Privacy policy, Shery Tour

General information

On 25 May 2018 a new personal data protection regulation adopted by the European Union, the General Data Protection Regulation, came into force. The Regulation aims to guarantee the protection of the data of individuals in all EU member states and to unify the rules for its processing.

As a controller of personal data in the provision of tourist services, Shery Tour Ltd meets all the requirements of the new regulation, collecting personal data only to the extent necessary for providing the service, and keeping it responsibly and lawfully.

Shery Tour Ltd carries out its activities in accordance with the Bulgarian Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

As a trader, Shery Tour Ltd guarantees its clients the confidentiality of the personal data they provide. That data will not be used, disclosed or brought to the attention of third parties.

Shery Tour Ltd undertakes not to disclose any personal data about its clients to third parties, whether state authorities, companies, individuals or others, unless:

the client has given their explicit consent;
the information has been requested by state authorities or officials who, under the applicable law, are entitled to request and collect such information, and the trader is obliged by law to provide it;
the information is needed by third parties for the performance of a service under a contract concluded between the client and Shery Tour Ltd: airlines, transport companies, hotels or hotel operators, insurance companies and other operators of services performed as part of a travel package or as a separate service.

What types of personal data Shery Tour Ltd collects, processes and stores

Shery Tour Ltd carries out the following operations with personal data for the following purposes:

Registration of a user on the website and performance of a contract for tourist services (coach and flight reservations, coach and flight tickets, hotel accommodation, organised coach trips, organised air trips, individual trips and reservations, group visits, gift vouchers, value vouchers and others): the purpose of this operation is to create a user request linked to the service used. Conclusion of the impact assessment: based on the above impact assessment, the operation "Conclusion of a contract for a tourist service" is considered admissible and provides sufficient guarantees for the protection of the rights and legitimate interests of the data subjects in accordance with the requirements of the GDPR.

Conclusion and performance of a commercial transaction with a client or partner: the purpose of this operation is the conclusion and performance of a contract with a commercial partner or client and its administration.

Sending informational messages: the purpose of this activity is administering the process of sending messages to clients concerning notification of an upcoming payment, an expiring payment deadline, an upcoming change in services, or reminders about upcoming trips, in accordance with the service contract.

Sending a newsletter: the purpose of this operation is administering the process of sending newsletters to clients who have stated that they wish to receive them.

Shery Tour Ltd processes the following categories of personal data and information for the following purposes and on the following grounds:

Your identifying data

First name and surname, email address, telephone, mobile telephone.

Purpose for which the data is collected: 1) registration of a user request for establishing a contractual relationship for a tourist service; 2) contacting the user and sending information to them, including, where they have expressed the wish, sending newsletters and promotional messages.

Legal basis for processing your personal data: by accepting the general terms and purchasing a service, a contractual relationship is created between Shery Tour Ltd and you, on which basis we process your personal data (Article 6(1)(b) GDPR).

Identifying data of the representative and the travellers

Full name in Cyrillic, full name in Latin script, Unified Civil Number (EGN), address and telephone.

Purpose for which the data is collected: 1) generating a user request for a tourist service; 2) contacting the user and sending information to them, including, where they have expressed the wish, sending newsletters and promotional messages.

Additional data provided by you

If you wish to add to the data in your user request, you can fill in details of:

your identity card: number, valid until, issued on;
your passport: number, valid until, issued on.

Purpose for which the data is collected: supplementing user information and creating documents related to a purchased service.

Legal basis for processing the data: by accepting the general terms and purchasing a service, a contractual relationship is created between Shery Tour Ltd and you, on which basis we process your personal data (Article 6(1)(b) GDPR).

Other data that Shery Tour Ltd processes

When you visit our website www.sherytour.bg, we collect data about the IP address used.

Purpose for which the data is collected: improving the security of the service and localising the interface, statistical and marketing research.

Legal basis for processing the data: the IP address is collected on the basis of the legitimate interests of the controller (Article 6(1)(f) GDPR).

Your data for issuing an invoice to an individual

If you wish to be issued an invoice as an individual, you need to provide your Unified Civil Number.

Purpose for which the data is collected: issuing an invoice for payments under a concluded contract for services.

Legal basis for processing your personal data: by accepting the general terms or concluding a written contract, a contractual relationship is created between Shery Tour Ltd and you, on which basis we process your personal data (Article 6(1)(b) GDPR).

Shery Tour Ltd does not collect or process personal data that:

reveals racial or ethnic origin;
reveals political, religious or philosophical beliefs, or trade union membership;
constitutes genetic or biometric data, data about health, or data about sex life or sexual orientation.

Shery Tour Ltd uses your personal data for the purposes of technical administration of the website, client management, product surveys and marketing, only to the extent necessary for the purpose and only where the client has provided it explicitly and voluntarily.

Personal data is transferred to state institutions and authorities only within the mandatory provisions of the applicable law. Our staff are bound by a duty of confidentiality.

The personal data has been collected by Shery Tour Ltd from the persons it relates to.

The company does not carry out automated decision-making with data.

Your rights in the collection, processing and storage of your personal data

Withdrawing consent to the processing of your personal data

If you do not want all or part of your personal data to continue to be processed by Shery Tour Ltd for a specific purpose or for all processing purposes, you can withdraw your consent at the earliest 3 days after the completion of the tourist service that is the subject of the contractual relationship between Shery Tour Ltd and the client.

A free-form request to withdraw consent can be sent to office@sherytour.bg.

Shery Tour Ltd may ask you to verify your identity and that you are the person the data relates to.

Erasure is carried out within 7 to 20 working days.

If you withdraw consent to the processing of personal data that is mandatory for creating and maintaining your request for a tourist service, the request will be deactivated.

Right of access

You have the right to request and receive confirmation from Shery Tour Ltd as to whether personal data relating to you is being processed.

You have the right to access the data relating to you, as well as the information concerning the collection, processing and storage of your personal data.

On request, Shery Tour Ltd provides you with a copy of the processed personal data relating to you, in electronic or another suitable form.

Access to the data is provided free of charge, but Shery Tour Ltd reserves the right to impose an administrative fee if requests are repetitive or excessive.

Right to rectification or completion

You can correct or complete inaccurate or incomplete personal data relating to you by submitting a request to Shery Tour Ltd.

Right to erasure ("right to be forgotten")

You have the right to ask Shery Tour Ltd to erase the personal data relating to you, and Shery Tour Ltd is obliged to erase it without undue delay where one of the following grounds applies:

the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you withdraw the consent on which the processing is based and there is no other legal ground for the processing;
you object to the processing of the personal data relating to you, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing;
the personal data has been processed unlawfully;
the personal data must be erased to comply with a legal obligation under EU law or the law of a member state that applies to Shery Tour Ltd;
the personal data was collected in connection with the offering of information society services.

Shery Tour Ltd is not obliged to erase the personal data if it stores and processes it:

for exercising the right of freedom of expression and the right to information;
for compliance with a legal obligation that requires processing under EU law or the law of the member state that applies to the Controller, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in it;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, for scientific or historical research, or for statistical purposes;
for the establishment, exercise or defence of legal claims.

To exercise your right to be forgotten, you need to submit a request to Shery Tour Ltd at office@sherytour.bg, and to verify your identity and that you are the person the data relates to before Shery Tour Ltd, by presenting your identity card in person for identification purposes and, where necessary, entering the access credentials of the person the data relates to before a member of Shery Tour Ltd staff.

Shery Tour Ltd does not erase data it is legally obliged to store, including for defence against legal claims brought against it or for proving its rights.

Right to restriction

You have the right to require Shery Tour Ltd to restrict the processing of data relating to you where:

you contest the accuracy of the personal data, for a period allowing Shery Tour Ltd to verify its accuracy;
the processing is unlawful, but you do not want your personal data erased, only its use restricted;
Shery Tour Ltd no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of your legal claims;
you have objected to the processing, pending verification of whether Shery Tour Ltd's legitimate grounds override your interests.

Right to data portability

You can at any time download the data stored and processed about you in connection with the use of the services, directly by an email request.

You can ask Shery Tour Ltd to transfer your personal data directly to a controller named by you, where this is technically feasible.

Right to be informed

You can ask Shery Tour Ltd to inform you of all recipients to whom the personal data for which rectification, erasure or restriction of processing was requested has been disclosed. Shery Tour Ltd may refuse to provide this information if this would be impossible or would require disproportionate effort.

Information about the cookies we use and their functions

Analysis of usage data: to recognise visitors' preferences for our offerings online, we use products that let us tailor the content of our web pages, which improves what we can offer you. To activate these functions, your explicit consent is required.

If you later do not want Shery Tour Ltd to collect and analyse information about your visit, you can opt out at any time.

To implement this opt-out technically, a marker is set to Off in your browser. This cookie serves solely to register your opt-out. Please note that for technical reasons the cookie applies only to the browser in which it was set. If you delete your cookies or use another browser or device, you will need to set your choice again.

On our website you can subscribe to a newsletter if you wish. The data provided when subscribing will be used solely for sending the newsletter. You can end your subscription at any time using the unsubscribe option provided.

What security measures we have taken

The security of every type of information on our infrastructure, including personal data, is a priority for us as a company. Security is something we cannot compromise on.

We make every effort to comply fully with the new personal data protection regulation, we add new rules, and we make sure user information is protected to the highest standard.

Privacy policy