At Maxi Club Velingrad, we treat your personal space and integrity with responsibility and we aim to gain the trust of every single one of our guests so we have implemented high standards for the protection of personal data. As of 25.05.2018 the General Data Protection Regulation (“the Regulation”) is in force and our team is hard at work to take the necessary actions in order to complete every action in full accordance with the Regulation whilst fully observing your rights and interests.
WHO ARE WE?
We are MAXI – I AD (“’Maxi Club”), Bulgarian company with PIN: 127041392, Maxi Velingrad Park Hotel & Spa (“Maxi Club Velingrad”) is a hotel owned by Maxi Club in the city of Velingrad on the following address: Lazhdene neighborhood, 30 “Nikolai Hrelkov” Str, part of Maxi Club. In a number of cases regarding the activity of the hotel, Maxi Club is the Controller of your personal data.
We use reputable external service providers that can also create cookies in your browser. Access and control of the cookies is granted to the provider in question (in this case Google Inc.). The information in them is made anonymous. We use such external service provider in order to process anonymous information mainly for statistics purposes. We use the following external services:
Google Remarketing Tag (Google Tag Manager).
It is possible for us to use Facebook pixel during certain periods – a service provided by Facebook Inc., used for statistical purposes regarding the internet traffic on our website and for the creation of personalized ads. These cookies are controlled by Facebook Inc. and we do not have control over them. These are cookies with which your actions can be tracked if you have seen or opened an ad on facebook.com. It is possible for Facebook to use this information for its advertisement goals according to their data policy: https://www.facebook.com/about/privacy
We use the so called “cookies” In which personal data can be stored only for the purposes of: improving the user experience on the website, statistical purposes, providing targeted ads (which you can decline at any time), market analysis (tracking of trends, preferences and user interests)
Almost every browser allows you to manage your cookies, including deleting them, if for any reason you do not wish to use them.
WHY DO WE COLLECT YOUR PERSONAL DATA IN SECTION “CONTACT US” ?
Maxi Club Velingrad processes your contact information which falls in the category of “personal data”. We collect this information only to specifically administer it to a competent employee so that they may answer you. Only a very limited number of employees of Maxi Club Velingrad have access to your personal data which are directly engaged with answering questions online.
We shall use the provided contact information only to remain in contact. We may contact you after an answer is not expected from either side in order to inform you with information that we consider important to you. Please be aware that you have the right to refuse follow up contacts from us as well as us sending you commercial messages. We shall always oblige with such a request, and if requested we shall delete your personal data which we possess (considering we don’t have a legal reason to keep them)
WHY AND HOW DO WE COLLECT YOU PERSONAL DATA IN SECTION “BOOKING”
The users of our online booking service in Maxi Club Velingrad voluntarily provide their personal data in order to perform a reservation in the hotel. The booking system is supported by the reputable provider “Eltur – 95” OOD. All your personal data get encrypted before being transferred directly to the booking system of Maxi Club Velingrad, with only a very limited amount of employees that process your booking having access to them, they also have the obligation to keep the entire information confidential.
It is possible that after you have been our guest at Maxi Club Velingrad for us to send you an e-mail to an address that you have given us, or for us to contact you using different contact information that you have provided us with, in case we figure that you would be interested in our promotions, special offers, new services, etc. You may always object against follow up contacts from us- by ticking “unsubscribe” in the e-mail, by objecting over a phone call or by sending us an e-mail on email@example.com .
WHY DO WE COLLECT YOUR PERSONAL DATA WHEN YOU CHECK IN THE HOTEL, AS WELL AS WHEN USING ADDITIONAL SERVICES FROM MAXI CLUB VELINGRAD?
In these cases your personal data is necessary only for the conclusion of the contract in question- rental contract of a hotel room. This type of contract is not formal, it is usually concluded verbally, but in the case of hotel accommodation there is always a contractual relationship between the hotel and the guest.
At Maxi Club Velingrad, we collect your personal data from your identity documents in order to conclude and conclude a hotel room rental contract, as well as on the basis of article 6, paragraph 1, point C from the Regulation, which states that processing is legally permitted when necessary for compliance with a legal obligation to which the controller is subject. Our legal obligation derives from article 99, section 3 of the Civil Registration Act: “The persons rendered accommodation in a hotel, motel, rest residence or another accommodation place shall be obliged to register in special books the accommodated, at request presenting the data from them to the bodies of the local authorities or of the Ministry of Interior.”
Maxi Club provides a number of additional services for the residents on the territory of the complex including: gym center, spa center, swimming pool, beauty salon, etc. Some of these services require a card to be issued for those who wish use them (daily/monthly/early) for which we need a very limited part of your personal data: names, e-mail and phone number. The issuance and usage of cards is necessary to provide access regarding the security of our guests. The contact data is necessary for a limited and occasional usage – for example in the case of forgotten belongings by you. Sometimes this type of personal data is necessary for the issuance of discount cards. The personal data is given completely freely and with the consent from every guest (user). In case you refuse to provide your personal data required to issues such a card unfortunately we may be unable to provide you the service or we may not be able to provide it at its full extent.
Maxi Club Velingrad may need your vehicles’ registration plate number. Such information is provided by the guests completely voluntarily, but the refusal to do so may make it impossible for us to provide particular parking places in the hotel. This information will be irreversibly deleted once the guests’ stay comes to an end, the information will not be used for any other purposes than that to organize the parking up until its deletion.
The hotel guests may provide completely voluntarily very limited information concerning their health- regarding any disabilities that hinder their movement or if they have an allergy. The hotel receives such information only with the guests consent and for the purposes of providing special needs (for example providing a wheel chair, for providing help by the hotel staff or for providing a suitable menu).
Maxi Club Velingrad can also process data related to your bank account, credit/debit cards and other means of payment – for the purposes of payment of any obligations that you may have with the hotel.
DO WE PRODUCE COPIES OF YOUR ID CARDS WHEN YOU CHECK IN?
Maxi Club Velingrad does NOT make copies of your ID cards, neither does it scan them. The technical devices we use at the reception extract the legally required information when checking in without scanning/copying the ID.
HOW DO WE PROCESS JOB APPLICANTS’ PERSONAL DATA?
By submitting your job application, you give your permission to Maxi Club to store and process your personal data in accordance with this privacy notice as our approach is legitimate and our organization applies it to every application- without exceptions.
We collect and store the information that you provide us with when you apply. The personal data that you provide usually contains: names, address, e-mail, phone number for contact, date of birth, qualification, education and work experience. This is the information that Maxi Club considers as appropriate but you are free to include any other information that you think is necessary.
Maxi Club may check any publically available information for any of the candidates as well as information which the candidates have themselves published on the internet (for example on linkedin.com).
We have a solid legal basis on which we process the aforementioned personal data which you voluntarily provide us with. Our legitimate interest to complete the sorting process suggests it besides that the processing is also linked with the steps needed to conclude a contract (employment contract) which is initiated by the personal data subject (work candidate).
We will use your personal data to assess whether you are fit for the job for which you have applied, as well as for future open positions in Maxi Club. Regarding the future positions Maxi Club may store your personal data for up to 3 years from the moment of receiving the information (the date of your application). However, if you decide to withdraw your application or you no longer wish for us to keep your personal data for future open positions, you can at any time ask us to delete your personal data which we possess (considering we don’t have a legal reason to keep them- which would be the case if you have already been hired for a job).
DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?
Regarding the site: Aside from the previously mentioned cases of using Cookies, in the current Notice we do not share your personal data that we receive through the contact form on http://maxivelingrad.com/en/contacts .
Regarding the job applicants: Maxi Club does not share the received personal data from job applicants with third parties.
Regarding the video surveillance on the territory of Maxi Velingrad Park Hotel & Spa with address: city of Velingrad, Lazhdene neighborhood, 30 Nikola Hrelkov Str. The Hotel does video surveillance in order to provide security on the territory of the complex, in accordance with the current notice. It is possible for a security company to have access to video recordings (containing your image) licensed in accordance with the Law for the private security activities. In this case we will make sure to choose a company with good reputation as well as to include the necessary contract guarantees in order to ensure the confidentiality of our guests. In case an external company carries out the technical maintenance of the video surveillance system, it may not possess a license for private security duties but we will still require contractual clauses regarding the defense of your personal data.
Regarding additional services of Maxi Club: The Hotel may provide very limited parts of your personal data to third parties in the case when the data is needed by third party service providers in order to carry out the duties for which they have been hired, this shall be done only when a legal basis has been presented. Those personal data processors hired by us have agreed to contractual and legal obligations in order keep your personal data safe.
Maxi Club does not provide personal data of its guests and owners of property in Maxi Club to third parties except for when a legitimate reason or obligation is present.
DO WE RECEIVE OUR GUESTS’ PERSONAL DATA FROM THIRD PARTIES?
We may come into possession of your personal data without you providing it to us. Different scenarios may lead to Maxi Club possessing your personal data, as for example – from a partnered tour operator. What is common between all these scenarios is that we only process your personal data provided to us by third parties when it is being given to us based on a legal basis.
REGARDING VIDEO SURVAILLANCING ON THE TERRITORY OF MAXI CLUB
The public places on the territory of Maxi Club Velingrad are under video surveillance for which signs have been placed. All visitors can be subject of video recording. Maxi Club does not use video surveillance for any kind of tracking, it only ensures the security and peace of our guests and visitors. No one shall be systematically tracked, the video records are not to be shown to third parties except to a person that has a legal basis.
The video records are deleted at most 30 days after they have been made.
HOW DO WE PROTECT YOUR PERSONAL DATA AND FOR WHAT PERIOD DO WE STORE THEM?
At Maxi Club, we are seriously engaged in defending your personal data. In order to prevent and unauthorized access or disclosure, loss of personal data or another type of violation of the Regulation we have provided the necessary physical, electronic and management procedures as a defense measure concerning the information which we collect and process. You can learn more about the technical and organizational measures which we have implemented from the Data Protection Officer via the following e-mail: firstname.lastname@example.org .
Your personal data is stored for the period of our contractual relationship and for a determined period after their end, which will allow us to fulfill our legal obligations, including those for settling possible lawsuits which could come up in the future.
WHAT RIGHTS IN REGARDS TO THE PERSONAL DATA DO YOU HAVE AND TO EXERCISE THEM?
You as a subject of personal data which we process have a lot of rights: right to access, right of correction of personal data, right of deletion, right to limit the processing, right to object the processing, right of data portability, and in case that you haven’t been satisfied by our cooperation- the right to file a complaint to the Commission for personal data protection (https://www.cpdp.bg/en/index.php?p=pages&aid=5 ).
At Maxi Club we will cooperate in order for you to exercise every legal right that you have granted from the Regulation or from other applicable provisions in the sphere of personal data protection.
You can exercise the beforementioned rights by contacting our Data protection officer on the following e-mail: email@example.com
CHANGES TO THE PRIVACY NOTICE
Maxi Club reserves the right to change and update this Privacy notice at any time. We may also notify you in case we make changes that significantly affect your rights regarding your personal data.