1. GENERAL PROVISIONS
1.1. Purpose of the Policy
This Personal Data Processing Policy (hereinafter — the "Policy") defines the procedure for processing personal data and the measures to ensure its security applied by the Representative Office of Beauty Link Travel in Bulgaria (hereinafter — the "Controller", the "Representative Office").
1.2. Legal Basis
The Policy has been developed in accordance with the requirements of:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation / GDPR);
• the legislation of the Republic of Bulgaria in the field of personal data protection.

1.3. Key Definitions
Personal data — any information relating to an identified or identifiable natural person (data subject), directly or indirectly.
Processing of personal data — any operation or set of operations performed on personal data, including collection, recording, organisation, accumulation, storage, rectification (updating, modification), retrieval, use, transfer (provision, access), blocking, erasure, destruction.
Data subject — a natural person who is directly or indirectly identified or identifiable by means of personal data.
Controller — the Representative Office of Beauty Link Travel in Bulgaria, which independently organises and/or carries out the processing of personal data, and also determines the purposes and composition of the personal data processed.

2. DETAILS OF THE CONTROLLER

3. PURPOSES OF PERSONAL DATA PROCESSING
The Controller processes personal data for the following purposes:

1. Provision of services and conclusion of contracts — processing of personal data for the conclusion and performance of contracts for the provision of tourism and related services.
2. Communication — feedback with data subjects, including processing of requests, enquiries and informing about the status of applications.
3. Improvement of service quality — monitoring and improvement of the quality of services provided, analysis of feedback.
4. Information newsletters — sending information about new products, services and special offers (subject to separate consent of the data subject).
5. Compliance with legal requirements — fulfilment of obligations stipulated by the legislation of the Republic of Bulgaria and the European Union.

4. CATEGORIES OF DATA SUBJECTS AND COMPOSITION OF PERSONAL DATA
4.1. Categories of data subjects

• Clients and potential clients;
• Counterparties and partners;
• Employees and job applicants;
• Website visitors.

4.2. Composition of data processed

• Surname, first name, patronymic (middle name);
• Contact details (telephone, e-mail, address);
• Identity document data (where necessary);
• Other data necessary for the provision of services.

5. LEGAL BASES FOR PROCESSING
Personal data is processed on the following legal bases:

• Consent of the data subject — freely given, specific, informed and unambiguous consent to processing;
• Performance of a contract — processing is necessary for the performance of a contract to which the data subject is a party;
• Compliance with legal obligations — processing is necessary for the fulfilment of the Controller's obligations stipulated by law;
• Legitimate interests of the Controller — subject to observance of the rights and freedoms of the data subject.

6. PRINCIPLES OF PERSONAL DATA PROCESSING
Personal data processing is carried out on the basis of the following principles:

1. Lawfulness and fairness — processing is carried out on a lawful and fair basis;
2. Purpose limitation — data is collected for specific, explicit and lawful purposes;
3. Data minimisation — the scope of data corresponds to the purposes of processing;
4. Accuracy — data must be accurate and up to date;
5. Storage limitation — data is stored no longer than is necessary for the purposes of processing;
6. Integrity and confidentiality — ensuring the security of data.

7. PROCEDURE AND CONDITIONS OF PROCESSING
7.1. Methods of processing

• Automated processing using computer equipment;
• Non-automated processing;
• Mixed processing.

7.2. Operations with personal data
Collection, recording, organisation, accumulation, storage, rectification, retrieval, use, transfer (provision, access), blocking, erasure, destruction.
7.3. Processing periods
Personal data is processed for the period necessary to achieve the purposes of processing, but no longer than is stipulated by law.

8. RIGHTS OF DATA SUBJECTS
The data subject has the right:

1. Of access — to obtain confirmation of the fact of processing and a copy of their personal data;
2. To rectification — to require the rectification of inaccurate or incomplete data;
3. To erasure (the "right to be forgotten") — to require the erasure of data in the absence of lawful grounds for processing;
4. To restriction of processing — to require restriction of processing in certain cases;
5. To object — to object to the processing of data;
6. To data portability — to receive their data in a structured format;
7. To withdraw consent — to withdraw consent at any time.

To exercise their rights, the data subject may contact: info@beauty-link-travel.com.

9. SECURITY MEASURES
The Controller takes the necessary legal, organisational and technical measures to protect personal data from unauthorised access, destruction, modification, blocking, copying and dissemination, including:

• Appointment of a person responsible for organising the processing of personal data;
• Restriction of access to personal data;
• Encryption of data during transmission;
• Regular monitoring of the effectiveness of protection measures.

10. FINAL PROVISIONS
10.1. Updating of the Policy
The Controller has the right to make changes to this Policy.
The current version is published on the website: https://beauty-link-travel.com.
10.2. Contact Information
For all matters related to the processing of personal data, please contact:
Beauty Link Travel — Representative Office in Bulgaria
Address: Ravda, 7 Laguna Str., Office 11A
Telephone: +359 87 852 2478
E-mail: info@beauty-link-travel.com