{"id":477,"date":"2018-06-25T20:43:12","date_gmt":"2018-06-25T20:43:12","guid":{"rendered":"https:\/\/hotelshipka.com\/?page_id=477"},"modified":"2026-03-15T20:57:04","modified_gmt":"2026-03-15T20:57:04","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/hotelshipka.com\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"
\ud83d\udd12 PRIVACY POLICY<\/h5>\n

\n This Privacy Policy governs the manner in which “TEXTRON HOLIDAYS” LTD<\/strong> collects, processes, and stores your personal data in accordance with the General Data Protection Regulation (EU) 2016\/679 (GDPR) and Bulgarian legislation.\n<\/p>\n\r\n\t\t

\r\n\t\t\t\n

\r\n\t\t

1. DATA CONTROLLER IDENTIFICATION<\/div>\r\n\t\t
\r\n\t\t\t

\n

Data Controller:<\/strong><\/p>\n

    \n
  • Company Name:<\/strong> TEXTRON HOLIDAYS LTD<\/li>\n
  • UIC (EIK):<\/strong> 204590568<\/li>\n
  • Registered Office:<\/strong> Bulgaria, Sunny Beach Resort, Hotel Shipka<\/li>\n
  • Facility:<\/strong> Hotel Shipka (Categorization Certificate \u2116 [ENTER NUMBER])<\/li>\n
  • Contact:<\/strong> Any questions regarding this policy can be submitted via the Contact Form on the website.<\/li>\n<\/ul>\n

    The Hotelier processes the provided data in accordance with the Personal Data Protection Act and Regulation (EU) 2016\/679.<\/p>\n

    <\/p>\r\n\t\t<\/div>\r\n\r\n\t\t\n

    \r\n\t\t

    2. CATEGORIES OF PERSONAL DATA AND PURPOSES OF PROCESSING<\/div>\r\n\t\t
    \r\n\t\t\t

    \n

    2.1. Categories of Data:<\/strong><\/p>\n

      \n
    • Booking Data:<\/strong> First and last name, email address, phone number.<\/li>\n
    • Address Registration Data (Required by Law):<\/strong> Name, PIN\/FIN, identity document data (number, date of issue\/expiry), citizenship, and date of birth.<\/li>\n
    • Payment Data:<\/strong> Transaction information via EasyPay, bank transfers, or payment operators.<\/li>\n
    • Technical Data:<\/strong> IP address and cookies during website visits.<\/li>\n<\/ul>\n

      2.2. Purposes and Legal Grounds:<\/strong><\/p>\n

        \n
      • Execution of a Contract (Art. 6, para. 1, b. “b”):<\/strong> To process your reservation, stay, and manage payments (including the 20% deposit).<\/li>\n
      • Legal Obligation (Art. 6, para. 1, b. “c”):<\/strong> Mandatory registration in the Unified Tourist Information System (ESTI)<\/strong> as per the Tourism Act.<\/li>\n
      • Legitimate Interest:<\/strong> Ensuring security within the hotel and analyzing website traffic.<\/li>\n<\/ul>\n

        <\/p>\r\n\t\t<\/div>\r\n\r\n\t\t\n

        \r\n\t\t

        3. DATA DISCLOSURE AND RETENTION PERIODS<\/div>\r\n\t\t
        \r\n\t\t\t

        \n

        3.1. Data Recipients:<\/strong><\/p>\n

        Your data is provided to third parties only when legally necessary:<\/p>\n

          \n
        • Ministry of Tourism and Ministry of Interior (via the ESTI system).<\/li>\n
        • National Revenue Agency (NRA) and accounting services (for tax control purposes).<\/li>\n
        • Banking institutions for payment processing.<\/li>\n<\/ul>\n

          3.2. Retention Periods:<\/strong><\/p>\n

            \n
          • Tourist Registers (ESTI):<\/strong> 5 years, as per the Tourism Act.<\/li>\n
          • Accounting Documents:<\/strong> 10 years, as per the Accountancy Act.<\/li>\n
          • Inquiries:<\/strong> Until the relevant communication is concluded.<\/li>\n<\/ul>\n

            <\/p>\r\n\t\t<\/div>\r\n\r\n\t\t\n

            \r\n\t\t

            4. COOKIES AND SECURITY<\/div>\r\n\t\t
            \r\n\t\t\t

            \n

            4.1. Cookies:<\/strong><\/p>\n

            The website uses cookies for analysis (Google Analytics) and the correct functioning of the reservation form. You can manage them through your browser settings.<\/p>\n

            4.2. Security:<\/strong><\/p>\n

            We apply technical protection measures, including traffic encryption via SSL certificate<\/strong> and restricted access to administrative systems.<\/p>\n

            <\/p>\r\n\t\t<\/div>\r\n\r\n\t\t\n

            \r\n\t\t

            5. YOUR RIGHTS UNDER GDPR<\/div>\r\n\t\t
            \r\n\t\t\t

            \n

            As our client, you have the following rights:<\/p>\n

              \n
            • Right to access and rectification<\/strong> of your data.<\/li>\n
            • Right to erasure (“Right to be forgotten”):<\/strong> Unless the data is required for a legal obligation (e.g., ESTI).<\/li>\n
            • Right to object<\/strong> to processing.<\/li>\n
            • Right to lodge a complaint<\/strong> with the CPDP (Sofia, 2 Prof. Tsvetan Lazarov Blvd.).<\/li>\n<\/ul>\n

              Changes:<\/strong> The Hotelier may update these rules by publishing the new version on the website.<\/p>\n

              <\/p>\r\n\t\t<\/div>\r\n\r\n\t\t\n\t\t<\/div>\r\n\r\n\t\t\n

              Contact Us<\/h5>\n

              If you have any questions regarding this Policy, please use our contact form:<\/p>\n\n

              \n

              <\/p>

                <\/ul><\/div>\n
                \n
                \n<\/fieldset>\n