Privacy Policy

Personal Data Protection Policy

Please read this Policy carefully before providing us with your personal data, as by providing it you agree to the terms and conditions described in it.

1. General Information

“GALIANI 18 Ltd. carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The provision of personal data by you is voluntary in order to use certain services provided by us and to use our website. If you do not wish us to process your personal data in the manner described in this Privacy Policy, please do not provide it to us. Please note that in some cases we will not be able to offer you the service and/or information you have requested if you do not provide us with the necessary data. If you have any questions or comments about this Privacy Policy, please contact us at our email address: mida.obzor@gmail.com. “GALIANI 18 Ltd. guarantees the protection of your personal data to the maximum extent possible. The security measures we apply are subject to constant improvement and adaptation to state-of-the-art technology. The Privacy Policy regulates the processing of personal data of the clients of the Mida Hotel, Mida Apartments and Mida Beach Apartments in connection with the tourist services offered by GALIANI 18 Ltd. It has been prepared and is based on the current Bulgarian and European legislation in the field of personal data protection.

2. Information about the Data Controller

  • Name “GALIANI 18” Ltd.
  • UIC/BULSTAT: 205294547
  • Registered office and registered address: Ruse, “Studentska” № 12, entrance 2, floor 5
  • Correspondence data – gr. Obzor, 1A “Chernomorska”
  • E-mail: mida.obzor@gmail.com
  • Phone +359 884 716 555

3. Information on the competent supervisory authority

  • Name: Commission for Personal Data Protection
  • Registered office and registered address. gr. Sofia “1592 Proff. No 2 Tsvetan Lazarov
  • Correspondence data. gr. Sofia 1. “Proff. No. 2 Tsvetan Lazarov
  • phone: 02 915 3 518
  • E-mail: kzld@government.bg, kzld@cpdp.bg
  • Website: www.cpdp.bg

4. Basis for collecting, processing and storing your personal data

“GALIANI 18 Ltd processes your personal data on the following grounds:

  • to comply with a legal obligation;
  • to perform obligations under a contract with you;
  • your explicit consent to the processing of your personal data for one or more specific purposes;
  • for the purposes of the legitimate interests of GALIANI 18 Ltd or the legitimate interests of a third party;
  • to protect your vital interests or the interests of another individual;
  • for the performance of a task carried out in the public interest or in the exercise of official authority.

“GALIANI 18 Ltd is the data controller in respect of your data as a user of our services.

5. Categories of personal data collected, processed and stored by GALIANI 18 Ltd.

In connection with the performance of its legal obligations in the provision of travel services , GALIANI 18 Ltd. processes the following categories of personal data, according to the purposes for which they are collected and the grounds on which they are processed:

  • registration data: names, unique citizenship number (alien ID number), date of birth, sex, nationality, permanent address, identity document data.
  • contact details: name, mailing address, e-mail address, telephone number.
  • credit or debit card information, bank account number or other banking and payment information.
  • details for issuing a payment document /bill, invoice/: names, unique citizenship number (alien ID number), permanent address.
  • when filling in a contact form on our website – names, email, phone number.

“GALIANI 18 Ltd does not collect or process personal data relating to the following:

  • reveal racial or ethnic origin;
  • reveal political, religious or philosophical beliefs, or trade union membership;
  • genetic, biometric, health, or sex life or sexual orientation data.

In order to ensure the safety of its guests and to protect its property, GALIANI 18 Ltd. carries out video surveillance on the premises of Mida Hotel, Mida Suites and Mida Beach Suites. Through video images from security cameras are collected: video image and behavioral data.

6. Purposes and principles for the collection, processing and storage of your personal data

“GALIANI 18 Ltd. complies with the following principles when processing your personal data:

  • lawfulness, fairness and transparency;
  • limitation of the purposes of processing;
  • relevance to the purposes of the processing and minimization of the data collected;
  • accuracy and timeliness of the data;
  • limitation of storage to achieve the purposes;
  • integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.

“GALIANI 18 Ltd. processes the personal data provided by you for the following purposes:

  • for the accommodation and registration of clients /guests of the hotel and apartments/;
  • for the preparation of hotel bills or invoices for tourist services rendered;
  • for the performance of obligations under a contract for the supply of a tourist service;
  • to process reservation requests, status notification, via email or telephone;
  • to administer and respond to customer enquiries, including when sending an email message via the contact form on the hotel and apartments website;
  • to contact customers, if necessary;
  • to ensure the security of the hotel guests and apartments by means of video surveillance systems;
  • to comply with legal obligations and regulatory requirements to the National Revenue Agency, the National Insurance Institute, the Ministry of the Interior and other state municipal and control bodies;
  • to provide information to the Commission for Personal Data Protection in relation to obligations under data protection legislation and Regulation (EU) 2016/679.

7. Transfer of your personal data for processing to third parties

“GALIANI 18 Ltd may, at its own discretion, transfer some or all of your personal data to processors for the purposes of processing, subject to the requirements of Regulation (EU) 2016/679, including:

  • natural or legal persons who, on the basis of a contract, process your personal data on behalf of the Controller;
  • banks handling payments made by and to you;
  • business partners in the joint provision of services, etc.

“GALIANI 18 Ltd may disclose and/or transfer your personal data in accordance with applicable law if an administrative, supervisory or judicial authority so requires or if the transfer is related to the performance of a legal obligation, including to public authorities defined in the Tourism Act – the Ministry of Tourism, the Municipality of Smolyan, the Minister of the Interior, the National Revenue Agency and the National Statistical Institute.

8. Transfer of your personal data to third countries

“GALIANI 18 Ltd. does not transfer personal data to countries outside the EU. If such a transfer is necessary, it will only take place under the terms of the General Data Protection Regulation (EU) 679/2016.

9. Storage period of your personal data

“GALIANI 18 Ltd. stores your data, given on the basis of consent, until its explicit withdrawal.

“GALIANI 18 Ltd. shall keep your personal data for a period no longer than provided by law.

10. Your rights when collecting, processing and storing your personal data

In order to process your personal data in a fair and transparent manner, “GALIANI 18” Ltd. informs you of your rights under Regulation (EU) 2016/679, namely:

10.1. Право на оттегляне на съгласие за обработване на личните Ви данни

You have the right to withdraw your consent to the processing of your personal data at any time.

“GALIANI 18 Ltd may ask you to verify your identity and identity with the data subject.

“GALIANI 18 Ltd will cease processing the data for the purposes for which you originally consented, unless there is no other lawful basis to continue processing, which it will notify you of in due course.

10.2. Право на достъп до личните Ви данни

You have the right to request and obtain confirmation as to whether GALIANI 18 Ltd. processes your personal data, as well as the right to access the personal data relating to you and the following information:

  • purposes of processing;
  • categories of personal data;
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, including in third countries or international organisations;
  • where possible, the intended period for which your personal data will be kept and, if this is not possible, the criteria used to determine that period.

“GALIANI 18 Ltd shall provide you, upon request, with a copy of the personal data processed relating to you in electronic or other appropriate form.

The provision of access to the data is free of charge, but GALIANI 18 Ltd reserves the right to charge an administrative fee in the event of repetition or excessiveness.

10.3. Право на коригиране или попълване на личните Ви данни

You have the right to request GALIANI 18 Ltd to correct or complete inaccurate and/or incomplete personal data relating to you.

10.4. Право на изтриване (правото да бъдеш забравен)

You have the right to request the deletion of your personal data, and GALIANI 18 Ltd. has the obligation to delete them without undue delay when one of the following grounds applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you withdraw your consent on which the processing is based and there is no other legal basis for processing;
  • You object to the processing of personal data relating to you and there are no legitimate grounds for processing;
  • your personal data have been unlawfully processed;
  • your personal data must be erased in order to comply with a legal obligation under EU or Member State law to which the Controller is subject;

“GALIANI 18 Ltd is not obliged to delete your personal data where processing is necessary:

  • to exercise the right to freedom of expression and the right to information;
  • to comply with a legal obligation that requires processing;
  • for reasons of public interest in the field of public health;
  • for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
  • for the establishment, exercise or defence of legal claims.

In order to exercise your right to “oblivion”, you must submit a written request sent to GALIANI 18 Ltd., as well as verify your identity and identity with the person to whom the data relates to GALIANI 18 Ltd. by presenting your identification card on the spot for identification purposes.

“GALIANI 18 Ltd. does not delete data that it has a legal obligation to store, including for the defense of legal claims made against it or to prove its rights.

10.5. Право на ограничаване

You have the right to ask GALIANI 18 Ltd to restrict the processing of your personal data where:

– inaccuracies are found in the personal data being processed;

– the processing is unlawful, but you do not want your personal data to be deleted, only their use restricted;

– it no longer needs your personal data for the purposes of the processing, but you require it to establish, exercise or defend your legal claims;

– you have objected to the processing pending verification whether the legitimate grounds of GALIANI 18 Ltd override your interests.

10.6. Право на преносимост

You have the right at any time to obtain from GALIANI 18 Ltd. your personal data in machine-readable format or to request the direct transfer of your personal data to a controller designated by you, where this is technically feasible.

“GALIANI 18 Ltd may ask you to verify your identity by producing your identity card on the spot for identification purposes.

10.7. Право на получаване на информация

You have the right to ask GALIANI 18 Ltd to inform you of any recipients to whom your personal data for which rectification, erasure or restriction of processing has been requested has been disclosed. “GALIANI 18 Ltd may refuse to provide this information if it would be impossible or would require a disproportionate effort.

10.8. Право на възражение

You have the right to object at any time to the processing of personal data concerning you. In these cases, the processing of your personal data by GALIANI 18 Ltd. shall be terminated unless there are lawful grounds for processing.

10.9. Вашите права при нарушение на сигурността на личните Ви данни

If GALIANI 18 Ltd. becomes aware of a breach of security of your personal data that may pose a high risk to your rights and freedoms, it will notify you without undue delay of the breach and of the measures that have been taken or are to be taken.

“GALIANI 18 Ltd is not obliged to notify you if:

– has taken appropriate technical and organisational measures to protect the data affected by the security breach;

– has subsequently taken measures to ensure that the infringement will not result in a high risk to your rights;

– notification would require a disproportionate effort.

11. Conditions for exercising your rights

You may exercise your rights by written application to GALIANI 18 Ltd. You can apply for a copy of the application by contacting. “GALLIANI 18” Ltd. or by electronic application under the Electronic Document and Electronic Signature Act at the following e-mail address: mida.obzor@gmail.com.

The application may be made in person or by an authorised person.

“GALIANI 18 Ltd. will provide you with information on the actions taken in relation to the request for the exercise of your rights within 14 days of receipt of the request. The deadline may be extended by one month, taking into account the complexity and number of requests.

If your rights under Regulation (EU) 2016/679 are violated, you have the right to file a complaint with the Personal Data Protection Commission, the Bulgarian data protection regulator.

12. Link to other websites

The MIDA Hotel website www.mida.bg contains links/references (hyperlinks) to other websites. “GALIANI 18 Ltd does not operate the linked sites and is not responsible for the privacy policies or the content of these sites.

If GALIANI 18 Ltd receives information about illegal activities or illegal information on these websites, it will take immediate measures to remove the electronic references (links) to them.

13. Cookie Policy

The website www.mida.bg of GALIANI 18 Ltd uses analytical cookies.

Thanks to these cookies, we monitor the traffic on our website and can analyze how easily our users work with it (Google Analytics cookies). These cookies do not give us any information about your personal data. They show us which pages of our site you have viewed, whether you have visited our site via a mobile or desktop device and other anonymous data.

14. Amendments to the Privacy Policy

The Privacy Policy may be updated, amended and supplemented from time to time as circumstances require.

Any future changes to this Policy will be posted on this page.