GDPR

(a) Right of Access (Article 15 GDPR)

You have the right to obtain confirmation from Sofia Exotic Rentals LTD as to whether or not personal data concerning you is being processed. Where such data is being processed, you are entitled to receive access to the personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipient to whom the personal data has been or will be disclosed;
• the envisaged retention period or the criteria used to determine such period;
• the existence of your other GDPR rights;
• the existence of automated decision-making, including profiling, and meaningful information about the logic involved.

 

(b) Right to Rectification (Article 16 GDPR)

You have the right to request the correction of inaccurate personal data concerning you without undue delay, and to have incomplete personal data completed, including by means of providing a supplementary statement.

(c) Right to Erasure (“Right to Be Forgotten”) (Article 17 GDPR)

You have the right to request the deletion of personal data concerning you where one of the following grounds applies:

• the personal data is no longer necessary in relation to the purposes for which it was collected or processed;
• you withdraw consent on which the processing is based, and there is no other legal ground for processing;
• you object to processing, and there are no overriding legitimate grounds for continuing;
• the personal data has been unlawfully processed;
• the personal data must be erased for compliance with a legal obligation under Union or Member State law.

 

This right shall not apply where processing is necessary for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

(d) Right to Restriction of Processing (Article 18 GDPR)

You may request that Sofia Exotic Rentals LTD restrict the processing of your personal data where:

• you contest the accuracy of the personal data, for a period enabling verification of its accuracy;
• the processing is unlawful, and you oppose erasure and instead request restriction;
• the Company no longer needs the data for processing purposes, but you require it for legal claims;
• you have objected to processing pending verification of whether the legitimate grounds of the Company override yours.

 

(e) Right to Data Portability (Article 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to Sofia Exotic Rentals LTD, in a structured, commonly used, and machine-readable format. You also have the right to transmit such data to another controller without hindrance from Sofia Exotic Rentals LTD, where technically feasible.

(f) Right to Object (Article 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests pursued by Sofia Exotic Rentals LTD or by a third party. Where you object, Sofia Exotic Rentals LTD shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless required for legal claims.

(g) Rights in Relation to Automated Decision-Making (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such decision is:

• necessary for entering into or performing a contract;
• authorized by Union or Member State law; or
• based on your explicit consent.

 

Where automated decision-making is applied, Sofia Exotic Rentals LTD shall implement suitable measures to safeguard your rights, including the right to obtain human intervention and to contest the decision.

(h) Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw such consent at any time. The withdrawal of consent shall not affect the lawfulness of processing carried out prior to withdrawal.

(i) Right to Lodge a Complaint (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by Sofia Exotic Rentals LTD infringes the GDPR.

The competent supervisory authority in Bulgaria is:

Commission for Personal Data Protection (CPDP)
2, Prof. Tsvetan Lazarov Blvd.
Sofia 1592, Bulgaria
Website: https://www.cpdp.bg/