Last update: 23.05.2018
This Security and Privacy Policy ("Security Policy") applies to Arte Spa & Park Hotel. Arte Spa & Park Hotel (referred to herein as "we" and "us") is responsibly committed to protecting your personal data and we want you to be aware of what categories of data Arte Spa & Park Hotel collects and processes about you, for what purpose, on what basis, for what period, to whom it could transfer them and how it stores them.
Please note that by using this website (Site) or its mobile version, you consent to all actions taken by us with respect to your personal information as described in this Security Policy. If you do not agree to the terms of this Policy, please do not use the Site or provide personal information to Arte Spa & Park Hotel through our Site or otherwise.
We, At Arte Spa & Park Hotel, we strive to provide our customers with exceptional products, services and a top-class experience. We place a high priority on our activity, but above it we always put Loyalty and respect for our customers. We are fully aware of the importance of confidentiality and protecting everyone's privacy. That's why we have created this Security and Privacy Policy at Arte Spa & Park Hotel to make public and transparent our procedures for handling personal data that we collect from or about you at our hotel, on this website or through our apps, through written or verbal communication with us when you visit one of our sites or from other sources.
Please have note that this Security Policy does not apply to the way in which we process personal data on behalf of or under the instructions of third parties, such as travel agents, airlines, car rental companies and other service providers, companies that organise or offer package travel services, marketing partners or corporate clients.
CONSENT TO THIS DATA PROTECTION POLICY at Arte Spa & Park Hotel
"Personal data" means :
- any information relating to an identified natural person or an identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- or, in a nutshell, personal data, is any information or data that relates to you or can "lead" to you. For example - personal data is undoubtedly your three names in combination with your ID number. But personal data is also for example, and the data from the payment instruments you use, which combined with additional information - places you have paid can reveal a lot about you. Here's how, and without your name or photo explicitly stated, the "traces" your data leaves can reveal your interests, your property, your routes, etc.
At Arte Spa & Park Hotel, we are acutely aware of the challenges faced in protecting our clients' privacy and strive to protect it to the fullest extent.
By using our website, registering and visiting our hotel, and/or in the course of implementation of any of our products or services, you consent to the collection and processing of of your personal data as described in this Security Policy.
Arte Spa & Park Hotel is owned by Arte Hotel Ltd, UIC: 115891365, which is the data controller for all guests.
Follow one of the links below to go to a specific section:
Principles we follow when processing your personal data
Categories of Personal Data we collect from you
Categories of Personal Data we collect about you by third parties
Use of the personal data we collect about you - lawfulness and purposes
Third parties with whom we share your personal data
Period for which we keep your personal data
Your rights as a data subject
Security
Other information
Confidential information
Links to third party websites and services
Protection of Personal Data
Storage of personal data
Choice - Marketing Communications
Changes to Security Policy
Contact us
Changes to the Privacy Security Policy Arte Spa & Park Hotel
PRINCIPLES WE FOLLOW WHEN PROCESSING YOUR PERSONAL DATA
These are Arte Spa & Park Hotel's six principles that guide us when processing your personal data:
1. TransparencyA: When Arte Spa & Park Hotel collects and processes your personal data, we we tell you all the information about how and from what sources we collect your data, for what purpose we collect it, for how long we keep it, to whom we could potentially transfer it, who are the potential recipients of your data, what are your rights as a data subject.
2. ProportionalityA: We at Arte Spa & Park Hotel only collect the minimum necessary personal data, just as is necessary to carry out our activities effectively.
3. Accuracy and timeliness: We at Arte Spa & Park Hotel we only process up-to-date data that corresponds to the truth. We undertake all measures to ensure that the personal data we hold is accurate and up to date.
4. Time Limit: We at Arte Spa & Park Hotel only store your personal data for the period necessary for the effective exercise of our activity and in accordance with the provisions of the law.
5. Compliance with the rights of data subjects – We at Arte Spa & Park Hotel ensure compliance with your rights to access, correct, delete your personal data that we process.
6. Confidentiality and securityA: We at Arte Spa & Park Hotel have provided all the necessary administrative, technical and organisational measures to protect your personal data against unwanted changes, accidental or unlawful loss or unauthorised use, disclosure or access.
CATEGORIES OF PERSONAL DATA WE COLLECT FROM YOU
At every point of contact or interaction (booking, check-in, visit, etc.) with you - our guests, as well as when performing various aspects of of our business, we may collect personal data about you that you provide to us on a continuous basis. These categories of personal data are:
Contact information - your contact information, name, postal address, e-mail address and telephone number;
Identification information - details from your ID, in case you are our guest
Sensitive personal data - data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the sole purpose of identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person. We at Arte Spa & Park Hotel generally not We do not collect sensitive information unless it is voluntarily provided by you or unless we are required to do so under applicable laws or regulations. We may use health information you provide to better serve you and meet your specific needs (for example, to provide access for people with disabilities).
Personal data of children
We at Arte Spa & Park Hotel do not collect and we process personal data from and for persons under 18 years of age. As a parent or legal guardian, do not allow your children to send personal data without your permission.
Payment information - details of your payment service provider, credit card number or other payment account number, details of account related to mobile payments; billing address and other payment details necessary to make, evidence and post your payment.
Data related to your reservation, stay or visit - information about your stay, date of arrival and departure, goods and services purchased; data collected through , the use of closed-circuit television systems, your card-key and other security systems.
Data related to your personal preferences and interests, expressed during your stay (e.g. smoking or non-smoking room, preferred floor, type of bedding, type of newspapers/magazines, sports, cultural interests). Your questions/comments during or after your stay at our hotel or any of its facilities.
Communication and correspondence - Information related to the provision of the service - records and copies of your correspondence if you contact us; and any communications between you and employees of Arte Spa & Park Hotel.
Information about participation in an event - Data related to your participation in an event held at PBR - conferences, trainings, seminars, etc.: If you are participating in an event held at PBR, we collect event details, the date of the event, the number of guests, guest room details, and for corporate events, information about your company or organization. We also collect the details of participants - in these cases we may share your personal data with the event organisers.
Loyalty programme - Data linked in our membership program or program for loyal customers, participation in a contest, sweepstakes or marketing program, information related to the purchase and receipt of products or services from any of our sites in the hotel building;
Marketing data - Data related to our surveys - we may sometimes ask you to participate in our customer surveys. Participation is always voluntary and an opportunity only. We may invite you to participate in our contests, raffles and other events, information about which you can share with your social media contacts for voting, sharing suggestions or other promotions. Participation in such promotions is always an option of your choice and not mandatory.
Video information For your security, we use a surveillance system - video cameras located at various points in the hotel building. All security cameras are marked with information signs in visible places. The cameras can to take or record photographs of guests and visitors in public places, as well as location-related information during your stay at our facilities. PBR does not use security or covert surveillance systems. We do not carry out covert video recording.
Your IP address
When you use the Arte Spa & Park Hotel website, we process data about your IP address. IP The address is is a set of numbers that are always set on your computer when you connect to your ISP or over your LAN/WAN. The network servers automatically identify your computer by the IP address assigned by it during your online session.
Arte Spa & Park Hotel may collect the IP addresses of users of its website for system administration purposes and to verify the use of our Internet addresses. We may also use IP addresses to identify users of our sites when we feel it is necessary to enforce compliance with the sites terms of use or to protect our service, websites or other users.
In addition to the information we collect directly from you, we may also receive information about you from third parties.
PERSONAL DATA WE COLLECT FROM THIRD PARTIES
In a certain number of cases we receive your personal data from third parties. These are:
Our online booking partners such as Booking.com, Expedia.com, etc.
Social networks - If you check in to a place of stay - our hotel - on social networks, if you choose to participate in social networking activities or offerings, from PBR, we may receive certain information from your social networking account in accordance with your settings on the social networking service, such as location, check-ins, activities, interests, photos, status updates and friends list.
USE OF THE PERSONAL DATA WE COLLECT ABOUT YOU
Lawfulness of processing
Arte Spa & Park Hotel processes your identification information in accordance with the requirements of the Civil Registration Act - Article 99.
Information relating to your payment, PBR processes your personal data as necessary to comply with tax, financial or other domestic legislation.
The other categories of information listed in this Privacy Policy Arte Spa & Park Hotel processes in the framework of the performance of the service contract with its customers.
Arte Spa & Park Hotel processes your personal data for the following purposes:
Arte Spa & Park Hotel processes your personal data for the purposes of the accurate and fair performance of its contractual obligations to its customers, including the provision and personalization of the services that customers request and expect from us.
Arte Spa & Park Hotel processes your personal data related to the payment of our services in order to make the payment accurately and precisely.
Arte Spa & Park Hotel processes your personal data for the purpose of clear and accurate communication with you regarding your booking and stay with us.
Arte Spa & Park Hotel personal you data recorded on our security cameras in order to ensure the protection of public order and security on the premises of the hotel and its facilities.
Arte Spa & Park Hotel processes your personal data for the purposes of our customer satisfaction surveys and loyalty programmes.
Arte Spa & Park Hotel processes your personal data for the purposes of tax and accounting law requirements - to enable us to declare and report our revenue
POTENTIAL RECIPIENTS OF YOUR PERSONAL DATA
Employees of Arte Spa & Park Hotel who have access to your personal data:
At Arte Spa & Park Hotel we ensure that our employees only have access to personal data that is directly relevant to their work. To offer you the best service, we provide minimum access to your data by authorised personnel:
Reservation staff.
IT department staff.
Medical staff, where required.
Legal department staff if required.
Our partners:
- payment service providers - banks, out-of-cash payment systems, payment instruments such as PayPal, etc. Your personal data will be provided to whichever payment service provider you choose to make a payment with us.
– organizers of group events and meetings: in the event that you visit Arte Spa & Park Hotel as part of a group event or meeting, the meeting and event planning information collected will be shared with the organizers of those meetings and events and, where appropriate, with the guests who are organizing or participating in the meeting or event.
– accounting service providers that proceed our accounting
State and local government bodies -
- In order to meet the requirements of the civil registrations art.99, Arte Spa & Park Hotel provide your identification data as well as your residence data to the local authorities and, upon request, to the Ministry of the Interior.
- In order to meet the requirements of domestic legislation, Arte Spa & Park Hotel provides information to the NRA.
THE PERIOD FOR WHICH WE STORE YOUR PERSONAL DATA:
Arte Spa & Park Hotel keeps your personal data for the period necessary to fulfil the purposes described in this Security Policy, or required by Bulgarian law.
Arte Spa & Park Hotel keeps your personal data recorded on our security cameras for a period of the allowed months.
Arte Spa & Park Hotel your personal information collected in order to fulfill guest reservations for the specified period of time from the completion of your stay.
We will destroy your personal data as soon as possible and in such a way that it cannot be reproduced or retrieved.
Arte Spa & Park Hotel guarantees that if your data exists printed on paper, it will be destroyed in a secure manner, for example by machine shredding or burning the paper documents or in any other such manner, and if in electronic form, the personal data will be destroyed by technical means so that it cannot be reproduced or retrieved.
Arte Spa & Park Hotel guarantees that in the case of collection of personal data for the purpose of specific campaigns, lotteries and any other promotions, the processing period will be indicated in any case, a participants will be informed about it.
YOUR RIGHTS AS A DATA SUBJECT
At any time, you have the right to:
How to request access to your data?
We at Arte Spa & Park Hotel, we understand that you would like to be informed what personal information we have about you. We would be happy to assist you with your request for access to your personal data. In order to protect your personal information, however, at the time of your request we will want to make sure that you are the subject of the requested data. When you make an in-person request, we will require you to provide some form of photo identification, such as a passport or driver's license, and you will be asked to sign a request form.
When you make a request for access to personal data, not on-site with us, but by other means, we require that the request be made in writing by email, fax or letter, including a copy of identification and signature. We also need home and business addresses and phone numbers so that we can check them against our files and verify your identity.
The above porcedure is needed to create an audit trail of how the request was processed. When a request is made, any correspondence or application is stored and added to your personal information.
Arte Spa & Park Hotel reserves the right to refuse access to your personal information in certain circumstances. If your personal information is not disclosed to you, you will be provided with the reasons for the denial of access to your personal information.
At any time, if you are concerned that your data protection rights are infringed, you have the right to lodge a complaint with the competent data protection supervisory authority - Data Protection Commission - https://www.cpdp.bg/
SECURITY
Arte Spa & Park Hotel will take reasonable steps to (a) protect personal information against unauthorized access, disclosure, alteration or destruction and (b) keep personal information accurate and up-to-date as appropriate. Arte Spa & Park Hotel employs an expert internal team of IT professionals who are responsible for creating, updating and managing the security program of Arte Spa & Park Hotel.
In the event of a security incident, Arte Spa & Park Hotel will notify regulatory authorities and/or users as required by applicable laws or regulations.
For online transactions, we use technological means within reason to protect the personal information you send us through our website. Please note that Unfortunately, there is no security system or data transfer system over the Internet that is guaranteed to be completely secure.
In order to protect your privacy, please do not send us payment card numbers or other sensitive personal data by email.
CHOICE - MARKETING COMMUNICATIONS
If you have provided us with contact information (mailing address, fax number, email address, or phone number), we may want to notify you depending on your stated preferences for our products and services or invite you to participate in events by and through email, online advertising, social media, phone, text message (including SMS and MMS), targeted notifications, in-app notifications, postal mail, our customer service call center, and other means (including on-site messaging such as in-room television).
If you prefer not to receive marketing material by email, you can unsubscribe at any time by using the unsubscribe function in the email you receive from us. Unsubscribe requests may take up to ten business days to complete.
To unsubscribe from text messages, tell the hotel reception that you do not wish to receive text messages from the hotel, or reply "STOP" to the message you receive.
To be added to Arte Spa & Park Hotel's internal Do Not Call list, send a message to: info@newsite.site.
CHANGES IN Security Policy
We may change this Security Policy from time to time. When we make material changes to this Security Policy, we will post a link to the updated Security Policy on the home page of our site and, if you have registered for any of your products or services, we may also notify you through the communication channel provided by you. You will know when this Security Policy has been updated by checking the link and date at the top of the Security Policy. Any changes to our Security Policy will be effective upon posting of the revised Security Policy on the Site. By using the Site and/or any of our products and services and/or accepting the updated Security Policy following such changes, you accept the then-current modified Security Policy.
Back to top
LINK WITH US
If you have any questions about this Security Policy or the way Arte Spa & Park Hotel processes your personal data, or if you wish to provide us with a compliment or complaint, you can contact us by email at info@newsite.site. We will respond within 30 days or sooner if applicable.
Cookies
Our websites and mobile apps can use technology
called cookies. "A cookie is a small text file that is placed on your hard drive by a server. "Cookies allow our websites and mobile applications to respond to you as a user.
The website or mobile app can tailor its operations specifically to your needs, likes and dislikes by collecting and remembering information about your preferences.
It is your choice whether or not to accept cookies. Most browsers on the web
automatically accept cookies, but you can change your browser settings to refuse cookies or receive a warning before the cookie is saved if you prefer.
If you choose to refuse cookies, you may not be able to take full advantage of the interactive features of our website. For further information regarding the use of cookies, see our Cookie Policy.
