Data Controller Details

DMC Worldwide is a certified tour operator. The agency specialises in the organisation of travel programmes, excursions, holidays, congress and seminar travel and passenger services, transfers, the purchase of airline tickets and more.

Contact details for DMC World:

Location:

Republic of Bulgaria

Address: Sofia

Telephone: +359 87 600 9 300

E-mail: [email protected]

Website: https://dmcworld.bg/

Contact details of the Data Protection Officer:

You may contact our Data Protection Officer directly here:

email: [email protected]

General information

This Notice on the confidential treatment of the personal data of natural persons contains the mandatory information concerning the collection, processing and storage of the personal data of travellers and job applicants, as well as the rights of those persons in connection with the protection of their personal data.

“DMC World carries out its activities in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), the Personal Data Protection Act, and the other European and Bulgarian legislation in the field of personal data protection.

“DMC World observes the following principles when processing your personal data:

• lawfulness, fairness and transparency;
• collection for specified, explicit and legitimate purposes;
• data minimisation;
• accuracy and currency of the data;
• limitation of the storage period, having regard to the purposes pursued;
• processing in a manner that ensures an appropriate level of security of the personal data.

Data we process

The main categories of data we process are:

• Personal information – given name, patronymic and family name, date of birth, national identification number, place of birth, identity card and international passport number, and where necessary contact information as well – correspondence address, telephone number, e-mail and others.
• Credit/debit card data, as well as other banking details.
• Information about professional experience – previous or current organisations in which you have worked, the exercise of a liberal profession and others.

In connection with the specific requirements for entering into an employment relationship, special categories of data may be processed, such as data concerning health, as well as personal data relating to criminal convictions.

Purposes of the processing and legal grounds

The purpose of processing personal information is the conclusion of a contract for the provision of a service or, where the person applies for a position advertised by DMC World

The grounds entitling us to process your data

Recruitment procedures comply with the requirements of the special laws governing that activity.

“DMC World will store the personal data of participants in recruitment procedures, as well as of participants in travel programmes, for the periods laid down by law.

Source of the data

The information we hold is provided to us by the data subjects in person.

To whom do we disclose your personal data?

As a rule we do not disclose your personal data to third parties, except in the cases expressly set out here.

Information about you may be provided to third parties if we are required by law to do so, or if we must perform a contractual obligation of ours.

The period for which your personal data will be stored

Once the need to store them no longer applies, we will destroy your personal data securely and without undue delay.

Your rights as a data subject

Your rights as a personal data subject are as follows:

At any time while we store or process your personal data, you have the following rights:

• you have the right to request that DMC World rectify, without undue delay, any inaccurate personal data of yours, as well as data that is no longer current;
• you have the right to request that DMC World erase your personal data without undue delay where any of the following grounds applies:
• the personal data are no longer necessary for the purposes for which they were collected;
• where you have withdrawn your consent;
• where you have objected to the processing,
• where the processing is unlawful;
• where the personal data must be erased in order to comply with a legal obligation under EU law or the law of a Member State applicable to us as a personal data controller;
• where the personal data were collected in connection with the offer of information society services.

We may refuse to erase your personal data for the following reasons:

• for the exercise of the right to freedom of expression and the right to information;
• for compliance with a legal obligation on our part, or for the performance of a task carried out in the public interest,
• in the exercise of official authority vested in us (in the event that you are a public authority);
• for reasons of public interest in the area of public health;
• for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in so far as erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defence of legal claims.
• you have the right to request that DMC World restrict the processing of your personal data, in which case the data will only be stored and not processed. Any refusal on our part to restrict processing will be given expressly in writing only, and we are obliged to state the lawful reason for it;
• you have the right to withdraw your consent to the processing of your personal data at any time, by a separate request addressed to the controller;
• you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);
• you have the right to object to automated processing, including profiling;
• you have the right not to be subject to a decision based solely on automated processing, including profiling;
• should we need to use your personal data for a new purpose not covered by this data protection statement, we will provide you with a new data protection notice and, when and where necessary, will seek your prior consent to the new processing.

All of the above requests will be forwarded if there is a third party (recipients, including outside the EU, and international organisations) involved in the processing of your personal data.

Transfer of personal data to a country outside the EU or to an international organisation

This takes place for the purpose of performing obligations under concluded contracts.

You have the right to lodge a complaint with the supervisory authority

Should you wish to lodge a complaint regarding the processing of your personal data by DMC World, you may do so using the contact details given for DMC World, or directly with the Data Protection Officer at the contact details given above.

Personal data protection policy

DMC World, in its capacity as a personal data controller, processes the personal data that clients provide when visiting our websites, in accordance with the legislation on personal data protection.

DMC World, in its capacity as a trader, guarantees its clients the confidentiality of the personal data provided.

DMC World undertakes not to disclose any personal data concerning clients to third parties – state authorities, commercial companies, natural persons and others – unless:

– the client has given explicit consent;

– the information has been requested by state authorities or officials who, under the legislation in force, are entitled to request and collect such information and the trader is obliged to provide the information by virtue of the law;

– the information is necessary for third parties in order to perform a service under a contract concluded between the client and DMC World – airlines, transport companies, hotels or hotel operators, insurance companies and other service providers whose services are performed as part of a travel package or constitute a separate service to be performed.

Processing of personal data

When you visit our website, our web servers store data about the browsers and operating systems you use, the web pages you visit on our site, the date of your visit and, for a period of seven days, the IP address assigned to you by your Internet provider, for security purposes, for example in order to identify attacks on our websites. With the exception of the IP address, personal data are stored only where they have been provided by you yourself, for example on registration, in a survey, in a prize competition or for the performance of a contract, together with their storage period.

Use and transfer of personal data and purpose limitation.

DMC World uses your personal data for the purposes of the technical administration of the website, client management, product surveys and marketing, only to the extent necessary for that purpose and in cases where the client has expressly provided them voluntarily.

The transfer of personal data to state institutions and authorities takes place only within the framework of the mandatory provisions of the legislation in force. Our employees are bound by an obligation of confidentiality.

Guidance on the use of cookies

Once activated, a direct connection is established with the server of the relevant social network. The content of the switch area is then transmitted directly from the social networks to your browser, which incorporates it into the website.

Once the switch area has been activated, the relevant social network may collect data regardless of whether you interact with that switch area. If you are logged in to a social network, it may record your visit in your user account. Visits to other websites cannot be recorded by a social network until you have activated the relevant switch area there as well.

If you are a member of a social network and do not wish it to link the data collected during your visit to our website with the membership data it holds, you must log out of that social network before activating the switch areas.

We have no influence over the volume of data recorded by the social networks through their switch areas. The purpose and the extent of the data recording, its processing and use by the respective social networks, as well as the related rights and setting options for protecting your privacy, can be found in the personal data protection guidance of the relevant social network.

Information about the cookies we use and their functions can be found in our cookie guidance

Cookie guidance

Analysis of usage data

In order to recognise visitors’ preferences regarding our online offerings, we use products that allow us to tailor the content of our web pages, which improves what we offer you. To activate these functions, your explicit consent is required.

If you subsequently do not wish DMC World to collect and analyse information about your visit, you may opt out at any time.

To implement that objection technically, the relevant marker in your browser is set to Off. This cookie serves solely to record your objection. Please note that, for technical reasons, the cookie can only apply to the browser from which it was set. If you delete cookies, or use a different browser or device, you will need to set your chosen preference again.

Security

DMC World takes technical and organisational security measures to protect the data we administer against manipulation, loss, destruction and access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

Right to information

On request, DMC World or your travel agent will inform you, within the period laid down by law, whether we hold any personal data about you and what those data are. If you are registered as a user, we also offer you the option of reviewing the data yourself and, where appropriate, deleting or amending it. If, despite our efforts to keep the data accurate and up to date, incorrect information has been recorded, we will correct it at your request.