Privacy Policy

1. Privacy Policy and Cookies

Planet.bg's personal data privacy statement aims to explain to users how they store, protect and collect their personal information, what kind it is and for what purpose it is used and stored.

The privacy policy applies to this website as well as the mobile applications and social media where we publish our products.

The privacy statement has been adopted in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

The management of Planet EOOD is committed to ensure compliance with the legislation of the EU and the member states regarding the processing of personal data and the protection of the 'rights and freedom' of the persons whose personal data Planet EOOD collects and processes in accordance with the General Regulation for the Protection of the data (Regulation (EU) 2016/679).

Regulation (EU) 2016/679 and this policy apply to all personal data processing functions, including those performed on personal data of customers, employees, suppliers and partners and any other personal data that the organization processes from different sources.

This policy applies to all employees/employees (and interested parties) of Planet EOOD as external suppliers. Any violation of the General Regulation will be considered as a violation of labor discipline, and in case there is an assumption of a crime committed, the matter will be submitted for consideration in the shortest possible time to the relevant state authorities.

Planet EOOD is registered as a personal data administrator according to document 91187 / 19.07.2017. entered in the 'Register of personal data administrators and the registers kept by them'.

Planet EOOD has an appointed Personal Data Protection Officer. Contact details of the official: mila.pencheva@planet.bg

Compliance with data protection legislation is the responsibility of all Planet EOOD employees who process personal data. Planet EOOD has conducted the necessary training and awareness regarding the role of employees and their rights and obligations regarding the Policy for personal data processed by the company.

2. Concepts

Processing - means any operation or set of operations performed on personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or otherwise the data is made accessible, arranged or combined, restricted, deleted or destroyed;

Administrator - any natural or legal person, public body, agency or other structure that alone or jointly with others determines the purposes and means of processing personal data; where the purposes and means of this processing are determined by EU law or the law of a Member State, the controller or the special criteria for its determination may be established in Union law or in the law of a Member State;

Data subject - any living natural person who is the subject of the personal data stored by the Administrator.

Consent of the data subject - any freely expressed, specific, informed and unequivocal indication of the will of the data subject, by means of a statement or clear affirmative action, which expresses his consent to the personal data relating to him being processed;

Child - The General Regulation defines a child as anyone under the age of 16, although this can be reduced to 13 by Member State law. The processing of a child's personal data is only lawful if a parent or guardian has given consent. The administrator makes reasonable efforts to verify in such cases that the holder of parental responsibility for the child has given or is authorized to give consent.

Personal data - The General Regulation defines a child as anyone under the age of 16, although this can be reduced to 13 by Member State law. The processing of a child's personal data is only lawful if a parent or guardian has given consent. The administrator makes reasonable efforts to verify in such cases that the holder of parental responsibility for the child has given or is authorized to give consent.

Recipient - natural or legal person, public body, agency or other structure to which the personal data is disclosed, whether or not it is a third party. At the same time, public authorities that may receive personal data within the framework of a specific investigation in accordance with Union law or the law of a Member State are not considered 'recipients'; the processing of such data by said public authorities complies with the applicable rules for the protection of the data according to the purposes of the processing;

Third side - any natural or legal person, public body, agency or other body other than the data subject, the controller, the personal data processor and the persons who, under the direct supervision of the controller or the personal data processor, have the right to process the personal data;

3. What personal information does Planet EOOD collect?

In order to be able to implement its services, Planet EOOD collects the necessary information from its users. Depending on the service desired by the user, these personal data can be - e-mail, names, date of birth, social security number, passport number, address, contact phone number, information of those accompanying during the trip, as well as information about the type payment that the user wishes to make. It is also possible to collect information about travelers' personal preferences - food preferences, specific accommodation floor and the like. The Planet.bg platform also collects technical information necessary for the company, which can be - IP address, the browser you use, the language you use. This information is mainly needed for the company's advertising or internal statistical purposes.

The minimum information requirements when making a reservation are travelers' names and contact details - email and/or phone.

The user has the right to create his own personal profile on the site where information about his current and past reservations is stored and to which he can access at any time From his profile the customer has the right to choose what information to receive on behalf of Planet.bg in the form of an e-mail newsletter - if he wishes he can choose the option and not receive one If he has subscribed but no longer wishes to receive e-mails from the user can unsubscribe at any time using the unsubscribe link provided in the e-mails

In the event that the user provides Planet EOOD with the data of the accompanying travelers, the user undertakes to take responsibility for notifying the companions about the collection of their data and the current Privacy Policy of Planet EOOD and to request their agreement with it.

Even if the user does not make a reservation, our website collects information automatically - IP address, information about the browser you used, the language of the device you used, information about your behavior on our site, how many clicks you made, what pages you visited.

4. Why does Planet EOOD collect users personal data?

We collect personal data of our users in order to provide our services, to complete and process your reservation, and to be able to communicate with you regarding changes, confirmations and reminders of your desired service. Sharing information with us can be done in different ways - in the Planet.bg online chat, by company e-mail, through a mobile device - a communication application such as Viber, WhatsApp, Skype and similar, by phone or through one of the social our networks in which we are registered - Facebook or Instagram.

Planet EOOD also collects personal data of its users for marketing purposes. These purposes may be: - Using your data to provide information about our current or future offers and promotions. You can opt out of these marketing email communications easily by clicking the Unsubscribe button at the bottom of the email you receive or by contacting us to remove you from our recipient list. - By participating in lottery games and on Planet EOOD, the relevant information will be used to administer these promotions. It is possible for Planet EOOD to use information provided by you for legal purposes to process and resolve a dispute that has arisen or to fulfill lawful requests from a law enforcement authority.

Providing personal data to Planet.bg is voluntary. However, depending on the type of service you wish to use, we may be able to provide you with that service only if certain personal information is collected. For example, we cannot process your booking if we do not have your name and contact details.

5. Who is your personal data shared with?

With a travel partner/supplier through whom we made your reservation or inquiry - Planet EOOD has the right to provide, in order to provide the service requested by you, your personal information necessary for booking or inquiry - names, date of birth or social security number, personal booking preferences. Information regarding your contact details, the names of your companions may also be provided. In the event of booking disputes, we may provide the service provider with information about the booking process (if required). It may include a copy of your booking confirmation as proof of the booking you have made, as well as a copy of the communication with you specifying details of the dispute - such as the date and time of receipt of information, which data was provided and processed, etc. .

With a physical office of Planet EOOD - again in order to perform the service, Planet EOOD has the right to provide your information to its employees making your reservation or inquiry - communication data with you, information about when and where the inquiry or reservation was made, information about those traveling with you and similar information provided by you, in order to provide the service.

With third parties, service providers - Planet EOOD works with providers supporting the provision of the company's services. Suppliers offer services related to marketing research, services related to online payments on our site, as well as suppliers who provide their products to us - these are partners who book your reservation and provide your data, for example, to the hotel you have booked.

With competent authorities - We disclose personal data to law enforcement authorities when required by law or absolutely necessary to prevent, detect or prosecute criminal activity or fraud. We may, in the course of the procedure, disclose the personal data with the competent authorities to protect your rights or places of creation or the rights of the places of creation of data of our business partners.

6.What security procedures does Planet.bg take to ensure the safety of your personal data?

We declare that your personal data is processed only by authorized personnel of Planet EOOD, for the purposes of performing the services assigned to them for processing. Our staff is trained in compliance with all legally established norms regarding the processing, storage, deletion of personal data of our customers.

Planet EOOD declares that the data collected and stored through the company's software are stored on authorized secure servers on the territory of the EU, hired by Planet EOOD. We will retain your personal data for as long as we deem necessary to enable you to use our services, to provide you with our services (including maintaining your online user account (if created), to comply with applicable laws, to resolve disputes with any parties and otherwise necessary for us to carry out our business, including to detect and prevent fraud or other illegal activities.

Any personal data we retain will be subject to this Privacy Policy. If you have a question about a specific retention period for certain categories of personal data that we process about you, please contact us using the contact details below.

7. How do we process children's personal data?

The services of Planet EOOD are not intended for use by persons under the age of 18, unless they are requested by a parent or guardian. Planet EOOD can collect and use information about children only with the consent of a parent or guardian. In the event that we process the information of a child under the age of 18 without express consent from a parent or guardian, we reserve the right to delete that information.

8.How can you control the personal data you have provided to Planet.bg?

You have the right to control how your personal data is used by us.This can happen if you ask us for a written copy of your personal data that we hold. You have the right to notify us of changes to your personal data and to request the desired correction from us. You have the right to request, in selected cases, that we delete your personal data or restrict the processing of some of them. You have the right to object to certain ways in which we collect your personal data, for this purpose contact us at the contacts indicated below. In certain situations, you may also ask us to send the personal data you have provided to us to a third party.

Subject to compliance with applicable laws, you have the right to object to our use of your personal data at any time, and to withdraw your consent at any time.

We rely on you to ensure that your personal data is complete, accurate and up-to-date. Please inform us immediately of any changes or inaccuracies in your personal data by contacting us.

If you have an online user profile, you have access to a significant amount of your personal data through our website. Our website generally gives you the option to add, update or remove information we have about you.

If any personal data we hold about you is not available through our website, you can send us a request free of charge. For any queries about this Privacy Policy and to exercise any of your rights or if you have a complaint, please contact our Data Protection Executive at info@planet.bg. You can also contact your local data protection authority.

9. Who is responsible for processing personal data at Planet.bg and how can I contact him?

Planet EOOD controls the storage, processing and deletion of your personal data that you have provided to us. Planet EOOD does this according to the methods described in this Privacy Policy and in compliance with the applicable laws of Bulgaria and the EU.

If you have any questions about this Privacy Statement or how we process your personal data, please contact our data protection office at info@planet.bg and we will get back to you.

10. Data transfer

As a general rule, your data will not be transferred to third parties, unless we are legally obliged to do so, or if the transfer of data is necessary for the performance of a contractual relationship, or if you have given prior express consent to the transfer of your data.

Our service providers and affiliates, for example communication agents of online payment service providers, will receive your data only to the extent necessary to process your request. In these cases, the range of transmitted data will be kept to the minimum necessary.

We emphasize that we process your data within the EU/EEA. However, there may be cases where we use service providers who process data outside the EU/EEA. In these cases, we ensure that a reasonable level of data protection is in place at the recipient prior to the transfer of your personally identifiable information. This means that a level of data protection has been achieved through EU standard contracts or an adequacy decision that is comparable to the standard within the EU.

11. Declaration on the use of 'Cookies'

If you use our website, you agree to our cookies being stored on your device. They are small text files that are stored on your hard drive, are assigned to the browser you use, and through them certain information is collected at their location. They cannot transmit a virus or run programs. The purpose of cookies is to facilitate the user's re-entry, the purpose is his identification.

There are several types of cookies that we use on our website: Session cookies are temporary and exist until you close your browser. Persistent cookies are kept longer and exist even after you close your browser. There are other types of tracking technologies besides cookies, such as so-called pixel tags. Pixel tags are small graphic images, often multiples of one pixel, that can be delivered to your computer as part of a request on a web page, in an application, in an advertisement, or in the HTML of an email message.

Pixels can be used to retrieve information from your device, such as your device type or operating system, IP address, and the time you spent on the site or in the application. They can be used to read and use 'Cookies' in your browser. URL tracking is used to understand which website you have been referred to in order to use our website.

All these technologies are referred to as 'Cookies' in this Cookie Statement.

Also, on our website we use an application provided by a third party that provides us with a service called web chat. Through this web chat, we are able to communicate with you when you have difficulties, want to ask a quick question or just want to do some quick communication with us. The information collected through the cookies of this service is stored with us for 1 year. This is for the purpose of resolving disputes that have arisen, collecting the necessary information when re-communicating with you or re-booking and similar activities related to the good service of our users.

The types of information we collect through Cookies include IP address; Device ID; User ID registered on our website, pages viewed; browser type; browsing information; OS; internet service provider; time duration; whether you have responded to an advertisement; the referring URL; the features used or the activities performed on the website / applications.

The information we collect through cookies is to make it easier for you - not to log into your account again after visiting our website again, to collect information about what you have viewed so that it is much easier to find it again. The information about your login to the site, your ID, is kept for 1 week.

Another purpose for which we collect data through our cookies is to analyze the behavior of users on our pages - which pages are visited, for how long, what was done on them - this data is necessary for internal analysis in order to improve our services. The information collected for the purpose of analysis through Google Analytics - a product of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA), is kept for 1 day. You can delete your saved cookies at any time from your browser's security settings.

To find out more about Cookies and how to manage or delete them, simply visit allaboutcookies.org and the help section of your browser. In the settings of browsers such as Internet Explorer, Safari, Firefox or Chrome, you can set which 'Cookies' to accept and which to reject. Where you find these settings depends on the browser you use.