Book now

Privacy Notice of Grand Resort Pamporovo

November 5, 2025

When you use the services of Grand Resort Pamporovo Hotel or Grand Resort Pamporovo provided by ASK FOR HELP EOOD, hereinafter referred to as “ASK FOR HELP” or “we”, you entrust us with your personal information. This privacy notice is intended to help you understand what data we collect, why we collect it, and what we do with it. This is important, and we hope you will take the time to read the information carefully.

What is personal data?

According to the General Data Protection Regulation (“GDPR”), personal data is defined as: “Any information relating to an identified natural or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or by one or more characteristics specific to the physical, physiological, genetic, mental, mental, economic, cultural or social identity of that natural person’.

Other key concepts

‘Controller’ means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Data processor” means a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller.

“Recipient” means a natural or legal person, public authority, agency or other entity to which personal data is disclosed, whether it is a third party or not. At the same time, public authorities that may receive personal data in the context of a specific investigation in accordance with Union law or the law of a Member State are not considered to be ‘recipients’; The processing of such data by those public authorities complies with the applicable data protection rules in accordance with the purposes of the processing.

‘Third party’ means a natural or legal person, public authority, agency or other body other than the data subject, controller, processor and persons who, under the direct supervision of the controller or processor, have the right to process personal data.

‘Consent of the data subject’ means any freely expressed, specific, informed and unambiguous indication of the will of the data subject, by means of a statement or a clear affirmative action, which expresses his consent to the processing of the personal data relating to him/her.

Why does ASK FOR HELP EOOD collect and store personal data?

To provide you with one of our services, such as hotel accommodation, or online reservations and payments – bank transfer via credit and/or debit card, for your registration as a guest of the hotel, so that we can provide you with information requested by you, for identification before concluding a contract with you.

We ensure that the information we collect and use is relevant for any of the above purposes and is not for the purpose of invading your privacy or privacy.

For the purposes of communication with advertising and marketing intentions, ASK FOR HELP LTD will ask you for your explicit consent to receive them, which you can always withdraw.

What categories of personal data do we collect and process?

The categories of personal data we process are as follows: three names, phone number, email address, civil identification number, data from an identity document – number and date of issue, bank account number, IP address.

As our customers, we receive your personal data online or offline, on the basis of your voluntary consent, on the basis of a contract concluded between us or by virtue of legal provisions.

What types of cookies does the Grand Resort Pamporovo website use?

We use our own and third-party cookies to manage site content, produce personalized ads, measure results, and analyze traffic. Learn more about our Cookie Policy.

The personal data we collect will only be used for one or more of the following purposes

Here are what they are:

  • To provide information requested by you;
  • Correspondence before concluding a contract;
  • Identification when drawing up documents for concluding a contract;
  • Identification in the preparation of documents for concluding a contract for the provision of hotel services;
  • Marketing and/or advertising information;
  • Designing personalized ads, remarketing, and measuring the results that ads you can always opt out of receiving.


If we need to use your personal data for a new purpose that is not covered by this privacy notice, we will provide you with a new notice and when and where necessary, we will require your prior consent to the new processing.

Grounds for collection and storage of personal data

The basis that gives us the right to process your data is one or more of the following:

  • your consent;
  • for the purpose of performing a contract with you or our intention to enter into such a contract;
  • where processing is necessary to comply with our legal obligation;
  • to protect your interests or those of another person, as well as to protect our legitimate interest.
Children’s personal data

We do not collect personal data from children under the age of 16. If we learn that we are processing personal information of a child under the age of 16, we will take steps to delete the information as soon as possible. If parents and/or legal representatives of children discover that children under their guardianship have given their data to ASK FOR HELP EOOD, please contact us at the contact addresses specified in this notice. We will delete the information as soon as possible.

Disclosure of your personal data to third parties

The following organizations may receive from us, only if necessary, your personal data:

  • The banking institution we work with;
  • The accounting firm that serves us;
  • Our offices that work on a partnership basis;
  • Google, Facebook, and other ad networks and platforms.


When ASK FOR HELP shares information about you with third parties – subcontractors of ASK FOR HELP EOOD, we enter into contracts with these third party subcontractors and take measures to ensure that they provide a level of data protection in accordance with the agreed standard for this and in accordance with the requirements of Regulation (EU) 2016/679 (“GDPR”) and the applicable legislation. Your data is also considered confidential to our partners.

It may be necessary – by law, in litigation, in litigation and/or at the request of public and governmental authorities in or outside your country of residence – to disclose your personal information. We may also disclose information about you if we determine that such disclosure is necessary or appropriate for national security, law enforcement, or other matters of public concern.

Transfer of personal data to a non-EU country or to an international organisation

We do not intend to transfer your personal data to third parties without first informing you and obtaining your consent to do so.

Data retention period

We process and store personal data for a period necessary to fulfill the purposes set out in this Privacy Policy, unless we are required by law to retain it for a longer period. According to the type of data and the purposes for which it was collected, a retention period is set, with the expiration of which the information is deleted.

Your rights as a subject of personal data are as follows

At any time while we store or process your personal data, you, as a data subject, have the following rights:

  • You have the right to request a copy of your personal data from ASK FOR HELP EOOD and the right to access your personal data at any time;
  • You have the right to ask ASK FOR HELP EOOD to correct without undue delay your inaccurate personal data, as well as data that are no longer up-to-date;
  • You have the right to request from ASK FOR HELP EOOD to delete your personal data without undue delay in the presence of any of the following grounds:
    – the personal data is no longer necessary for the purposes for which it was collected;
    – when you have withdrawn your consent, in case the basis for the processing and storage of personal data is consent;
    – when you have objected to the processing;
    – where the processing is unlawful;
    – where personal data needs to be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to us as a data controller;
    – where personal data have been collected in connection with the provision of information society services.
  • We have the right to refuse to delete your personal data for the following reasons:
    – in the exercise of the right to freedom of expression and the right to information;
    – to comply with a legal obligation on our part or to carry out a task in the public interest,
    for reasons of public interest in the field of public health;
    – for the purposes of archiving in the public interest, for statistical purposes, in so far as the deletion is likely to make it impossible or seriously impede the achievement of the purposes of such processing;
    – or for the establishment, exercise or defence of legal claims.
  • You have the right to ask ASK FOR HELP EOOD to restrict the processing of your personal data, in which case the data will only be stored, but not processed. Our refusal to restrict will be explicitly only in writing, and we are obliged to motivate it with a legitimate reason;
  • You have the right to withdraw your consent to the processing of your personal data at any time with a separate request made by ASK FOR HELP EOOD, in case the basis for the processing and storage of personal data is consent;
  • You have the right to object at any time to the processing of your personal data where there are legitimate grounds for doing so;
  • You have the right to data portability in a structured, widely used and machine-readable format;
  • You have the right to lodge a complaint with the Commission for Personal Data Protection if you believe that your data protection rights have been violated.
Policy for voluntary settlement of disputes that have arisen

It is our policy to voluntarily settle any disputes that arise in relation to the processing of your personal data, and for this reason we would welcome you to contact our Data Protection Officer first before submitting a complaint directly to the supervisory authority.

How will we store and protect your personal data that we collect?

ASK FOR HELP LTD will process (collect, store and use) the information provided by you in a manner that is compatible with the requirements of the General Data Protection Regulation GDPR and the Personal Data Protection Act in force on the territory of the country. We will strive to keep the information accurate and up-to-date.

We will not keep information about you longer than is reasonably necessary to fulfill the specific purposes for which it was collected and of which you are notified here.

Some of the retention periods of information depend on legal obligations to keep documents and information within certain minimum periods, such as the Accountancy Act or the Anti-Money Laundering Measures Act. We will take all foreseeable technical and organizational measures to ensure the protection of your data from unauthorized access, such as encryption, anonymization, masking and deletion after the expiration of the storage period.

Update

We have the right to update this Statement from time to time, which update you will be aware of. In case of a change in this policy, a notice will be published on our website, as well as the updated Privacy Policy.