Privacy Policy

Mandatory information on the rights of individuals with regard to the protection of personal data (Privacy policy)

Reservation Ltd. respects the rights of its customers to the protection of their personal data with regard to the processing of personal data and has taken all necessary measures to ensure the necessary protection. The purpose of this document is to inform Users and customers of the website http://www.reservation.tools/ about how the Company processes their personal data, as well as about all the rights they have with regard to the relevant operations. Reservation Ltd complies with all the requirements of the General Data Protection Regulation and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation GDPR). The purpose of this regulation is to ensure the protection of natural persons' data from all EU member states and to unify the regulations related to data processing.

Definitions

“We”/“Us”/“Our”/Company means Reservation OOD with registered office and management address at Tintyava 15, Sofia. “You”/“Your”/“Yourself”/“User” means the User of the Site and/or the client of the “Services” (as defined below), including, but not limited to, Users offering their relevant services through the Site. “Services” means any services offered by the Company through the site http://www.reservation.tools/ including, but not limited to, use of a reservation management application. “Site”/“Website” means the website http://www.reservation.tools/ through which the Company provides its Services.

Administrator information

Name: Reservation Ltd. UIC/BULSTAT: 203865762 Registered office, address and correspondence address: Sofia, 15 Tintyava Str. E-mail: sales@reservation.tools Phone: +359 24950888

Information about the Supervisory Authority

1. Name: Personal Data Protection Commission 2. Headquarters and address of management: 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd. 3. Correspondence address: 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd. 4. Telephone: 02 915 3 518 5 E-mail: kzld@government.bg, kzld@cpdp.bg 6. Website: www.cpdp.bg

Grounds for collecting, processing and storing your personal data

Art. 1. (1) The Company collects and processes your personal data in connection with the provision of its Services and the conclusion of contracts with the Company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and in particular on the following grounds: · explicit consent provided by you as a customer; · compliance with a legal obligation applicable to the Company; · performance of the Company's obligations under a contract with you; · for the purposes of the Company's legitimate interest. (2) The Company is the administrator of your data as a User of our Services. The Company acts as a personal data processor with respect to the personal data that you process using our Services, by storing them.

What type of personal data will the Company collect, process and store?

Art. 2. (1) The Company processes the following categories of personal data and information: Your personal data (name and surname, e-mail, country, telephone). The User provides all or part of these personal data only if the use of the relevant Service requires it. Example: submitting a request for a sales offer can be done only by providing an e-mail, telephone and name; billing operations related to the use of our Services by the User may require a name and surname, e-mail, telephone and address of residence. (2) Other data that the Company processes: · Data related to the user's navigation session on the website and/or the use of our Services. For example, when you log in to our website or to your account. This data includes the IP address you use, the geographical location and the identifier of the device you use to access our website; · Data related to job applications and provided by candidates (3) Data of the Company's users Users: this is the data necessary to make a reservation, which may include name and surname, e-mail, telephone, Facebook profile. (4) The Company will not collect or process personal data that relates to the following: · reveals racial or ethnic origin; · genetic and biometric data, health data or data about sex life or sexual orientation; · reveals political, religious or philosophical beliefs or trade union membership. (5) Personal data is collected by the Company from the persons to whom it relates.

How the Company collects different types of personal data

Purposes and principles for collecting, processing and storing your personal data

Art. 3. (1) The Company collects and processes the personal data that you provide to us in connection with the use of our Services and the conclusion of a contract with the Company, including for the following purposes: · providing our Services; · creating a user profile on the site; · statistical purposes; · individualization of a party to this contract; · accounting purposes; · developing, personalizing and optimizing our Services according to the preferences of the Users and interactions with the website; · ensuring the implementation of this contract for the provision of the relevant Service; · contacting you to communicate general information or information about the specific user, including promotional messages related to our services, as described in para. 4 (Types of messages and means of communication) · sending a regular newsletter to which you have subscribed with your explicit consent; · sending marketing messages and information to third parties after receiving your explicit consent to this; · organizing, implementing and managing marketing activities, including events, competitions, online courses, etc., both online and offline, related to our Services. This may include registering participants, as well as communication activities before, during and after the event or selecting potential winners and contacting them; · managing customer service requests and providing technical support via call center, chat and email; · processing job applications related to job offers announced by the Company, or processing data related to freelance projects related to our Services; · information security. (2) The Company adheres to the following principles when processing your personal data: · lawfulness, fairness and transparency; · limitation of the purposes of processing; · compliance with the purposes of processing and minimization of data collection; · accuracy and limitation of data; · limitation of storage to achieve the purposes; · integrity and confidentiality of processing and ensuring an adequate level of security of personal data. (3) When processing and storing personal data, the Company may process and store personal data to protect the following legitimate interests: · fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state or municipal authorities. (4) Types of messages and means of communication Communication between the Company and the User may be carried out by telephone, e-mail, online chat, SMS, Facebook Messenger or similar means and may include general information or information about the specific User, as well as the following types of messages: · Promotional and marketing messages: Messages related to various marketing activities of the Company, including promotional and special offers, promotions of new services and products, competitions, events, etc.; · Messages related to corporate communication: Messages related to news and updates regarding the Company's activities; · Messages related to the use of the Company's Services: These messages may include information about price tariff updates, website functionality upgrades, new Services and/or products, useful information and content related to our Services. This category may also include all types of administrative messages regarding the provision of our Services, as well as payment information. Examples: temporary suspension of service due to technical intervention or messages related to billing, invoicing or service issues when the User uses our Services.

Where is your personal data stored and how long is the storage period?

The User's personal data may be stored and processed by the Company in different EU countries in order to ensure the proper provision of our Services and to comply with their legal obligations. Art. 4. (1) The Company stores your personal data for a period not longer than the duration of your web profile. After the expiration of this period, the Company will take reasonable care to delete and destroy all your data without undue delay. (2) The Company will notify you in the event that the storage period needs to be extended to achieve the objectives, the performance of the contract, in view of the legitimate interests of the Company or otherwise. (3) The Company stores the personal data that it is obliged to store under applicable law for the necessary period, which may exceed the duration of your registration.

Transfer of your personal data for processing

Art. 5. (1) The Company may, at its discretion, transfer all or part of your personal data to personal data processors for the purposes of the processing, subject to the requirements of Regulation (EU) 2016/679. (2) The Company shall notify you in the event of an intention to transfer all or part of your personal data to third countries or international organizations.

Your rights when collecting, processing or storing your personal data

Art. 6. (1) Each User has the right to request from the Company access, correction or deletion of their personal data or restriction of data processing. In addition, you have the right to object to the processing of personal data concerning you, as well as the right to data portability, as described in the paragraphs below. The relevant requests can be submitted to the Company by free text message sent to sales@reservation.tools. (2) In order to proceed with the User's request, the Company may require you to prove your identity and your identity with the data subject.

Right of access

Art. 7. (1) You have the right to request and receive from the Company confirmation as to whether or not personal data concerning you are being processed. If your data are being processed, you have the right to receive the following information: · Purposes of the data processing; · Categories of personal data; · Recipients or categories of recipients to whom your personal data will be or have already been disclosed in third countries or international organizations. (2) The Company shall provide you upon request with a copy of the personal data processed concerning you, in electronic or other appropriate form, and shall be entitled to pay an administrative fee depending on the administrative costs involved.

Withdrawing consent to the processing of your personal data

Art. 8. (1) If you do not want all or part of your personal data to continue to be processed by the Company for a specific or any processing purpose, you can withdraw your consent to processing at any time by sending a free text message to sales@reservation.tools. (2) Your account will be deleted if you withdraw your consent to the processing of personal data that is necessary to create and maintain your registration for using the services.

Right to correction or completion

Art. 9. You can correct or complete inaccurate or incomplete personal data about you directly through your website profile or by sending a request to the Company.

Right to erasure ("right to be forgotten")

Art. 10. (1) You have the right to request from the Company the erasure of personal data concerning you, and the Company has the obligation to erase them without undue delay where one of the following grounds applies: · the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; · you withdraw your consent on which the processing of the data is based and where there is no other legal basis for the processing; · you object to the processing of data concerning you, including for direct marketing purposes, and there are no overriding legal grounds for this; · the personal data have been processed unlawfully; · the personal data must be erased for compliance with a legal obligation in EU or Member State law to which Oxy is subject; · the personal data have been collected in connection with the provision of information society services. (2) Reservation Ltd. is not obliged to erase personal data if it stores and processes the data: · for the exercise of the right to freedom of expression and information; · for compliance with a legal obligation which requires processing by EU or Member State law to which the Administrator is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator; · for reasons of public interest in the field of public health; · for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; · for the establishment, exercise or defence of legal claims. (3) To exercise your right to be “forgotten”, you must submit a request in free text and send it to sales@reservation.tools, as well as verify your identity and the identity of the person to whom the data have been provided. The Company shall do so by presenting your personal identification card and, if necessary, entering your login details into the account of the person to whom the data relate. (4) The Company shall not delete the data which it is legally obliged to store, including for the defence against claims brought against it or for the establishment of its rights.

Right to restriction

Art. 11. You have the right to request from the Company restriction of data processing concerning you where one of the following applies: · you contest the accuracy of the personal data, for a period enabling the Company to verify the accuracy of the personal data; · the processing is unlawful, but you oppose the erasure of the personal data and instead only request the restriction of their use; · the Company no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of your legal claims; · you have objected to the processing, pending the verification whether the Company's legitimate grounds override yours.

Right to data portability

Art. 12. (1) You may at any time request the data about you that is stored and processed in connection with the use of the Company's services by sending us an email to sales@reservation.tools (2) You may request that the Company transmit your personal data directly to another administrator chosen by you, where this is technically feasible.

Right to receive information

Art. 13. You may request the Company to inform you of all recipients to whom personal data has been disclosed, for which rectification, erasure or restriction of processing has been requested. The Company may refuse to provide this information if this is not possible or would require disproportionate effort.

Right to object

Art. 14. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you by the Company, including profiling or direct marketing.

Your rights in the event of a personal data breach

Art. 15. (1) If the Company becomes aware of a breach of your personal data which is likely to result in a risk to your rights and freedoms, we will notify you without undue delay of that breach and of the measures that have been taken or are to be taken. (2) The Company is not obliged to notify you if: · they have implemented appropriate technical and organisational protection measures and these measures are applied to the personal data affected by the personal data breach; · they have taken subsequent measures which ensure that the high risk to your rights and freedoms is no longer likely to materialise; · notification would require a disproportionate effort.

Persons to whom your personal data has been provided

Art. 16. When providing its Services, the Company does not provide the processed personal data to third parties. Art. 17. The Administrator will not transfer your data to third countries.

Other provisions

Art. 18. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Office of the Commissioner for Information and Data Protection, as follows: Name: Personal Data Protection Commission Headquarters and address of management: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia Correspondence address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia Telephone: 02 915 3 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg Art. 19. If the consent concerns a transfer, the Administrator describes the possible risks of transferring data to third countries in the absence of an adequate protection solution and appropriate remedies. Art. 20(1). When assigning the Company to process personal data to a third party for the purposes of using the Service, the Company acts in its capacity as a personal data processor. (2) In the cases under para. 1, the Company acts only at your instruction as a User of the Service and only as long as it has control over the personal data that you process. The Company will not have control over the content and data that you as a user of the service choose to upload to the Service (including whether or not such data includes personal data). In this case, the Company has no role in the decision-making process as to whether the User uses the Service to process personal data, for what purposes and whether they are protected. Accordingly, the Company's liability in this case is limited to 1) compliance with the instructions of the User of the service, in accordance with the contract and the general terms and conditions, and 2) provision of information about the Service and its functionalities through their interface.

Cookie Policy

Art.21. Our site also uses a technology called “cookies”. A cookie is an element of data that a website can send to your browser, which can then store it on your system. Cookies are created for each session when you visit our website. None of the information collected through cookies is linked to you as an individual. We do not use cookie technology to capture individual email addresses or any personal information about you.

The information collected through cookies may include:

· the date and time you access our website; · the pages of the website that you view and any downloads that you may make through such pages; · whether such browsing or download is successful or not; · the internet address of the website or the domain name of the computer from which you access our website; · the operating system of the machine on which your web browser is running; and the type and version of your web browser.

There are several types of cookies we use:

· Essential cookies Some cookies are necessary for the proper functioning of the website. Some of the cookies allow you, for example, to see the website content in the correct language. Other cookies include caching options, etc. · Analytical cookies We also use cookies to track visits to our website and analyze how easy it is for you to interact with the site (Google Analytics cookies). These cookies do not contain personal data. They show us information about which pages of our website are visited, the type of browser via desktop/mobile access and other anonymous data. We also use anonymous for IP addresses. · Functional cookies Without these cookies, we cannot activate important functions of our website, such as uploaded videos, chat sessions, preferred language, etc. in a hashed form that cannot be read by humans. They do not contain personal data. These cookies help us to show you only relevant information. These are dynamic cookies from Facebook, Google, Adform, Adwise, etc. If you wish to reject all or certain cookies used by our website, you can change your web browser preferences to do so. You can also set your browser to notify you when you receive a cookie, giving you the option to choose whether or not to accept it. Please note that by disabling certain categories of cookies, you may not be able to access some features of our website or certain content or functionality may not be available.

Security measures regarding the protection of personal data stored in the Company's infrastructure

Art.22. Considering that the confidentiality and protection of your personal data is an absolute priority for us, the Company has taken all necessary organizational and technical measures to ensure a high level of security and protection of its infrastructure. For the purposes of maximum security in the collection, storage and processing of your personal data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.