PRIVACY POLICY
Version: 19 May 2025
- SCOPE OF APPLICATION
This Privacy Policy applies to all visitors and users of our website, categorized by how they submit personal data:
1.1. Unregistered Visitors
Users who submit personal data via our contact form at /contact-us/. Any data collected through this channel is processed in accordance with our Candidate Privacy Policy.
1.2. Registered Users
There are two types of registered users:
- a) Candidates
Candidates provide personal data when they:
1. Subscribe to receive job alerts by email
2. Apply for a position or request additional information
3. Create an account on our portal (including establishing a personal profile for sharing data with third‐party partners)
4. Opt-in to receive newsletters, promotions, or event invitations via electronic channels
For full details on how we handle candidate data, please see our Candidate Privacy Policy.
- b) Employers
Employers submit personal data when they post job listings, training programs, or events.
For more on how we process employer data, please refer to our Employer Privacy Policy.
- DATA CONTROLLER
PREMIUM INFORMATION SYSTEMS LTD
(“PREMIUM INFOSYSTEMS” or the “Controller”)
- Registered Office: 60, Han Asparuh, Sofia Sredets, Sofia 1000
- Company VAT-Nr. : BG205552111
- Data Protection Officer: dpo@pemiuminfosys.com
- Purposes of Personal Data Processing
PREMIUM INFOSYSTEMS processes personal data collected through its website for the following purposes:
Managing Job Applications and Information Requests
Candidates may apply for job offers or request information on job postings published via “hotelsassistance.com”. Certain personal data must be provided, such as name, surname, email address, academic and professional details, as well as postal address. This data is processed to facilitate the job application process and enable employers to assess the Candidate’s profile. The legal basis for processing this data is the Candidate’s consent and the need to take pre-contractual steps during recruitment.
Account Registration Management
Candidates may register on PREMIUM INFOSYSTEMS’ platform “hotelsassistance.com”, to access full features and services, including the creation of a personal profile. Data provided during registration, or later within selection processes, will be processed accordingly. The legal basis for this processing is the Candidate’s voluntary consent.
Handling Inquiries and Suggestions
PREMIUM INFOSYSTEMS processes user data to respond to inquiries, requests, or suggestions submitted via contact forms. This processing is based on the Candidate’s consent and PREMIUM INFOSYSTEMS’ legitimate interest in delivering user support services.
Sending Commercial Communications
PREMIUM INFOSYSTEMS may send updates, promotions, or third-party offers related to employment, training, or events via electronic means. This processing is based on PREMIUM INFOSYSTEMS’ legitimate interest.
Event Participation
With the Candidate’s consent, PREMIUM INFOSYSTEMS may process data to inform about or facilitate participation in recruitment or career events.
Quality and Satisfaction Surveys
PREMIUM INFOSYSTEMS may conduct surveys to measure user satisfaction and improve service quality. This processing is based on legitimate interest.
No Automated Decision-Making
PREMIUM INFOSYSTEMS does not make automated decisions that could affect the outcome of a job application.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes outlined above, including legal obligations. PREMIUM INFOSYSTEMS determines retention periods based on the volume, nature, and sensitivity of the data, applicable legal limits, risk of harm from unauthorized access, and the purposes stated in this Privacy Policy.
- Sharing of Personal Data with Third Parties
PREMIUM INFOSYSTEMS may disclose personal data to competent public authorities (e.g. courts or government bodies) when legally required. Personal data may also be shared with companies that have expressed interest in the Candidate’s application, for recruitment-related purposes. These entities are required to process data strictly in line with the purposes set out in this Privacy Policy.
Once personal data is shared with such companies (with the Candidate’s authorization), those companies become independent data controllers. PREMIUM INFOSYSTEMS is not responsible for any further data processing they carry out beyond the scope of its platform “hotelsassistance.com”.
Additionally, when Candidates submit data directly to companies—whether via PREMIUM INFOSYSTEMS or through external means, PREMIUM INFOSYSTEMS assumes no responsibility for such processing. In these cases, data is considered to be provided directly by the Candidate to the respective company.
- Exercise of Rights
As the data subject, the Candidate has the right to access, rectify, delete, and transfer their personal data. They may also request to restrict or object to its processing, and withdraw consent at any time, free of charge. Requests can be submitted to PREMIUM INFOSYSTEMS using the contact details provided at the beginning of this Privacy Policy for Candidates.
- Right of Access: Candidates can request confirmation as to whether PREMIUM INFOSYSTEMS is processing their personal data and, if so, obtain access to that data and information on the purpose, categories, recipients, and storage duration.
- Right to Rectification and Deletion: Candidates may request the correction of inaccurate or outdated data, or the deletion of their personal data when it is no longer necessary or when legal conditions permit.
- Restriction, Objection, and Consent Withdrawal: In certain cases (e.g., data accuracy is contested), Candidates can request that their data be processed only for specific purposes. They may also object to processing or withdraw consent at any time. In such instances, PREMIUM INFOSYSTEMS will stop processing the data unless there are overriding legitimate grounds.
- Right to Data Portability: Candidates have the right to receive their personal data in a structured, commonly used, and machine-readable format and, where applicable, to transmit it to another data controller.
- Additional Rights: If data is transferred outside the EU, Candidates are entitled to know what safeguards are in place and how to obtain a copy of them.
Candidates may also file a complaint with the Bulgarian Data Protection Authority (Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592) if they believe their rights have been violated.
- Candidate Responsibilities
Candidates must be at least 18 years old and ensure that all personal data they provide to PREMIUM INFOSYSTEMS via “hotelsassistance.com” is accurate, complete, and current. They are responsible for updating their data as needed to reflect their true situation.
If Candidates provide third-party data, they must confirm that they have informed the individuals concerned and obtained their consent to share that data with PREMIUM INFOSYSTEMS for the relevant purposes.
Candidates are fully liable for any false or inaccurate data they provide and for any damage this may cause to PREMIUM INFOSYSTEMS, including always “hotelsassistance.com” or third parties.
- Security Measures
PREMIUM INFOSYSTEMS commits to handling personal data confidentially and in accordance with applicable data protection laws. The company implements technical and organizational safeguards to protect personal data against unauthorized access, alteration, loss, or misuse, considering the state of technology and potential risks.
- Updates and Contact Information
PREMIUM INFOSYSTEMS may revise this Privacy Policy for Candidates from time to time. We encourage you to check it regularly to stay informed of any updates.
For questions, to exercise your rights, or to raise concerns about the processing of your personal data, you can contact us at:
📧 dpo@premiuminfosys.com
- Purposes of Personal Data Processing
Personal data collected through the PREMIUM INFOSYSTEMS website, i.e. “hotelsassistance.com” will be processed for the following purposes:
- Managing Job Postings: This includes publishing paid job advertisements and accessing the candidate database for recruitment purposes. The legal basis for processing this data is the execution of a contract to ensure proper delivery of PREMIUM INFOSYSTEMS services.
- User Account Management: Creating and managing Business user accounts to allow access to PREMIUM INFOSYSTEMS products and related services. The legal basis is also the execution of the contractual relationship.
- Handling Inquiries and Suggestions: Processing personal data submitted through contact forms to address questions, incidents, or suggestions. This is based on the user’s consent and PREMIUM INFOSYSTEMS’ legitimate interest in offering appropriate support services.
- Sending Commercial Communications: PREMIUM INFOSYSTEMS may send promotional communications, including updates and third-party offers (related to employment, training, or events), via electronic means. This processing is based on PREMIUM INFOSYSTEMS’ legitimate interest.
- Event Participation: If applicable, personal data may be processed to manage participation in events organized by Businesses for candidate selection. The legal basis is the fulfillment of the contractual relationship.
- Quality and Satisfaction Surveys: PREMIUM INFOSYSTEMS may invite Businesses to participate in satisfaction surveys and related promotional activities, such as contests. This is based on PREMIUM INFOSYSTEMS’ legitimate interest in evaluating and improving its services.
PREMIUM INFOSYSTEMS informs the Business that personal data will be retained for the duration of the contractual relationship and, thereafter, for the period necessary to comply with legal obligations, including those related to anti-money laundering and counter-terrorism. Once the retention period expires, data will be securely erased.
Please note that where consent is the basis for processing, it may be withdrawn at any time. However, withdrawal does not affect the lawfulness of prior processing based on consent.
- Processing of Candidate Data
PREMIUM INFOSYSTEMS may share candidate personal data with the Business when the latter uses the platform to manage recruitment processes.
In such cases, the Business becomes the data controller for the candidate’s information and is solely responsible for its subsequent processing. As an independent data controller, the Business must provide its own privacy policy to candidates involved in its recruitment processes.
- Legal Basis and Data Retention
PREMIUM INFOSYSTEMS may disclose Business data to competent authorities (such as courts or public administrations) if required by law.
Additionally, Business data may be shared with interested candidates and affiliated entities as of official business partners of PREMIUM INFOSYSTEMS, solely for the purpose of managing recruitment processes. All such entities are obligated to process personal data only in accordance with the purposes outlined in this Privacy Policy.
- Exercising Your Rights
As the data subject, the Business may exercise the following rights at any time, free of charge:
- Right of Access: To confirm whether PREMIUM INFOSYSTEMS is processing your personal data and to access such data, including information about its purpose, categories, recipients, and retention period.
- Right to Rectification and Erasure: To correct inaccurate or outdated data, and to request deletion where legally appropriate, particularly if the data is no longer necessary for the original purpose.
- Right to Restrict or Object to Processing: In certain cases, such as while contesting data accuracy, you may request that processing be restricted. You may also object to data processing or withdraw your consent at any time. In such cases, PREMIUM INFOSYSTEMS will cease processing unless it has overriding legitimate grounds.
- Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format and, where applicable, to transmit that data to another data controller.
- Other Rights: If your data is transferred outside the European Union, you are entitled to information on the safeguards in place and how to obtain a copy of them.
To exercise any of these rights, please contact PREMIUM INFOSYSTEMS using the details provided at the beginning of this policy.
If you believe your data protection rights have been infringed, you also have the right to file a complaint by notifying the Bulgarian Data Protection Agency (CPDP, Commission of Personal Data Protection) at 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
- Responsibility of the User
The Business confirms that it is over eighteen (18) years of age and guarantees that all personal data provided to PREMIUM INFOSYSTEMS is truthful, accurate, complete, and up to date. The Business is solely responsible for the accuracy of the information it submits and agrees to keep such data updated to reflect its current circumstances.
Additionally, the Business affirms that, where it provides data relating to third parties, it has duly informed them of the content of this Privacy Policy and has obtained their explicit consent to share their personal data with PREMIUM INFOSYSTEMS for the purposes described herein.
In all cases, the Business assumes full responsibility for any false, inaccurate, or incomplete information provided through the platform, as well as for any direct or indirect damages that such information may cause to PREMIUM INFOSYSTEMS or third parties.
- Security Measures
PREMIUM INFOSYSTEMS undertakes to process the Business’s personal data with the highest level of confidentiality and in compliance with its legal duty of secrecy, as required under applicable data protection laws.
To this end, PREMIUM INFOSYSTEMS implements appropriate technical and organizational measures designed to safeguard the security of the data and prevent any unauthorized access, alteration, loss, or processing. These measures are taking into consideration the state of the art, the nature of the data involved, and the specific risks to which such data may be exposed.
- Updates and Contact
PREMIUM INFOSYSTEMS reserves the right to amend or update this Privacy Policy for Businesses as needed to reflect legal developments, technological updates, or changes to our data processing practices. We recommend that you review this policy periodically to remain informed about how your personal data is being processed.
For any questions regarding this Privacy Policy, to exercise your data protection rights, or to express concerns about how your personal data is handled, you may contact us via email at:
📧 dpo@premiuminfosys.com
