Privacy Policy
I. General provisions
Kardzhali Municipalitywith registered office and management address: Kardzhali, PK 6600, Bulgaria Blvd. No. 41, UIC 000235920 represented by Erol Mumun (hereinafter referred to as “visitkardzhali”), is a personal data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation (EU) 2016/679) and the Personal Data Protection Act.
“visitkardzhali” respects the privacy of individuals and representatives of legal entities using its services, and protects their personal data to the maximum extent during processing.
The personal data protection policy of “visitkardzhali” has been prepared and is based on the Bulgarian and European legislation in the field of personal data protection, and all its amendments and additions to the document will be published on the website visitkardzhali.com
II. Definitions
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number (e.g., personal identification number), location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing of personal data" is any operation or set of operations which the controller performs upon personal data, whether or not by automatic means (such as collection, recording, organization, structuring, storage, adaptation, updating or rectification, alteration, retrieval, disclosure by transmission or provision, dissemination or otherwise making available, alignment or combination, blocking, erasure, destruction, etc.).
III. Grounds and purposes for collecting, processing and storing your personal data.
“visitkardzhali” collects and processes the following personal data when using a contact form, purchasing subscription plans, registering a user profile, subscribing to an electronic newsletter (newsletter) and using the website visitkardzhali.com:
First and last name;
Email address;
Phone number;
Address;
Cookie data.
“visitkardzhali” collects this personal data of yours for the purpose of:
Identification of returning website users and statistical needs;
Identification of the author of the message and conducting full correspondence and addressing a response to the author of the message;
Registration and management of user profiles;
Conclusion of contracts for the purchase of subscriptions;
Sending an electronic newsletter containing information about current publications, promotions and offers.
Personal data collected in the register are collected from the individual only after the individual has provided voluntary and informed consent. “visitkardzhali” does not use personal data for purposes other than those specified, nor does it carry out automated decision-making or profiling.
IV. Principles for collecting and processing your personal data.
When processing your personal data, “visitkardzhali” adheres to the following principles:
Legality, good faith and transparency;
Limitation of the purposes of processing;
Relevance to the purposes of processing and minimization of the data collected;
Limiting storage to the minimum period necessary to achieve the objectives;
Explicit consent of the data subject to data processing;
Integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
V. Provision of personal data to third parties.
The collected personal data may be provided to our partners when necessary for the provision of the services of “visitkardzhali”: in connection with the maintenance of the website's information systems; when accounting for orders and services; when offering and performing services; when processing the personal data of individuals on behalf of “visitkardzhali” by our partners such as Google Tag Manager, Google Analytics, Facebook Pixel, etc.
We comply with the condition that the relevant information may be used only within the limits set by the legal basis on which it is collected or by your personal consent regarding the processing carried out on behalf of “visitkardzhali”, and that this information is confidential. In all cases, “visitkardzhali” strives to provide no more than the necessary minimum of personal data, as well as to ensure that these third parties act in full compliance with applicable personal data protection legislation and make adequate efforts to protect the personal data of customers.
“visitkardzhali” also provides personal data to third parties when it is obliged by law to disclose such personal data.
VI. Shelf life
The personal data of individuals collected and processed in connection with services used through the “visitkardzhali” website are stored until the purposes for which they were collected are achieved or until the consent to provide the personal data is withdrawn - whichever of the two circumstances occurs earlier.
“visitkardzhali” may store personal data in anonymized form for a longer period, for example for statistical purposes.
VII. User profiles
Each user has the opportunity to register a user profile on the website in order to use advanced functionalities. When registering a user profile, names, address, telephone number and a valid email address are provided. The same data is also used when managing the user profile.
VIII. Purchase of subscriptions
Subscriptions are purchased through the interface provided on the website, with payments made only by bank transfer. By purchasing a subscription and accepting the General Terms and Conditions, a contractual relationship is created, which is the basis for processing personal data necessary for the performance of the contract in accordance with Regulation (EU) 2016/679 – name and surname, email address, telephone number and address.
IX. Electronic bulletin (newsletter)
With our e-newsletter, we regularly inform you about current information publications, promotions and offers related to the activities of “visitkardzhali”. If you wish to receive the e-newsletter, we will need your valid e-mail address. When registering for our newsletter, we use a double opt-in procedure. This means that after registration, we send you a message with a link to the specified e-mail address, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration via the relevant link within 2 weeks, you will not receive the e-newsletter, and the collected personal data will be automatically deleted after one month. In addition, we store in each individual case the IP addresses used and the time of entry and confirmation. The purpose of the procedure is to be able to prove your registration and, where necessary, to clarify any potential misuse of your personal data. As a subscriber to the e-newsletter, you can withdraw your consent to the processing of personal data from your e-mail address for sending the newsletter at any time. Consent can be revoked via a link provided for this purpose in the content of the e-newsletter itself or by sending an e-mail with the subject "unsubscribe from e-newsletter" to the e-mail address gdpr@visitkardzhali.com.
X. Personalization and Cookies.
New technologies allow us to personalize our website for each individual user. Cookies are text files containing information that allows the identification of returning users. Cookies are stored locally on the device you use to access our website visitkardzhali.com and do not cause any harm to your system. Cookies help us identify your preferences (view and usability settings). The accumulation and analysis of this information allows us to improve electronic services and the overall user experience so that they best meet your needs. You can find out about the cookies and other technologies we use in our Cookie Policy.
XI. Your rights in the collection, processing and storage of your personal data.
At any time while we are processing your personal data, you, as the data subject, have the following rights:
Right of access – With a written application you can receive information about the type of personal data provided and the purpose of their processing. The application can be submitted in person to the specified contact address, by mail or by e-mail to gdpr@visitkardzhali.com under the terms of the Law on Electronic Documents and Electronic Certification Services, the Law on Electronic Governance and the Law on Electronic Identification. Your application must contain three names, a personal identification number, a contact address, a description of the specific request and a preferred form for receiving information when exercising your rights, a signature and the date of submission of the application.
Right to rectification – You have the right to request that they be corrected if you find errors or inconsistencies.
Right to erasure (right to be forgotten) – if the conditions of Article 17 of Regulation (EU) 2016/679 apply – after access to your personal data has been granted, you may request that we remove any records of your personal information without the possibility of further processing.
Right to object – With regard to data processed on the basis of “legitimate interest”, you have the right at any time and on grounds relating to your particular situation to object to the processing in accordance with the procedure for obtaining access to personal data. In the event of such an objection, “visitkardzhali” undertakes to consider your objection and within 30 calendar days of its receipt to inform you of the result of the internal review. If the objection is justified, we will cease processing your personal data and remove any records of your personal information without the possibility of further processing.
Right to restriction of processing – In the circumstances under Art. 18 of Regulation (EU) 2016/679, you may request “visitkardzhali” to restrict (stop) the processing of your data. Such cases include the need to verify the accuracy of the data, the basis for the processing or the lawfulness of their processing.
Right to complain – If you believe that your data is being processed unlawfully by the administrator, you have the right to complain to the Personal Data Protection Commission, which is the supervisory authority responsible for the implementation of Regulation (EU) 2016/679 and the Personal Data Protection Act.
Personal Data Protection Commission; Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. Telephone: 02 / 9153 518 Website: cpdp.bg Email: kzld@cpdp.bg
XII. Мерки за информационна сигурност и защита на личните данни
The company has taken appropriate technical and organizational measures to protect the personal data provided against accidental or unlawful destruction, accidental loss, unauthorized access, modification or dissemination, as well as other unlawful forms of processing by unauthorized persons. The security measures we apply are subject to constant improvement and adaptation to the most modern technologies.
XIII. Notification of changes to this policy
As the administrator of personal data, “visitkardzhali” reserves the right to make amendments and additions to this policy. When making changes to the Personal Data Protection Policy, they will be promptly reflected in it and made available to all interested parties on the “visitkardzhali” website.
If you have any questions regarding our measures and policies regarding the protection of personal data, please contact us:
“visitkardzhali”
Address: Kardzhali, PK 6600, Bulgaria Blvd. No. 41
Email address: office@visitkardzhali.com
