Privacy Policy

This Privacy Policy applies to this website and the Mobile App (GoldenEye App on android and GoldenEye Hotels on iOS)

GE Resorts EAD & BC Industries EOOD

Last updated: November 13, 2025

This Privacy Policy explains how GE Resorts EAD (“we,” “our,” “us”) and BC Industries EOOD process your personal data when you interact with our website, mobile apps (GoldenEye App on Android, GoldenEye Hotels on iOS), hotel services, casino services, spa, restaurant, and marketing communications

1. Data Controllers

Your personal data is processed by the following separate controllers, depending on the service:

ServiceControllerContact
Hotel services (bookings, spa, restaurant, loyalty programs)BC Industries EOODlegal@goldeneyeresorts.com
Casino services & Marketing (player accounts, gambling, promotions, newsletters)GE Resorts EADlegal@goldeneyeresorts.com

For combined services (e.g., loyalty programs spanning hotel and casino), BC Industries EOOD and GE Resorts EAD act as joint controllers with responsibilities as defined above.

2. Personal Information We Collect

We collect the following categories of personal information:

2.1 Device Information

  • IP address, browser type, device identifiers, time zone, cookies, web beacons, tags, and pixels;
  • Pages visited, interactions, referral websites, and search terms;

Used for site optimization, error tracking, fraud prevention, and marketing analytics.

2.2 Order / Booking Information (BC Industries EOOD)

  • Name, billing address, email, phone, payment details (last 4 digits), booking/reservation history.
  • Purpose: service fulfillment, payment processing, invoices, customer support.

2.3 Casino / Gambling Data (GE Resorts EAD)

  • Player account ID, game history, bonuses, transaction history.
  • Purpose: casino services, responsible gaming, regulatory compliance.

2.4 Marketing / Communication Data (GE Resorts EAD)

  • Name, email, phone, preferred language, segmentation/preference data.
  • Purpose: direct marketing (messaging apps, phone calls, emails), promotions, newsletters.

3. How We Use Your Personal Information

We use your personal information for the following purposes:

ControllerData CategoryPurpose
BC Industries EOODHotel/Booking DataService delivery, payment, customer support, analytics
GE Resorts EADCasino/Gambling DataService delivery, regulatory compliance, responsible gaming
GE Resorts EADMarketing DataDirect marketing, campaigns, newsletters, engagement analysis
BothDevice/AnalyticsFraud prevention, site optimization, marketing performance

4. Direct Marketing (GE Resorts EAD)

4.1 Purpose of Processing

Your personal data for marketing is used only to:

  • Send promotional offers, campaigns, events, and bonuses from GE Resorts EAD (if opted-in).
  • Communicate relevant information about new services (if opted-in).
  • Analyze engagement to improve marketing strategies.

4.2 Means / Channels

Marketing communications may be delivered via:

  • Messaging apps: SMS, WhatsApp, Viber, push notifications.
  • Telephone / voice calls: outbound calls for promotional purposes.
  • Email: newsletters, campaigns, or personalized offers.

4.3 Types of Data Processed

  • Messaging apps: mobile phone number, name, preferred language.
  • Phone calls: phone number, name.
  • Email: email address, name, preferred language, segmentation or preference data.

4.4 Optional / Voluntary

  • All marketing consents are voluntary. Refusal will not affect your access to other services.
  • Consent is freely given, informed, specific, and unambiguous.

4.5 Retention

  • Marketing data is retained until you withdraw consent or evidence shows no engagement.
  • Periodic reviews are performed to delete or anonymize data no longer needed.
  • No automatic withdrawal based on inactivity is applied; retention is based on criteria and engagement.

4.6 Sharing and Third Parties

  • Shared only with authorized partners (e.g., email/SMS providers, marketing agencies).
  • Full compliance with GDPR and gambling regulations is required by all partners.
  • May be shared to comply with legal obligations or regulatory requests.

4.7 Your Rights in Direct Marketing

You have the following rights regarding your personal data for marketing:

  • Access - request confirmation of data held and obtain a copy.
  • Rectification - correct inaccurate or incomplete personal data.
  • Erasure / Right to be Forgotten - request deletion of personal data.
  • Restriction of Processing - limit processing of personal data under certain conditions.
  • Objection - object to processing of personal data for marketing at any time; withdrawal does not affect prior processing.
  • Data Portability - receive your data in a structured, commonly used format.
  • Complaint - lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria. You can exercise these rights by contacting us at legal@goldeneyeresorts.com.

5. Sharing Your Personal Information

We may share your personal information with:

  • Service providers who process data on our behalf (e.g., SMS/email platforms, payment processors, analytics providers).
  • Regulatory authorities when required by law, including gambling regulators.
  • Third parties for fraud prevention, security, or legal compliance.

We do not sell your personal information to third parties for marketing purposes.

6. Behavioral Advertising and Marketing

We may use your personal information to deliver targeted marketing and promotions. You can opt out at any time via:

  • Email: legal@goldeneyeresorts.com
  • Messaging STOP commands for SMS, WhatsApp, Viber, push notifications.
  • Unsubscribe links in emails.
  • Opt-out tools:
    • Facebook Ads: https://www.facebook.com/settings/?tab=ads
    • Google Ads: https://www.google.com/settings/ads/anonymous
    • Digital Advertising Alliance: http://optout.aboutads.info/
    • Retention of Personal Data
Data CategoryControllerRetention Period
Marketing DataGE Resorts EADUntil withdrawn / engagement ceases; periodic reviews
Hotel / Booking DataBC Industries EOODDuration of service relationship + legal/accounting obligations
Casino / Player DataGE Resorts EADDuration of service + gambling regulation obligations
Device / AnalyticsBothAnonymized or deleted after 12 months unless needed for fraud prevention
Order / Booking DataBC Industries EOOD10 years for accounting/legal compliance

8. Data Security

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

  • Encrypted storage and transmission where applicable.
  • Access restricted to authorized personnel only.
  • Regular security audits and staff training on data protection.

9. International Transfers

Your data may be transferred outside the EU/EEA (e.g., to the U.S., Canada) to service providers. Transfers are made in compliance with GDPR using adequate safeguards, such as standard contractual clauses.

10. Changes to This Privacy Policy

We may update this policy to reflect changes in services, legal obligations, or operational practices.

  • Updated policies will be posted on the website and app.
  • Continued use of services constitutes acceptance of changes.

11. Contact Information

For questions, complaints, or to exercise your rights:

Email: legal@goldeneyeresorts.com

Postal address: Kapitan Andreevo Village, Golden Eye No. 1, Bulgaria

GoldenEye Logo

Перфектната комбинация от вълнение и лукс в Свиленград, България. Удобно разположен близо до турската граница.

2026 GoldenEye Hotel & Resort.

Политика за поверителност