Confidentiality Policy of Astral TRANSTOURS EOOD

Obligatory information on the rights of persons related to personal data protection

Name: Astral TRANSTOURS EOOD
UIC (ЕИК)/BULSTAT: 160070132
Registered office: city of Plovdiv, 56 Kapitan Raycho Str.
E-mail: data@astralholidays.bg
Internet page: www.astraltranstours.com

Information about the competent supervisory body for personal data protection

Name: Commission on Personal Data Protection
Legal residence and registered office: city of Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Telephone: 02 915 3 518
E-mail: kzld@cpdp.bg
Internet page: www.cpdp.bg

Definitions:

For the purposes of the present confidentiality policy, we shall introduce a definition of the following terms:
„PLATFORM/ PLATFORMS/ OUR PLATFORMS“ – The term refers to a virtual platform, owned by the Company, which encompasses the following websites:
„WEBSITE/ OUR WEBSITE“ – Website owned by Astral TRANSTOURS EOOD;

1. Scope and consent:
   Please kindly read carefully the present confidentiality policy. It clarifies issues related to what data and personal information we collect on our platforms – internet pages and the purposes they are used for. Prior to prividing personal data to us through our Webstie, you will be explicitly asked to accept our Confidentiality Policy. By accepting our Confidentiality Policy you agree that we collect and process your personal data for the purposes and in the manners described below.
   
   By visiting and using the page and platforms of Astral TRANSTOURS EOOD, you declare that you have read, understood the contents and agree with the present Confidentiality Policy of Astral TRANSTOURS EOOD. If you do not agree with the present policy please do not use the platforms of Astral TRANSTOURS EOOD.
   You should be aware that we can alter and update the present Confidentiality Policy from time to time. The upper part of this page mentions the date of the last update of the document, which is also its currently active version.
   
   The practices described in this document are only applicable on our platforms, part of which this internet page is as well so we cannot guarantee their application on other internet pages this site redirects you to.
   
   Providing personal data is voluntary. In the event you do not wish to provide us with your personal data, it will not be possible to use it for certain services offered on our platforms. As a result, you will not be able to use the services provided by us.
   
   
2. Grounds for processing of personal data:
   In relation to the legitimacy of the processing of personal data, according to the General Data Protection Regulation (ЕС) 679/2016 from which the grounds on which Astral TRANSTOURS EOOD processes personal data ensue, these grounds are the following:
   • processing is necessary for observing a legal obligation;
   • processing is necessary for the performance of a contract;
   • on the grounds of the consent granted by the data subject;
   • processing is necessary for the purposes of legitimate interests of Astral TRANSTOURS EOOD;
     
     
3. The information we collect:
   Astral TRANSTOURS EOOD is obliged to ensure that the processing of data it receives and/or collects from you be processed in compliance with the active legislation and the principles adopted by virtue of the General Data Protection Regulation (ЕС) 679/2016 and for the purposes outlined in the present policy.
   
   We will be processing the following categories of personal data:
   • name;
   • e-mail address;
   • gender;
   • telephone number;
   • geo-location;
   • date of birth;
   • information from enquiries;
   • information from reviews related to services rendered by Astral TRANSTOURS EOOD or third parties arising from an agreement between the User Astral TRANSTOURS EOOD;
   • other personal information upon participation in games and/or contests;
     
     
   User Astral TRANSTOURS EOOD;
   • other personal information upon participation in games and/or contests
   In addition to that, we automatically accept and record information fro the browser on:
   • IP address;
   • software and hardware characteristics;
   • pages on the website you access;
   • other system information;
   If you have a profile in Astral TRANSTOURS EOOD, we will process your personal data provided in relation to the profile, for example:
   • profile number;
   • history of shopping;
     
     
   The data we collect from you can be processed by staff working for Astral TRANSTOURS EOOD. Such staff may, inter alia, be engaged in the maintenance of that website, the performance of your order, the processing of details of your payment or providing support services.
   
   
4. Method of information collection:
   • using our internet page – by cookies;
   • when you register, creating a profile;
   • when you forward a request;
   • when you make a reservation (online or offline);
   • when you register in order to receive electronic bulletins from us;
   • when you take part in a questionnaire and/or study;
   • when you take part in games, promotions and/or initiatives;
   • when you present user content (reviews);
   • by third parties – persons authorised to make a reservation for you;
   • by third parties– through the profile of Astral TRANSTOURS EOOD in social media platforms such as Facebook, Twitter, Google+, LinkedIn, YouTube, or Instagram and/or by using those to register on our internet page.
     
     
5. In the present policy, the purposes and manners of processing your personal data are:
   • in order to render our services;
   • to connect with our users;
   • in order to respond to your enquiries;
   • in order to customise content;
   • in order to improve our services;
   • in order to improve the efficiency of our internet page;
   • for marketing purposes;
   • for research and analyses;
   • other manners permitted or not prohibited by the legislation.
   You explicitly agree with the collection, use, processing and providing of your information and data as envisaged by the present Confidentiality Policy, as well as with their provision for storage on servers rented or owned by Astral TRANSTOURS EOOD.
   We shall store your data for a period no longer than the one provided for by the law.
   
   
6. Information about third parties – partners of the webstie
   Astral TRANSTOURS EOOD will not provide personal data to third parties except in the case herein specified.
   OUR PLATFORMS may contain links to or from websites of third parties, for example third parties, categorized as distributors, advertisers, service providers.
   OUR PLATFORMS may contain links or redirect to websites or other platforms of social networks, for example Facebook, Google, Twitter, Instagram, etc. In case you follow the link to any of those websites, you should be aware that these websites have their own confidentiality policies and that Astral TRANSTOURS EOOD does not take any responsibility whatsoever for confidentiality policies applied by such third parties.
   In view of the correct functioning of our website and in order to constantly improve the quality of the products offered we use the following programmes and web solutions, which could acquire access to your IP address and analyse your behaviour during your visit of our platforms, including this website, without this identifying you as a natural person:
   
   Google Analytics - https://privacy.google.com/businesses/compliance/We use Google Analytics for collecting statistical information about the users of our internet page. An example is the internet page you are coming from to our page, the country you are in, your language, online behaviour, the browser you are using, etc.
   You can refuse the use of your data by Google Analytics, by means of the add-on Google Analytics opt-out browser add-on, which you can download and install on yout web browser or from here
   
   Mailchimp – (https://mailchimp.com/legal/privacy/ ).). We share your information provided with your consent to third parties, which send promotional e-mails in our name and on our account. In order to stop receiving our promotional e-mails you can unsubscribe from the newsletter in each promotional message you receive from us.
   
   Google Webmaster tools - https://www.google.com/webmasters/;
   Hotjar heatmap - https://www.hotjar.com/privacy/gdpr-compliance;
   Facebook - https://www.facebook.com/business/gdpr;
   Twitter, Google plus, Instagram, Ремаркетинг, Google Adwords Conversion, Facebook Custom Audience.
   
   In case you do not agree with these conditions you will not be able to make full use of our website and you should stop using it in the future.
   
   
7. The policy of using „cookies”
   - What do Cookies constitute? – Cookies are small text files the website can use by recording them on your device. The purpose of cookies is to „remember“ your device and to recognise you upon your next entry into the website thus enabling the adapting of the website to the user’s preferences. All files collecting and memorizing such information are called cookies.
   
   For more information please visit: http://www.allaboutcookies.org/cookies/what-information-in-cookie.html
   
   - What are cookies used for?
   • Cookies are used for various purposes. Astral TRANSTOURS EOOD relies on them in order to better select the site content according to your interests, to monitor what the visiting rate of the website is, for the site’s better functioning, etc.
   • The greater part of cookies is used only with the purpose of finding out how Users reach the website or what their approximate location is. Nevertheless, there are also cookies storing personal information, for example remembering names and passwords.
   The cookies used on this website are specified below:
   • Necessary – needed for the use of the site. Without those cookies certain services and/or functionalities will not be possible to use.
   • Operative – necessary for collecting information on the manners in which users use a specific website. The entire information collected by those cookies is summarised and therefore anonymous. It is used for the site improvement.
   • Functional – necessary for the opportunity to monitor the choices the user makes on the site. In this manner, you are offers a more accurate, adequate and customised experience of the site. The information collected by those cookies can be transferred in anonymous form and your activity on other websites cannot be traced.
   • Targeting – needed to display advertisements more appropriate for you and your interests and for limiting the cases when you see an advertisement, as well as for measurement of the efficiency of advertising campaigns.
     
     In the event you are a registered user, the information collected by those cookies can be combined with your personal data.
   If you wish to learn more about refusing behavioral advertising, please visit www.networkadvertising.org/managing/opt_out.asp.
   
   Cookies can be deactivated by:
   • Special instruments for refusal:
     tools.google.com/dlpage/gaoptout
   • The options of the browser
     PC computer and Mac computer
     Internet Explorer
     Firefox
     Chrome
     Safari
     Mobile devices
     Safari iOS
     Android
   If you have questions regarding the use of Cookies, you can forward them using the following e-mail address – data@astralholidays.bg
   You can also refuse by a statement to that effect forwarded to the e-mail contacts published above on this page.
   
   
8. In relation to General Data Protection Regulation (ЕС) 679/2016, your rights are expressed in:
   Right to be informed:
   You may receive information at any time concerning data identifying Astral TRANSTOURS in relation to the personal data provided by you, as well as about:'
   • the company employee – responsible for the protection of personal data;
   • the intention of Astral TRANSTOURS EOOD to submit your data to third parties;
   • the period for storage of your data;
   • the existing of automated decision-taking;
   • information about the rights you have, including the right to complaint to the Supervisory body – The Commission on personal data protection.
   Right to access to own personal data:
   You are entitled at any time to request information on whether your personal data is stored. You can contact Astral TRANSTOURS EOOD using the contacts provided in the present policy.
   Right to transferability:
   Astral TRANSTOURS EOOD processes your personal data on the grounds of your consent, you are entitled to receive a copy of your data in a structured, commonly used and suitable for machine reading format. You are entitled to request transfer of your data to another personal data administrator whenever possible. All these rights are limited to the personal data you have provided to us.
   Right to correction:
   You are entitled to request correction of your personal data if it is inaccurate, as well as to supplement your personal data.
   Right to deletion:
   You are entitled to request deleting of all your personal data stored by Astral TRANSTOURS EOOD at any time, except in the following situations:
   *you are currently in the process of communication with the Customer Service Department
   *you have made a purchase
   *if you have made a purchase, we will retain your personal data in relation to specific laws requiring us to do so.
   The right to object against processing on the grounds of legitimate interest:
   Upon an objection by you, Astral TRANSTOURS EOOD is obliged to terminate processing unless it proves there are legal grounds for such processing having priority before the interests, rights and liberties of a data subject, or for the ascertaining, exercising or protection of legal consequences.
   Right to object to direct marketing:
   You have the right to object to receiving marketing messages, including against profiling and analysis for the purposes of direct marketing. In the event of an objection in relation to the previous sentence, the processing of your personal data will be terminated.
   
   You can exercise your right to refuse direct marketing in the following manners:
   * by following the instructions in each message sent with a marketing purpose;
   * by editing the settings in your profile;
   How can you apply your rights?
   We treat the protection of personal data very seriously. You can always contact us at data@astralholidays.bg
   Obligations of Astral TRANSTOURS EOOD and measures undertaken in relation to the storage of your personal data:
   
   • Astral TRANSTOURS EOOD has appointed an employee for protection of personal data whose contact details you can find below in the present policy;
   • the processing of data is based on all principles determining the outlook of the General Data Protection Regulation (ЕС) 679/2016;
   • Astral TRANSTOURS EOOD keeps a register of activities of the processing of personal data;
   • Astral TRANSTOURS EOOD assists in exercising the rights of the data subjects in the manners specified in this policy;
   • Astral TRANSTOURS EOOD manages the risk related to personal data protection in compliance with the General Data Protection Regulation (ЕС) 679/2016
   Employee on protection of personal data:
   We appointed a responsible person for the protection of personal data, in order to guarantee that your personal data will always be processed in a correct and legitimate manner. You can contact our employee responsible for the protection of personal data on data@astralholidays.bg
   Right to file a complaint to a supervisory body:
   If you believe that we are processing your personal data in an incorrect manner, you can contact us. You are also entitled to file a complaint before the Commission on Protection of Personal Data using the contacts herein above
   
   
9. Transfer of personal data to third countries:
   In case we transfer your data to third countries, this is performed only pursuant to the conditions of the General Data Protection Regulation (ЕС) 679/2016. For countries in relation to which the European Commission has determined they ensure adequate level of data protection, such transfer can take place without an additional permission being necessary.
   In the event of absence of a decision related to an adequate level of protection concerning the transfer of data to a third country, we will transfer data after you have been informed of the possible risks related to such transfer, due to the absence of a decision as to the adequate level of protection and of appropriate guarantees for the relevant tihrtd country and you have explicitly provided your consent therefor, or when this is required as a result of the performance of conditions of a contract between the data subject and Astral TRANSTOURS EOOD, or such transfer is necessary in order to enter into or perofrm a contract signed in the uinterest of the data suibject between Astral TRANSTOURS EOOD and another natural person or legal entity.