Mandatory information about your privacy – related rights
General information
A new General Data Protection Regulation, adopted by the European Union, entered into force on 25 May 2018. The regulation aims to ensure the protection of data of individuals from all EU Member States and to harmonize the regulations for its processing.
As a data controller with regards to the sale of tickets and processing of inquiries through the contact form of our website DolphinariumVarna.bg and sent to our e-mail, Festa Dolphinarium EOOD meets all the requirements of the new regulation by collecting personal data only insofar as it is necessary for the provision of the services and keeps the data in a responsible and lawful way.
Information about the Personal data controller
Name "Festa Dolphinarium" EOOD
UIC/ BULSTAT: 148102368
Headquarters and registered address: Varna, 9000, Primorski Park, "Saltanat" district
Business address: Varna, 9000, Primorski Park, Saltanat district
Mailing data: Varna, 9000, Primorski Park, "Saltanat" district
E-mail: gdpr@dolphinariumvarna.bg
Telephone: 052 302199, 052 669100
Information on the competent supervisory authority
Name: Commission for Personal Data Protection
Headquarters and registered address: Sofia 1592, 2, Prof. Tsvetan Lazarov Blvd.
Mailing data: Sofia 1592, 2, Prof. Tsvetan Lazarov Blvd.
Telephone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg
Festa Dolphinarium EOOD performs its activity in compliance with the Personal Data Protection Act and Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data.
Grounds for collecting, processing and storing your personal data
Art. 1. (1) "Festa Dolphinarium" EOOD, acting through its website DolphinariumVarna.bg, collects and processes your personal data in connection with the sale of tickets for the attractions at Dolphinarium Varna and for answering your inquiries through the contact form on the website and those sent to our e-mail, pursuant to Art. 6, para. 1, Regulation (EC) 2016/679, and in particular on the basis of the following:
Implementation of the obligations of Festa Dolphinarium EOOD under the contract with you for selling tickets;
Your explicit consent as a client;
Compliance with a legal obligation that applies to Festa Dolphinarium EOOD;
For the protection of a legitimate interest of Festa Dolphinarium EOOD.
(2) "Festa Dolphinarium" EOOD is a data controller with regards to your data as users of our services.
Objectives and principles of collecting, processing and storing your personal data
Art. 2. (1) Festa Dolphinarium EOOD collects and processes the personal data you provide us in connection with the use of our services and for the conclusion of a contract with the company, including for the following purposes:
individualisation of a party to the contract;
registration of a visitor of an attraction at the Dolphinarium Varna;
accounting purposes;
statistical purposes;
ensuring the implementation of the contract for the provision of the relevant service;
sending information, notifications about changes in our services, etc.
providing support via the contact form, by email or telephone;
(2) "Festa Dolphinarium" EOOD complies with the following principles when processing your personal data:
lawfulness, good faith and transparency;
limitation of the processing objectives;
relevance of the processing objectives and minimization of data collection;
ensuring accurate and up-to-date data;
restriction of the storage in view of the implementation of the objectives;
integrity and confidentiality of the processing, and ensuring an adequate level of protection of personal data.
(3) When processing and storing personal data, Festa Dolphinarium EOOD may process and store personal data in order to protect its following legitimate interests:
providing information on the payment platform used for the purchase in the event of a refund of the full or part of the amount paid by the client;
fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.
What types of personal data does "Festa Dolphinarium" EOOD collect, process and store?
Art. 3. (1) "Festa Dolphinarium" EOOD performs the following operations with personal data for the following purposes:
Registration of a user on the website and execution of a ticket sale agreement - the purpose of this operation is to create an account which will be linked to the service used and to be able to receive your tickets.
Registration of a user in our contact form in order ask a question.
Sending information - The purpose of this activity is to administer the process of sending messages to our Clients that relate to service changes under the Service Agreement.
(2) Festa Dolphinarium EOOD processes the following types of personal data and information for the following purposes and on the following grounds:
Data: Your individualizing data (name and surname, phone number and e-mail)
Purpose for which data is collected: 1) User registration; 2) Contacting and sending information to the user.
Grounds for processing your personal data - By accepting the general terms and conditions and registering on the website and purchasing a service, a contractual relation arises between "Festa Dolphinarium" EOOD and you, based on which we process your personal data - art. 6, para. 1, lit. (b) GDPR.
Other data processed by Festa Dolphinarium EOOD – Upon ticket purchases from our website or sending an inquiry via our contact form, Festa Dolphinarium EOOD collects data about the IP address used.
Purpose for which data is collected: Improving the service security and interface localization, statistical and marketing research.
Grounds for processing the data: Processing is necessary for the performance of a contract to which the data subject is a party - Art. 6, para. 1, b. (b) of the GDPR. Upon a purchase or an inquiry by the user, the IP address is collected on the grounds of the legitimate interests of the controller - Art. 6, para. 1, lit. (f) GDPR;
(3) "Festa Dolphinarium" EOOD does not collect or process personal data that relate to the following:
reveal racial or ethnic origin;
reveal political, religious or philosophical beliefs, or membership in trade unions;
genetic and biometric data, health data, or data on the sexual life or sexual orientation.
(4) "Festa Dolphinarium" EOOD does not collect, but may process personal data related to the following:
the first four and the last four digits of the bank card numbers when the payment is made via a bank card;
name and client ID when the payment is made via ePay.bg;
name, address and email address when the payment is made via PayPal.com;
date, time, amount, number and type of tickets purchased.
(5) Personal data is collected by Festa Dolphinarium EOOD from the persons to which it refers and from the relevant payment platform.
(6) The Company does not carry out automated decision making using the data.
(7) The Company does not process data of persons under 16 years of age, except with the explicit consent of their parents or representatives.
Term of storage of your personal data
Art. 4. (1) "Festa Dolphinarium" EOOD keeps your personal data for up to one year from the date you use your tickets. Upon the expiry of this period, Festa Dolphinarium EOOD takes the necessary care to erase and destroy all your data without undue delay.
(2) Festa Dolphinarium EOOD will inform you in case the term of data storage needs to be extended in order to meet the objectives, for the performance of the contract, in view of the legitimate interests of Festa Dolphinarium EOOD or otherwise.
(3) "Festa Dolphinarium" EOOD keeps your data provided based on your consent, until its express withdrawal.
(4) "Festa Dolphinarium" EOOD keeps the personal data, which it is required to keep under the applicable legislation for the relevant statutory term.
Transferring your personal data for processing
Art. 5. (1) "Festa Dolphinarium" EOOD may, at its own discretion, transmit all or part of your personal data to a data processor for the fulfillment of the processing objectives in compliance with the requirements of Regulation (EC) 2016/679.
(2) "Festa Dolphinarium" EOOD will notify you if it intends to transfer all or part of your personal data to third countries or international organizations.
Your rights related to the collection, processing and storage of your personal data
Withdrawal of consent for personal data processing
Art. 6. (1) If you do not wish all or any of your personal data to continue to be processed by Festa Dolphinarium EOOD for any or all processing objectives, you may withdraw your consent for the processing at any time by sending a free-text request.
(2) "Festa Dolphinarium" EOOD may ask you to identify yourself and confirm the identity of the person to whom the data relates.
(3) Even if you withdraw your consent for personal data processing, once you receive your tickets, your tickets will remain valid. In this case, however, we will not be able to refund the amount you paid if there are any reasons for that.
Right of access
Art. 7. (1) You have the right to request and obtain a confirmation from Festa Dolphinarium EOOD whether any of your personal data is being processed.
(2) You have the right to access the data as well as the information relating to the collection, processing and storage of your personal data.
(3) Festa Dolphinarium EOOD provides you with a copy of the processed personal data relating to you upon request in an electronic or another appropriate form.
(4) The provision of access to the data is free of charge, but Festa Dolphinarium EOOD reserves the right to impose an administrative fee in the event of repeated or disproportionate claims.
Right of rectification and completion
Art. 8. You may rectify or complete any inaccurate or incomplete personal data relating to you by making a request to Festa Dolphinarium EOOD.
Right to erasure ("right to be forgotten")
Art. 9. (1) You have the right to request from Festa Dolphinarium EOOD to delete the personal data related to you and Festa Dolphinarium EOOD has the obligation to delete it without undue delay if any of the following grounds is present:
The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
You withdraw your consent, on which data processing is based, and there are no other legal grounds for processing;
You object to the processing of your personal data and there are no overriding legitimate grounds for processing;
The personal data has been processed unlawfully;
The personal data must be deleted to comply with a legal obligation under the EU law or the law of a Member State that applies to Festa Dolphinarium EOOD.
(2) "Festa Dolphinarium" EOOD is not obliged to delete personal data if it keeps and processes it:
to comply with a legal obligation that requires processing provided for under the EU law or the law of member-state applicable to Festa Dolphinarium EOOD or for reasons of important public interest or the exercise of an official authority that has been provided to us;
for reasons of public interest in the field of public health;
for the purpose of archiving in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or protection of legal and/ or financial claims.
(3) In order to exercise your right to "be forgotten", you must submit a written request sent to Festa Dolphinarium EOOD, as well as to certify to Festa Dolphinarium EOOD your identity and the identity of the person to whom the data relates, by presenting your identity card on the spot for identification purposes and, if necessary, entering your login data in the account of the person to whom the data relates, in front of a Festa Dolphinarium EOOD employee.
(4) "Festa Dolphinarium" EOOD does not erase the data, which it is legally obliged to store, including for protection against legal claims or for proving its rights.
Right of limitation
Art. 10. You are entitled to request from Festa Dolphinarium EOOD to limit the processing of your data when:
You contest the accuracy of the personal data, for a period that allows Festa Dolphinarium EOOD to verify the accuracy of such personal data;
processing is illegal, but you do not want your personal data to be erased, but only to limit its use;
Festa Dolphinarium EOOD no longer requires personal data for the purposes of processing, but you require them to establish, exercise or protect your legal claims;
You have objected to the processing pending a verification whether the legal grounds of Festa Dolphinarium EOOD override your interests.
Right of portability
Art. 11. (1) You may withdraw your data stored and processed in connection with the use of the services of Festa Dolphinarium EOOD at any time by sending an email request.
(2) "Festa Dolphinarium" EOOD may ask you to identify yourself in the manner described in Art. 9 (3).
Right to receive information
Art. 12. You may ask Festa Dolphinarium EOOD to inform you of all recipients to whom the personal data for which rectification, deletion or limitation of the processing was requested, has been disclosed. Festa Dolphinarium EOOD may refuse to provide such information if this would be impossible or would require disproportionate effort.
Right of objection
Art. 13. You may object to the processing of your personal data by Festa Dolphinarium EOOD at any time.
Your rights in case of a personal data breach
Art. 14. (1) If Festa Dolphinarium EOOD establishes a personal data breach, which may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the breach, as well as of the measures taken or to be taken.
(2) Festa Dolphinarium EOOD is not obliged to notify you if:
It has taken appropriate technical and organizational safeguards in respect of the data affected by the security breach;
It has subsequently taken measures to ensure that the breach will not lead to a high risk for your rights;
The notification would require disproportionate efforts.
Individuals to whom your personal data is disclosed
Art. 15. For the purpose of repayment operations (upon refunds) "Festa Dolphinarium" EOOD shall provide the necessary information to the respective payment platform used for the purchase of the tickets;
Art. 16. Festa Dolphinarium EOOD does not transmit your data to third countries.
Further provisions
Art. 17. In case of а violation of your rights under the above or the applicable data protection laws, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Commission for Personal Data Protection
Headquarters and registered address: Sofia 1592, 2, Prof. Tsvetan Lazarov Blvd.
Mailing data: Sofia 1592, 2, Prof. Tsvetan Lazarov Blvd.
Phone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Web site: www.cpdp.bg
Art. 18. You may exercise all of your rights related to the protection of your personal data using the forms enclosed to this notice. Of course, these forms are not mandatory and you can make a request in any form that contains a statement about it and identifies you as the data subject.
This Privacy Notice was last updated on March 27, 2019.
Cookie Policy
The website dolphinariumvarna.bg of "Festa Dolphinarium" EOOD uses analytical cookies.
Thanks to these cookies, we monitor the visits on our website and we can analyze how easily our users work with it (Google Analytics cookies). These cookies do not give us any information about your personal data. They show us which website pages you viewed, whether you visited our site using a mobile or a desktop device, and other anonymous data.
