Privacy policy

The protection of your personal data is essential to us. We respect the right to privacy.

This Privacy Policy summarizes the key points in relation to the protection of your personal data and our processing methods. If you need further information about specific processes, you can contact us using the contact data specified below.

Who are we?

 ”GBS Tours” EAD is a trade company registered in the Trade Registry and the Register of non-profit legal entities with the Registry Agency with UIC 175126398

“GBS Tours” EAD is a personal data controller and processes your personal data in full compliance with the requirements and provisions of the European and the national legislation, including the General Data Protection Regulation, the Personal Data Protection Act and the other relevant statutory acts.

How can you contact us?

Address: Sofia 1619, Vitosha Region, 3-5 Damianitsa St., Tel.: +359 888 06 60 60, email: [email protected]

How can you contact our Data Protection Officer?

Address: Sofia 1619, Vitosha Region, 3-5 Damianitsa St., E-mail: [email protected]

What is the Privacy Policy and what is the purpose of this document?

This Privacy Policy aims to provide you with key facts and information in an easily accessible form, using intelligible and clear language about the actions to be carried out with the personal data you provide to GBS Tours EAD (hereinafter referred to as GBS Tours):

  • What personal data do we collect about you?
  • What is the purpose of its collection?
  • How long do we retain the personal data provided?
  • Who do we share your personal data with?
  • How do we notify you of a change in our Privacy Policy?
  • Do we use cookies? Where and how can you learn more about their use?
  • What are your rights regarding the personal data provided?

With this Privacy Policy GBS Tours declares that it applies all technical and organizational measures for protection of the personal data of individuals, which are prescribed by law or other statutory acts on a national and European level.

 What is personal data?

Any information by which an individual may be identified, directly or indirectly, represents personal data.

 What personal data does GBS Tours collect through this website (web portal) about you?

In order to provide you with effective access to its web portal and services, GBS Tours collects the following information about you:

• Name, surname, e-mail (address), telephone, when filling out the various forms on our web site, including the contact form and upon sending comments and / or opinions;

• Name, surname, telephone, e-mail, settlement, address, bank account details, if applicable, upon entering into contracts and sending requests for offers between you and GBS Tours

 

What are the grounds for personal data processing by GBS Tours?

Personal data processing involves collecting, storing, transmitting, correcting, updating, deleting, destroying and any other actions that are performed with your personal data.

GBS Tours processes your personal data on a contractual basis in order to provide information in relation to pre-contractual relationships and/ or to fulfill its contractual obligations under contracts with you for the provision of services - Art. 6, para. 1, Regulation (EC) 2016/679.

GBS Tours also processes your personal data after receiving your explicit, clear, free and unambiguous consent for the purposes of processing.

Consent would be necessary as grounds for processing, for example, for marketing purposes and receiving advertising newsletters.

The consent you provide can always be withdrawn by visiting one of our offices, as well as sending an email to the address specified in this Policy - [email protected]

GBS Tours also processes personal data to fulfill its legal obligations as may be necessary to protect the life and health of the individual to whom the data relates.

GBS Tours may also process personal data if it has legal (legitimate) interest, unless the interests of the individual to whom the data relates override those interests.

 

What are the purposes for which we collect your personal data?

The personal data we receive from you will be used to fulfill our obligations to you, as well as to help you exercise your rights, including but not limited to:

• to provide you with the services offered by GBS Tours;

• to grant you access to our webpage by showing you content that is relevant, personalized, and limited to the criteria you have set;

• To respond to your inquiries, opinions and recommendations;

• To send you information related to special campaigns and our new products and services;

• For statistical and accounting purposes in the performance of contractual obligations of GBS Tours to you.

In addition to the above, we have a legitimate interest in collecting your personal data, because without it we cannot provide you the service/ product you are interested in.

 

How do we process your personal data?

In order to provide its services, GBS Tours processes (collects) your personal data in the following ways:

- when you visit the web portal to use our website's services;

- when you fill in applications, forms and declarations provided to you by the employees of GBS Tours. Those forms are provided and filled in at our offices in case you make a service request;

- upon updating data at your request and filling in an update form on a hard copy or electronically;

- by processing information about your visits to the web portals of GBS Tours;

- by processing information about IP addresses, cookies, operating system and browser type.

 

How long do we retain and process your data before destroying it?

Depending on the grounds on which we process your personal data, the term of storing it is different.

Your personal data is stored by us for a period of 5 years from the termination of the contractual grounds if we process the personal data to fulfill contractual obligations to you. Upon expiration of this period and in case there is no legal basis for the continued storage of your personal data, the information about you will be destroyed.

Your personal data is stored for a longer or different period than indicated in any case of a legal obligation – in case of a legal basis for personal data processing.

In case of processing personal data based on an explicit consent, the data is stored until the withdrawal of your consent.

In cases where your personal data is processed to respond to opinions and comments sent to us via our platform, the storage period is between 1 and 3 months, depending on whether we should provide you with a response and the data is needed to prepare the response.

 

Who can we share your personal data with?

GBS Tours undertakes not to disclose your personal data to third parties without your express consent, except where this is necessary to fulfill your contractual obligations to you.

In order to fulfill obligations under a contractual and/ or pre-contractual relationship with you, GBS Tours may disclose your personal data to the following persons:

- Companies providing courier services;

- The company that provides hosting services related to this web -site.

- Third parties performing services in connection with contractual obligations to you or on a legal basis for processing;

GBS Tours is entitled to provide your personal data to affiliated companies that are positioned on the territory of the Republic of Bulgaria, provided that there is a legal interest in the processing of your personal data for administrative purposes and needs. Such transfers are permitted subject to strict confidentiality and protection of your personal data.

Are there any other cases in which we can share your personal data?

Your personal data may also be provided to third parties in the following cases:

  • At the request of the individual submitting the data, subject to the protection of personal data;
  • At the request of competent authorities pursuant to the current legislation of the Republic of Bulgaria and the European Union.

In all the above cases, the persons to whom we provide your personal data have declared that they provide an adequate level of protection of your personal data, including foreign companies positioned within the EU and EEA. For companies located outside the EU and EEA, on a case-by-case basis, the company concerned ensures that it provides an adequate level of personal data protection, while complying with the requirements of the European legislation.

 

General provisions

“Cookies”are small text files that are recorded on your computer when you visit our website. To learn more click here.

Disabling and Deleting Cookies

The browser allows you to delete all cookies at any time. To do so, please refer to your browser's help features. If you do not use any cookies, certain features on our webpage may no longer be available to you.

An overview of the cookies we use is available in our Cookies Policy

 

Automated decision making upon personal data processing and profiling

To ensure optimum speed in providing services, most often online, GBS Tours may use the technical capability of automated decision making under Art. 22 of the Regulation. In case that your personal data is processed automatically, we will inform you. The processing of personal data, including "profiling", consisting of any form of automated processing of personal data to assess personal aspects, in particular the analysis or forecasting of various aspects relevant to your personal preferences or interests, reliability or behavior, is carried out in strict compliance with the provisions of the Regulation. Upon automated processing of your personal data/ profiling, we:

  • use appropriate procedures for profiling;
  • implement appropriate technical and organizational measures to ensure that the factors that lead to inaccuracies in the personal data are corrected and the risk of errors is minimized;
  • protect personal data in a way that takes into account any potential threats to your interests and rights and that does not give rise to discrimination based on race or ethnic origin, political opinions, religion or belief, membership in trade unions, genetic or health status or sexual orientation or from which no such measures may arise.

 

What are your rights regarding the personal data provided?

Subject to the Bulgarian and the European legislation, including Regulation (EU) 2016/679 of the EC and the Council (General Data Protection Regulation (GDPR)), you can exercise the following rights:

  • The right of access to personal data that GBS Tours processes about you and obtain a copy thereof;
  • You may request a correction by GBS Tours if you find any inaccuracies or need to update your personal data by sending an email to [email protected]
  • The right to request blocking of your personal data or restriction of the processing of personal data in the cases specified by the law and the Regulation;
  • The right to request erasure i.e. deletion of your personal data by GBS Tours if the required conditions are met;
  • The right to object to the disclosure of your personal data to third parties by entering your personal profile on our website and removing the check –mark regarding the provision of personal data to third parties;
  • The right to withdraw your consent for personal data processing for the purposes for which you have given such consent, for example, for marketing purposes, by sending an email to: [email protected]
  • The right to request portability of your personal data in a structured, machine-readable format that is commonly used;
  • The right to file a complaint or request for protection of your rights with the Personal Data Protection Commission, if the relevant prerequisites are met;

You may exercise all rights at any time during the processing of your personal data.

 

Are you obliged to provide us with your personal data?

In order to provide our products and services, as well as to enter into contractual relationships, we collect and process your personal data. We process your personal data in order to fulfill our legal obligations.

If you refuse to voluntarily provide the required personal data, GBS Tours will not be able to provide its products and services, respectively to conclude a contract/ continue the performance of an already concluded contract.

 

Changes to the Privacy Policy

In order to reflect the relevant changes in the legislation, it is possible to update and modify our Privacy Policy, so we recommend that all our visitors check for updates in a timely manner and, where necessary, review the latest version of the document.

Here, on our website, you will find the latest Privacy Policy. Thus we ensure that you are informed about the rights and methods of processing your personal data.

This will provide you with the opportunity to stop using some or all of the services and/ or take advantage of your rights, some of which are explicitly mentioned above. In addition, we will take all possible measures to inform you in case of changes regarding the protection of personal data by posting messages in the offices and web portals of GBS Tours Group companies.

This Privacy Policy was adopted by GBS Tours on May 20, 2018 and was last revised on 23.08.2018.