HOTEL LEIPZIG
Plovdiv

HOTEL LEIPZIG
Plovdiv

Book Now

Privacy Policy

In accordance with the information requirements under Articles 13 and 14 of the GDPR, this document aims to provide information about the personal data processing activities carried out by “RADEYA” Ltd, the purposes for which data are processed, the measures and safeguards protecting the data processed, the rights of data subjects and how those rights may be exercised, in accordance with the requirements of EU Regulation (EU) 2016/679 of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “Regulation 2016/679” or the “GDPR”), and other applicable legislation of the European Union and the Republic of Bulgaria.

1. Details of the Controller and Contact Information.

  • “RADEYA” Ltd is the controller of personal data processed in the course of, or in connection with, the Company’s business activities in accordance with the law. Its registered office and management address are: Plovdiv, 70 Ruski Blvd.
  • The Company’s correspondence address is Plovdiv, 70 Ruski Blvd. Requests to the Company in its capacity as data controller may be sent by post to this address.
  • Requests may also be sent to executivedirector@leipzig.bg. The message must include the information necessary to identify the requester and contact details for a response.

2. Purposes and Legal Bases for Processing Personal Data; Categories of Data Processed.

  • “RADEYA” Ltd conducts its activities in accordance with national legislation and processes personal data in connection with the following principal activities:
    • Personnel administration;
    • Financial and accounting record-keeping;
    • Video surveillance.
  • For the purposes of personnel administration (human resources management) and financial and accounting record-keeping, the Company processes personal data under Article 6, paragraph 1, point (c), and Article 9, paragraph 2, point (b), of the Regulation. This includes data relating to job applicants, employees/workers, natural persons who are parties to contracts, and representatives of legal entities that are parties to contracts (customers or suppliers).
  • The categories of data processed concern individuals’ physical, social, family and economic identity, criminal history and health status.
  • For the purposes of video surveillance, “RADEYA” Ltd processes personal data relating to all employees/workers and visitors in the Company’s building/premises.
  • The categories of personal data collected relate to individuals’ physical identity as captured in images.
  • Where the Company processes data on the basis of the data subject’s consent, personal data are processed only if the individuals have given their consent freely, specifically, in an informed manner and unambiguously.
  • Data are processed for the specific purposes precisely defined by law. Processing must be lawful and fair, and the data may not be further processed in a manner incompatible with those purposes.

3. Categories of Data Recipients Outside “RADEYA” Ltd.

  • The Company does not disclose personal data to third parties or recipients unless there is a legal basis for receiving the data or the data are publicly available because they are included in a public register.
  • Apart from cases involving publicly available data included in a public register, data recipients may, depending on the circumstances, include:
    • State authorities and bodies entrusted with public functions, within the scope of their powers (National Revenue Agency (NRA), National Social Security Institute (NSSI), Ministry of Interior (MoI) and similar bodies);
    • Banks, for the purpose of making remuneration payments;
    • Courier companies and postal operators, for the purpose of corresponding with individuals who are data subjects.

4. Data Retention Period.

  • As a data controller, “RADEYA” Ltd processes data for the minimum period required by the purposes of processing and the provisions of the applicable legislation, in accordance with the storage limitation principle.
  • Data relating to employment and social insurance relationships are retained for 50 years. Other data are retained for periods ranging from 2 months to 10 years, depending on the type of data and the corresponding legal obligation to process them, including their storage.

5. Rights of Individuals Who Are Data Subjects.

  • The personal data protection measures taken in accordance with the requirements of Regulation 2016/679 aim to safeguard the rights of the subjects whose personal data are processed, namely:
    • Right of access;
    • Right to rectification of inaccurate or incomplete data;
    • Right to erasure (the right to be forgotten), where the conditions of Article 17 of REGULATION 2016/679 apply;
    • Right to restriction of processing;
    • Right to data portability, where the conditions for portability under Article 20 of REGULATION 2016/679 are met;
    • Right to object, where the conditions of Article 21 of REGULATION 2016/679 are met.
    • Right of the data subject not to be subject to a decision based solely on automated processing, including profiling.
  • The above rights may be exercised by submitting a request to “RADEYA” Ltd (in writing or electronically).
  • The request must be signed and sent to the Company’s designated contact address.

6. Right to Lodge a Complaint with the Commission for Personal Data Protection.

If a data subject considers that their rights under Regulation 2016/679 have been infringed, they may lodge a complaint with the Commission for Personal Data Protection.

7. Transfer of Personal Data to Third Countries or International Organisations.

“RADEYA” Ltd does not transfer the personal data it processes to third countries or international organisations.