“Palms Burgas” OOD
Here, you can find information about what personal data of yours are collected, how and for what purpose we use them, to whom we provide them, what your rights are as a data subject, and how to contact us or the data protection supervisor.
- Who we are and how you can contact us
“Palms Burgas” OOD is a legal entity entered in the Commercial Register at the Registry Agency with UIC 202346216 and registered office and administrative address at 7, Cont Androvanti Str., Burgas.
“Palms Burgas” OOD is a holder of a licences for the organisation of casino games of chance No: 000030-14915/30.11.2018 approved by Certificate of License No. 000030-15358/07.12.2018, and licences No: 000030-16206 approved by Certificate of License No. 000030-30/03.01.2019 by the State Gambling Commission.
“Palms Burgas” OOD is the controller of the personal data processed in the course of or in connection with the implementation of the company’s business, with the registered office and administrative address of the Company being 7, Kukush Str., Sofia, at which address you can send requests to the Data Protection Officer by mail, personally submit your requests to the registry of the above registered office and administrative address or send by e-mail to firstname.lastname@example.org.
In your message, you should provide the data necessary for your individualization as well as contact details for feedback.
- What data we collect, what purposes we use them for, and what our grounds for processing personal data are
“Palms Burgas” OOD processes personal data in connection with the following main activities: Organizing and conducting online betting.
When pursuing its business activity, the Company processes personal data of its customers.
Data processed when registering and creating a user’s profile on our site:
First name, middle name, surname, nationality, date of birth, identification number of the individual (unique ID number, unique ID number of foreign citizens, another number or identification data under the national law of a non-Bulgarian citizen) (IBAN or bank account number – IBAN certificate, bank name, country), gender, telephone number, confirmation that the individual is over the age of 18, username, IP address, and any other information that the user voluntarily provides when registering or using the services via the Website and under the rules of use that the data subject has agreed upon.
Please note that detailed personal data about you are collected only after you register and start making bets. The grounds for doing so are based on the requirements of the Gambling Act and other special acts and regulations, under which the Company must verify the identity of the gambling participants, and for this purpose various lawful means are used to confirm your identity.
Data processed when participating in games of “Palms Burgas” OOD:
Prior to accepting your stake, the Company has a legal obligation to carry out a procedure to identify you. When doing so, we may require that you provide us with a copy of an official identity document with a photo, a photo of the face of a credit / debit card, etc.
Personal data processed when operating your user’s account:
Prior to authorizing your first payment, you will need to provide a copy of an official ID document by email.
Personal data for creation, processing, withdrawals, and payments are provided and processed in accordance with the applicable legislation in force and stored in the Company’s database.
When “Palms Burgas” OOD processes data based on the consent of the data subject, the personal data are processed only if the individual has been informed and has freely, specifically, and unambiguously expressed their consent for the processing.
The processing of the data is done for the specific purposes precisely defined by the act, with the data being processed lawfully and in good faith and not further and in a manner incompatible with such purposes.
We use your personal data only for the purposes related to the activity pursued by “Palms Burgas” OOD.
We do not perform any further analysis or other processing of the features of the data provided by you; we do not use the data we hold about you for profiling, extracting information, categorizing you in any way or making automated decisions, which could have legal consequences for you or otherwise affect you.
- Data we process for security purposes, for protection against legal claims and in order to offer better services to our customers:
Customer profile / Customer record: If you have used any of our services, we will keep your information after having provided you with the relevant service, namely: your name, email address, telephone number, your betting history, and other relevant data related to our services. We do this for two reasons:
First of all, this information is necessary in case of claims by you or by the user of the service we have provided in order for us to be able to prove the circumstances related to the provision of the service. Information may also be necessary when we are inspected by a competent public authority because of the need to prove to that authority facts and circumstances relating to the provision of the service.
Next, we keep your customer record based on the legitimate interest to track the development of our potential customers’ interest in the services we provide and to improve our offers.
Data we process for the purposes of our newsletter:
Our Company offers you the opportunity to receive information about current or upcoming promotions that we offer upon subscribing to our newsletter. We process the provided category of personal data based on our legitimate interest to keep our existing and potential customers informed about our current and upcoming promotions. We also process such data based on your agreement to receive the newsletter you have expressed by clicking on the subscription button in the Marketing section (I want to receive news).
You can unsubscribe at any time by removing the check mark showing that you wish to receive the newsletter.
- Categories of data recipients outside of “Palms Burgas” OOD
The Company does not disclose personal data to third parties and recipients unless there is a legitimate reason to obtain the data or the data are publicly available due to their inclusion in a public register.
Except in the case of public access to data included in a public register, data recipients, depending on the particular case, may be:
- State authorities and bodies entrusted with public functions within the framework of their powers (State Commission on Gambling, National Revenue Agency, National Social Security Institute, Ministry of Interior, and other similar institutions);
- Our trusted partners who meet the highest standards of security and confidentiality of the information provided to them to the extent we need this to provide the services offered by us such as technical support services on our site, chat platforms to contact us, etc.);
- Banks for the purposes of remuneration payments as well as for the execution of electronic payments;
- Other third parties who receive your personal data are legal entities offering the following non-cash payment services: CashTerminal, Easy Pay, ePay.bg, Maestro, MasterCard, VISA.
- Courier companies and postal operators: for the purpose of conducting correspondence with individuals – data subjects.
- Data Storage Period
As a data controller, “Palms Burgas” OOD processes data for a minimum duration in accordance with the processing purposes and provided for in the legislation in force in accordance with the principle of restriction of storage.
As regards the archives containing customer records for a period of 5 years, in accordance with the national legislation regulating gambling, we apply a 5-year-storage period upon expiry of the prescription period for repayment of public obligations related to the geographic location of the IP address; identification of the date, time, and duration of the gaming session of the individual registered as a participant in a game; and the remaining data are kept for a period of between 2 months and 5 years in accordance with the type of data defining the legal obligation for processing, including their storage.
- Rights of individuals – data subjects
The measures implemented to protect personal data in accordance with the requirements of Regulation 2016/679 aim at ensuring the rights of the individuals whose personal data are processed, namely:
- Right to access;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure (right to be forgotten), should the conditions of Art. 17 of Regulation 2016/679 apply;
- Right to restriction of processing;
- Right to data portability should the portability conditions under Art. 20 of Regulation 2016/679 are present;
- Right to object should the conditions of Art. 21 of Regulation 2016/679 are present;
- Right not to be subject to a decision based solely on automated processing, including profiling.
The above rights can be exercised through a written request to “Palms Burgas” OOD (written on paper or by e-mail), in which you should specify your request. The request should be signed and sent to the Company’s address and the Data Protection Officer via email@example.com.
Right to complain to the Commission for Personal Data Protection
If you believe that your rights under Regulation 2016/679 have been violated, you may file a complaint with the Commission for Personal Data Protection at 2, Prof. Tsvetan Lazarov blvd., 1592 Sofia; www.cpdp.bg, email: firstname.lastname@example.org.
- Transmission of personal data to third countries or international organizations
The Company does not transmit processed personal data to third countries or international organizations.
- Personal data protection measures implemented by “Palms Burgas” OOD
“Palms Burgas” OOD has implemented measures for effective protection of the personal data processed and a possibility of exercising the rights of the data subjects provided for in Regulation 2016/679 by adopting Internal Rules for Personal Data Protection. Procedures for communication in case of complaints, data portability, transparency in processing personal data, managing subjects’ requests, obtaining consent, notifying security breaches, storing and destroying documents, as well as a number of other technical measures to ensure the security of the personal data.
Access to your personal data within our organization is only available to individuals whose work functions require access to the data in order to perform the activities for which the data have been collected and processed. In all contracts we conclude with employees and third parties to whom we assign your personal data processing, we include contractual data privacy clauses.
The Company reserves the right to make changes to and to update this Policy, about which we will notify you by posting a message on our website https://royalepalmscasino-sofia.com/.
The privacy of all the data we hold about you – our customers – have always been our top priority.
Thank you for being our customers!