Privacy Policy

Gaia Exclusive Retreats, provided by the sole proprietorship limited liability company under the name “Gaia Essence LTD,” reg. no. 207660452, hereinafter referred to as the “Company,” attaches particular importance and respect to the protection of your personal data. This Privacy Policy (hereinafter referred to as “Policy”) concerns the conditions for the collection, storage, and use of personal data by the aforementioned Company, based in Sofia, Bulgaria, Stolichna, city of Sofia, p.c. 1574, Slatina district, 158 GEO Milev St (БЪЛГАРИЯ, София (столица), Столична, гр. София, p.c. 1574, р-н Слатина, ул. ГЕО МИЛЕВ № 158) tel.: +30 694 592 7340 and email: info@gaiaexclusiveretreats.com

About Us

The Company is responsible for the site www.gaiaexclusiveretreats.com, which is the Company’s website (hereinafter referred to as the site). The personal data you provide us during your registration or visit to our website is subject to processing and will be kept in a record under our Company’s responsibility. Additionally, any other personal data you grant us is also processed and stored in a record under our Company’s responsibility.

This Policy and its Terms may be updated at regular intervals and should therefore be regularly updated and checked for any changes.

DEFINITION OF PERSONAL DATA

The term “personal data,” as utilized in this Policy, pertains to information concerning data subjects, namely natural persons, whether individuals or professionals. Such information may include but is not limited to name, postal address, email address, telephone number, etc., which can be utilized to ascertain the identity of a customer or visitor to the site.

DEFINITION OF PERSONAL DATA PROCESSING

Processing of Personal Data encompasses a range of activities, including but not limited to the collection, registration, organization, storage, adaptation, modification, retrieval, search of information, use, transmission to third parties, dissemination, association, combination, restriction, deletion, and destruction of Personal Data of individuals.

METHOD OF COLLECTION OF PERSONAL DATA

We gather information about you in various scenarios, including:

  1. When directly contacting us, through our call center, to request information.
  2. During your visit to the Website.
  3. If you respond to our promotional activities or information requests, for instance, by completing a response form or entering your data online via the contact form on our website.
  4. To register as a member and open an Account.
  5. If you provide personal data on behalf of a third party, it is imperative that you ensure the third party has previously been made aware of this Policy. Kindly assist us in maintaining the accuracy of your information by notifying us of any changes to your personal data.

WHAT PERSONAL DATA DO WE COLLECT

The following categories of data pertaining to you may be collected and further processed through the various services and media described in this Policy:

  1. Communication Data: For example, name, telephone numbers, fax number, email addresses, postal codes.
  2. Website Use & Contact: IP addresses, browsing history for statistical purposes.
  3. Information about Contact Purposes: Details concerning the reasons for contacting us, such as inquiries about our services, support requests, complaints, and claims.
  4. The Website may utilize cookies to enhance the user experience during browsing and to improve the overall quality of its services. Cookies are small text files sent to a user’s computer when visiting a site. While stored on the visitor’s or user’s hard disk, they do not access any documents or files on the computer. Cookies are employed to facilitate access to specific services, gather statistical data to identify areas of usefulness or popularity, or for marketing purposes. The visitor, user, or member of the website or application can configure their browser to reject all cookies or receive notifications when a cookie is sent. However, it should be noted that certain features or services of the website may not function properly without cookies.

We collect the aforementioned necessary information voluntarily provided by you.

PROCESSING OF PERSONAL DATA

We do not make decisions or create profiles based on automated processing of your data.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The processing of your data related to the aforementioned actions is based on your explicit consent.

PURPOSE OF PERSONAL DATA PROCESSING

The personal data provided by users on any page or service of our website are exclusively intended for the provision of our services and communication with users for informational purposes.
Personal data provided by users/members on any part of the Website are strictly for ensuring the operation of the services provided and the legality of the relevant communications. They may not be accessed or used by any unauthorized third party, in accordance with the provisions of the relevant regulations of the law currently in force concerning the processing of personal data. Furthermore, while using the services of the Site, additional information may be requested or collected for statistical purposes. However, this information is disconnected from the user’s/member’s personal data in accordance with the legislation on personal data protection.

In summary, we request only the information necessary to provide you with an exceptional browsing experience, tailored services, and effective communication. Therefore, we collect your information for the purpose of supporting our visitors, delivering our services, and maintaining communication.

In particular, we collect your information for the purpose of registering you as a member of the site and communicating with you regarding the services you have requested or information about our services.

DATA DISCLOSURE

The recipients of the Data are exclusively the necessary personnel and associates of the Company, who are bound by confidentiality agreements. We may share or disclose your data only when explicitly requested by you or when required by law.

DATA PROCESSING AGREEMENT

Data processors engaged by the Company have agreed to and are bound by the following commitments:

  • Maintain confidentiality,
  • Not disclose data to third parties without the Company’s explicit consent,
  • Implement appropriate security measures,
  • Adhere to the legal framework for the protection of personal data, especially the GDPR Regulation.

DATA PROCESSING AND STORAGE DURATION

The data provided by you will be retained by us only for as long as necessary to fulfill the purpose for which you have communicated your data to us, and in compliance with applicable laws.
In particular, your data is retained upon obtaining relevant consent, which is acquired through your voluntary disclosure and after you have acknowledged the Privacy Policy posted on the homepage of our website. Your data will be retained until you request its removal by sending a request to the Company’s mailing address or until it is no longer necessary for the aforementioned purposes.

Access to your data is restricted to authorized personnel who require it for specific purposes.

DATA SECURITY

We are committed to protecting your Personal Data. We have implemented appropriate organizational and technical measures to secure and protect your data from any form of accidental or fraudulent processing.

These measures will be regularly reviewed and amended as necessary to ensure the continued security of your personal data.

Processing of your data is only permitted by our authorized personnel, employees, and associates, solely for the purposes stated above.

YOUR RIGHTS AS A DATA SUBJECT

  1. You have the right to access your personal data. This entails being informed by us about whether and which data we process. You may request information about the purpose of the processing, the types of data we retain, to whom we disclose it, the duration of storage, whether automated decision-making processes are used, as well as other rights such as correction, deletion, restriction of processing, and the right to lodge a complaint with the Data Protection Authority.
  2. You have the right to correct inaccurate personal data. If you discover any errors in your personal data, you may request correction.
  3. You have the right to erasure (right to be forgotten). You may request the deletion of your data if it is no longer necessary for the aforementioned processing purposes or if you wish to withdraw your consent, provided it is the sole legal basis.
  4. You have the right to data portability. You may request to receive the data you have provided in a readable format or ask us to transfer it to another controller.
  5. You have the right to restrict processing. You may request the restriction of processing while your objection is being assessed.
  6. You have the right to object to the processing of your data. You may object to the processing of your data or withdraw your consent, and we will cease processing your data unless there are overriding legitimate reasons.

EXERCISING YOUR RIGHTS

To exercise your rights, please address your request in writing to the company via email.

For any inquiries, suggestions, or statements related to these matters, please contact us via email or by using the contact form provided.

Through the aforementioned channels, you may also contact us for updates on the progress of your requests.

HANDLING OF REQUESTS

We will respond to your requests promptly and free of charge, within one (1) month of receiving your request. However, if your request is complex or if there is a high volume of requests, we will inform you within one month if an additional two (2) month extension is required, within which we will respond to you.

If your requests are manifestly unfounded or excessive, particularly due to their repetitive nature, we may charge a reasonable fee to cover administrative costs or refuse to respond to the request.

APPLICABLE LAW

We process your Data in accordance with the General Data Protection Regulation, as well as with relevant national and European laws and regulations governing the protection of personal data.

MODIFICATION OF THIS POLICY

We will update this Policy as necessary. In the event of significant changes to the Policy or our use of your Personal Information, we will notify you through prominent notices prior to the changes taking effect, or through other appropriate means. We encourage you to review this Policy regularly to stay informed about the protection of your Data.

The Company is the Data Processor responsible for processing.

Updated 11 April 2024.