Protecting your privacy is important to us. We value the trust placed in us and respect the resulting commitments to protect the confidentiality of the personal information you provide to us. This document is subject to periodic updates and describes how we use and process your personal information.
When you make a reservation, you will be asked for your name, phone number, email address and any preferences you may have regarding your stay.
We may also collect information about you when you use certain social network services. We may use your information to:
– We use your personal information in order to be able to make a reservation and obtain all necessary data in this regard. When you provide us with information, you allow Customer Service to help you when you need help – including finding the right service for you and anything else related to your booking.
– We may use your contact details to invite you to submit feedback after your stay. This helps other tourists get first-hand information about the hotel and choose the service that best meets their requirements.
– In other cases, we may contact you by email, post and telephone or by SMS, depending on what contact details you have chosen to share with us. This can happen for several reasons:
Your request may need to be answered or processed.
If you have not completed the booking process, we may send you an email reminder to do so.
We may send you additional information about your booking, such as how to contact us if you need assistance while travelling, or a summary of your previous bookings at our hotel.
– We may also use your personal data for marketing activities permitted by law. For example: When you make a booking, we may use your contact details to send you news or information about similar tourism-related products or services. When we think a particular offer may be of interest to you, we may decide to call you on the phone.
– We may use your personal data for the purpose of investigating and preventing fraud and in relation to other illegal or unwanted activities.
– We also use personal data for the purposes of statistical analysis to improve our services, the user experience and the functionality and quality of the tourist information and services we offer.
In accordance with the Bulgarian legislation on the protection of personal data, we comply with all necessary procedures to prevent illegal access and misuse of personal data.
We use appropriate operating systems and procedures to protect the personal data you provide to us. In addition, we use security procedures as well as technical and physical measures to restrict access to and use of personal information on our servers. Only authorized personnel may receive personal information in the course of their work.
We at www.neptunbeach.com are not responsible for the security of your credit card details. United Bulgarian Bank is fully responsible for this through a POS terminal intended for payment.
Pursuant to Regulation (EC) 2016/679 of the European Parliament and of the Council of 27.04.2016 and the internal regulations for the protection of personal data “TOP-99-DDG” OOD, in its capacity as a personal data controller, processes and stores personal data, presented by the company’s customers, for and in connection with the performance of the agreed services.
We hereby inform you that “TOP-99-DDG” Ltd., in its capacity as a personal data administrator, collects, processes, and stores the personal data that you provide to us in connection with the services used by you.
In addition, “TOP-99-DDG” Ltd. acts as a personal data processor when you provide us with personal data necessary for the purposes of paying for services that we provide through our site.
Your personal data is collected, processed and stored by us in accordance with the rules of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016, the Personal Data Protection Act and the Internal Rules for the Protection of Personal Data of “TOP-99-DDG” Ltd.
“TOP-99-DDG” Ltd. meets all the requirements of the new Ordinance on the Protection of Natural Persons with regard to the collection, storage and processing of personal data and the free transmission of such data through the collection of data of natural persons, only and to the extent that it is necessary for the provision of our service and for the fulfillment of concluded contracts and maintains it responsibly and legally.
Please note in particular the following rules and principles in our work that protect your personal data:
“TOP-99-DDG” Ltd. collects and processes your personal data in connection with the provision of tourist, hotel, and restaurant services, sale, management, and letting under
rental of real estate, maintenance of tourist complexes and related services, and conclusion of contracts with the company.
Your personal data is collected and processed on the basis of:
a) A contract you have entered into with us to fulfill our obligation under which we need your personal data or to take steps at your request to enter into a contract;
b) Compliance with a legal obligation that applies to “TOP-99-DDG” OOD;
c) Your express consent given by you as a customer;
d) The legal interest of “TOP-99-DDG” OOD
1.2. When processing and storing personal data, “TOP-99-DDG” Ltd. may process and store personal data in order to protect its legitimate interests and fulfill its legal obligations to the National Revenue Agency, the Ministry of Tourism, the Ministry of Internal Affairs, Municipality of Nessebar and other state and municipal authorities.
“TOP-99-DDG” Ltd. collects, processes, and stores the personal data you provide us for using our services and for concluding a contract with the company for the following purposes:
creating a profile and ensuring full functionality in the provision of our services;
ensuring the performance of a contract concluded with you;
individualization of a party to the contract;
tax, accounting, and statistical purposes;
sending information messages about services, offers, and price offers provided by “TOP-99-DDG” OOD;
Protection and security of individuals and their property.
“TOP-99-DDG” Ltd. observes the following principles when processing your personal data:
– legality, good faith, and transparency;
– limitation of processing purposes;
– significance for the purposes of processing and minimization of the collected data;
– accuracy and timeliness of the data;
– limiting the storage to no more than is necessary to achieve the purposes for which the personal data is processed;
integrity and confidentiality of processing and ensuring an adequate level of security of personal data.
“TOP-99-DDG” Ltd. performs the following operations with your personal data:
– user registration in our database in order to fulfill our contractual obligations with you, as well as the legal obligations of our company;
– Sending information messages for the purpose of the process of informing customers about improvements or changes in services and offers.
5.1. “TOP-99-DDG” Ltd. processes the following categories of personal data:
a) Data: Your individual data (name and surname, e-mail, country, telephone). Purpose: Registration of a user in a database, in a tourist register, preparation of written contracts; for accounting purposes and payments by you; Making contact with the client and sending information to him for sending newsletters and offers; Reason for processing: fulfillment of contractual obligations under a contract between you and “TOP-99-DDG” OOD;
b) Data: Your permanent address, date of birth (for foreign citizens), personal identification number (for Bulgarian citizens), citizenship. Purpose: Registration of a user in a database and in a tourist register, drawing up written contracts and notarial acts, and accounting purposes. Reason for processing: fulfillment of contractual obligations under a contract between you and “TOP-99-DDG” OOD;
c) Data: your credit card numbers Purpose: Making payments of your choice of credit card payment through an online system. Reason for processing: fulfillment of contractual obligations under a contract between you and “TOP-99-DDG” OOD;
(d) Data: Photographs taken by video surveillance. Purpose: Ensuring the security of people and property. Reason for processing: fulfillment of contractual obligations under a contract between you and “TOP-99-DDG” OOD and the legitimate interest of the company.
5.2. “TOP-99-DDG” Ltd. does not collect or process personal data revealing racial or ethnic origin; political, religious or philosophical beliefs, membership in trade unions and party organizations; genetic and biometric data, health data or data about people’s sex life or sexual orientation.
5.3. Personal data is collected by “TOP-99-DDG” OOD from the relevant persons.
5.4. The company does not use software for automated solutions when processing personal data.
“TOP-99-DDG” Ltd. stores your personal data no longer than the period of performance of your service or the term of the contract between us. After the expiration of this period, TOP-99-DDG Ltd. takes the necessary care to delete and destroy all your data without undue delay and we will notify you further if the data retention period will be extended in order to achieve the objectives, the performance of the contract, in view of our legitimate interests or otherwise.
“TOP-99-DDG” Ltd. stores the personal data that it is obliged to store according to the current legislation for the relevant period, provided for in the regulatory documentation.
“TOP-99-DDG” OOD may, at its discretion, transfer all or part of your personal data to processors for processing purposes, subject to compliance with the requirements of Regulation (EC) 2016/679.
“TOP-99-DDG” OOD will notify you in this case
and intends to transfer all or part of your personal data to third parties or international organizations.
If you do not wish all or part of your personal data to continue to be processed by us for any specific processing purpose, you may withdraw your consent to the processing at any time by a free text request.
We may ask you to confirm your identity and the identity of the data subject.
Provided that you withdraw your consent to the processing of personal data, which is necessary for us to fulfill our contractual obligations to you and to provide our services, we will stop providing the service.
You have the right to request and receive confirmation from “TOP-99-DDG” OOD if personal data relating to you is being processed.
You have the right to access the data related to you, as well as the information related to the collection, processing, and storage of your personal data.
“TOP-99-DDG” Ltd. will provide you, upon request, a copy of the processed personal data relating to you, in electronic or other appropriate form.
Providing access to the data is free of charge, but “TOP-99-DDG” Ltd. reserves the right to impose an administrative fee in case of repeated or excessive claims.
You can correct or complete inaccurate or incomplete personal data related to you by sending a request to “TOP-99-DDG” OOD.
11.1. You have the right to ask “TOP-99-DDG” OOD to delete personal data relating to you, and “TOP-99-DDG” OOD will be obliged to delete it without undue delay, provided that any of the following reasons are present :
– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
– you withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
– you object to the processing of personal data related to you, including for the purposes of direct marketing, and there are no legal grounds for the processing;
– personal data are processed without legal grounds;
– personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to “TOP-99-DDG” OOD;
– personal data are collected in connection with the provision of information society services.
11.2. “TOP-99-DDG” Ltd. is not obliged to delete personal data if it stores and processes them:
to exercise the right to freedom of expression and the right to information;
– in order to comply with a legal obligation that requires treatment provided for in EU law or Member State law to be applied to the controller or with a view to the performance of a public interest assignment or the exercise by officials of an authority granted to him;
– for reasons of public interest in the field of public health;
– for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
– to establish, exercise or defend legal claims.
11.3. To exercise your right to be “forgotten” (delete all your personal data), you must submit a written request sent to an employee of “TOP-99-DDG” OOD, as well as certify your identity and the identity of the person, to which the data relates, by presenting an identity document in order to identify the person to whom the data relates.
“TOP-99-DDG” Ltd. does not delete the data that it must keep under a legal obligation, including for defense against claims brought against it or to prove its rights.
You may request TOP-99-DDG Ltd. to limit the processing of relevant data when:
– you dispute the accuracy of the personal data for a period that allows “TOP-99-DDG” OOD to check the accuracy of the personal data;
– the processing is illegal, but you do not want your personal data to be deleted, but only to limit its use;
– “TOP-99-DDG” OOD no longer requires personal data for the purposes of processing, but you require them to establish, exercise or defend your legal claims;
You have objected to the processing and are awaiting a check on whether the legal grounds of “TOP-99-DDG” OOD take precedence over your interests.
You can at any time download the data that is stored and processed for you in connection with the use of the services of “TOP-99-DDG” OOD, by means of an e-mail request. You can request that “TOP-99-DDG” OOD transfer your personal data directly to an administrator of your choice, when this is technically feasible.
You may request that we inform you of all recipients to whom personal data has been disclosed, for which correction, deletion or restriction of processing has been requested. “TOP-99-DDG” OOD may refuse to provide this information if it would be impossible or would require excessive effort.
You can at any time object to the processing of personal data by “TOP-99-DDG” OOD that relates to you, including whether it is processed for profiling or direct marketing.
1. If “TOP-99-DDG”
Ltd. has detected a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we will notify you without undue delay of the breach, as well as of the measures taken or those to be taken.
2. “TOP-99-DDG” OOD is not obliged to notify you if we have taken appropriate technical and organizational precautions concerning the data affected by the security breach or have subsequently taken measures to ensure that the breach will not result in a high risk to your rights or notification would require excessive effort.
“TOP-99-DDG” Ltd. will not transfer your data to third parties.
In the event of a violation of your rights according to the above or applicable data protection laws, you have the right to file a complaint with the Commission for the Protection of Personal Data, with an address in Sofia, 1592, “Prof. St. Tsvetan Lazarov”, tel.: 02 915 3 518, email: kzld@government.bg, kzld@cpdp.bg, website: www.cpdp.bg.
You can exercise your rights to the protection of your personal data through the relevant methods and make your claims in any form that contains a statement and identifies you as the data owner.
We provide you with information about the data controller:
“TOP-99-DDG” Ltd
EIK: 102045917
Hotel Neptun Beach
Sunny Beach Resort
Nessebar 8240, Bulgaria
Headquarters and place of management: Republic of Bulgaria, Burgas Region, Nessebar Municipality, Sunny Beach Resort, Neptune Beach Hotel
Address of performance of the activity: Republic of Bulgaria, Burgas Region, Nessebar Municipality, Sunny Beach Resort, Neptune Beach Hotel
Email: office@neptunbeach.com
+359 886 303046