of the form of booking – by phone or via website – we process the following personal data provided by you:
- Personal name and family name;
- Phone number;
- e-mail;
III. PURPOSES OF THE PROCESSIN
- In order to provide accommodation services we perform the following actions and process the following data:
- Identifying the customer;
- Updating your personal data;
- Corrections of due payments when there is enough ground for it;
- In order to perform our legal obligations we process your data for the following purposes:
- Issuing of invoices in individual cases;
- Fulfilment of the obligation of accountability of the Administrator by recording legally sig-nificant verification data in electronic documents – technical logs;
IV. MINOR AND UNDERAGED PERSONS
THE DOCTOR’S HOUSE does not provide services to persons aged under 18. Persons aged under 18 may use our services only with the assistance of an adult acting as a repre-sentative of the minor/underaged person.
If THE DOCTOR’S HOUSE receives information that they have collected personal data from a person aged under 18, these data will be erased, unless the law does not oblige THE DOCTOR’S HOUSE to store such data and to inform the relevant public authorities.
If you believe that we have mistakenly or unknowingly collected information from a person aged under 18, please contact us at:
phone: +359 886 189 655;
е-mail: doctorhouse.sozopol@gmail.com ;
V. DATA COLLECTION METHOD
THE DOCTOR’S HOUSE processes only personal data provided by you – our customer. This means that you are responsible to not provide data of third parties in breach of their rights to pro-tection of personal data, because THE DOCTOR’S HOUSE has no access to these persons and is not actually able to control whether our customers provide data of third persons with their knowledge and consent given in accordance with the legal requirements. Therefore, the customer is solely responsible is s/he provides us with data of third parties with-out their knowledge or without obtaining their consent and thus fulfilling the requirements of the applicable data protection legislation, including names, telephone numbers and addresses of recip-ients of shipments provided to us by a customer.
VI. WHERE DO WE STORE YOUR DATA
The data we collect from you is stored within the European Economic Area (EEA) in compliance with national and European legislation, and in particular REGULATION (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
VII. WHO HAS ACCESS TO YOUR PERSONAL DATA
THE DOCTOR’S HOUSE does not provide your personal data to third parties without legal or contractual grounds and does not disclose data to third countries and international organisations outside the EU and EEA.
VIII. PERIOD FOR PROCESSING AND KEEPING DATA. DESTRUCTION OF DATA
Depending on the type, the grounds and the purposes of the processing, your personal data is kept within the periods determined by the national or EU law, so that the Administrator can fulfil the obligations imposed by the law The destruction of personal data is carried out in compliance with the stipulated procedures.
IX. SECURITY MEASURES
THE DOCTOR’S HOUSE has implemented technical and organisational measures to protect your personal data against loss or other forms of unlawful processing in accordance with Art. 32 of GRDP. Personal data are only accessible on a need-to-know basis to persons having duties related to the provided accommodation services provided. These persons are trained and authorised accordingly.
X. WHAT ARE YOUR RIGHTS
- Right to access:
You have the right to request information at any time about your personal data stored by us as well as about the reasons, purposes and deadlines for data storage and processing and receive in-formation whether your personal data has been processed and/or destroyed.
- Right to rectification:
You have the right to request rectification of your personal data if they are incorrect, including the completion of incomplete personal data.
- Right to erasure /‘right to be forgotten’/:
You have the right to erasure of all your personal data processed by THE DOCTOR’S HOUSE at any time, unless the processing is necessary for at least one of the following, namely:
a. for exercising the right to freedom of expression and information;
b. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
c. for the establishment of, exercise of or defence against legal claims.
- Right to request restriction of the processing
You have the right to request that THE DOCTOR’S HOUSE restricts the processing of your per-sonal data under the following circumstances:
a. the accuracy of the personal data is contested by the data subject within a period enabling the administrator to verify the accuracy of the personal data;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c. the administrator no longer needs the personal data for the purposes of the processing but the individual requires the data in order to establish, exercise or defend a legal claim;
- Right to portability:
When THE DOCTOR’S HOUSE processes your personal data in an automated way on the grounds of your consent or contract, you have the right to request a copy of your personal data in a struc-tured, commonly used and machine-readable format to be transferred to you or to a third party. This includes only the personal data provided by you.
- Right to be notified about breach under Art. 34:
When the personal data breach is likely to result in a high risk to your rights and freedoms, THE DOCTOR’S HOUSE shall communicate the personal data breach to the data subject without undue delay and with description of the nature of the personal data breach indicating at least:
- the name and the contact information of the officer from whom additional information can be obtained;
- the likely consequences of the personal data breach;
- description of the measures taken or proposed to be taken by the administrator to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.
The above information will not be sent in case of personal data breach if THE DOCTOR’S HOUSE has fulfilled any of the following conditions:
a. It has implemented appropriate technical and organisational protection measures, and those measures have been applied to the personal data affected by the personal data breach, in particular measures that render the personal data unintelligible to any person who is not authorised to access it, such as encryption; or
b. It has consequently implemented measures that ensure that the high risk to the rights and free-doms of data subjects is no longer likely to materialize; or
c. the notification would involve disproportionate effort.
In the latter case THE DOCTOR’S HOUSE will publish a notification on its website so that the data subjects will be informed in an equally effective manner.
XI. WITHDRAWAL OF CONSENT
You have the right at any time to request withdrawal of consent for the the processing of your per-sonal data needed for achieving the concrete purposes.
XII. IRREGULARITIES AND COMPLAINTS
If you believe that we have breached your rights related to your personal data and that there is a risk of a personal data breach, you can report at:
phone: +359 886 189 655;
е-mail: doctorhouse.sozopol@gmail.com ;
