This Privacy Policy applies to this website and the Mobile App (GoldenEye App on android and GoldenEye Hotels on iOS)
GE Resorts EAD & BC Industries EOOD
Last updated: November 13, 2025
This Privacy Policy explains how GE Resorts EAD (“we,” “our,” “us”) and BC Industries EOOD process your personal data when you interact with our website, mobile apps (GoldenEye App on Android, GoldenEye Hotels on iOS), hotel services, casino services, spa, restaurant, and marketing communications
1. Data Controllers
Your personal data is processed by the following separate controllers, depending on the service:
| Service | Controller | Contact |
|---|
| Hotel services (bookings, spa, restaurant, loyalty programs) | BC Industries EOOD | legal@goldeneyeresorts.com |
| Casino services & Marketing (player accounts, gambling, promotions, newsletters) | GE Resorts EAD | legal@goldeneyeresorts.com |
For combined services (e.g., loyalty programs spanning hotel and casino), BC Industries EOOD and GE Resorts EAD act as joint controllers with responsibilities as defined above.
2. Personal Information We Collect
We collect the following categories of personal information:
2.1 Device Information
- IP address, browser type, device identifiers, time zone, cookies, web beacons, tags, and pixels;
- Pages visited, interactions, referral websites, and search terms;
Used for site optimization, error tracking, fraud prevention, and marketing analytics.
2.2 Order / Booking Information (BC Industries EOOD)
- Name, billing address, email, phone, payment details (last 4 digits), booking/reservation history.
- Purpose: service fulfillment, payment processing, invoices, customer support.
2.3 Casino / Gambling Data (GE Resorts EAD)
- Player account ID, game history, bonuses, transaction history.
- Purpose: casino services, responsible gaming, regulatory compliance.
2.4 Marketing / Communication Data (GE Resorts EAD)
- Name, email, phone, preferred language, segmentation/preference data.
- Purpose: direct marketing (messaging apps, phone calls, emails), promotions, newsletters.
3. How We Use Your Personal Information
We use your personal information for the following purposes:
| Controller | Data Category | Purpose |
|---|
| BC Industries EOOD | Hotel/Booking Data | Service delivery, payment, customer support, analytics |
| GE Resorts EAD | Casino/Gambling Data | Service delivery, regulatory compliance, responsible gaming |
| GE Resorts EAD | Marketing Data | Direct marketing, campaigns, newsletters, engagement analysis |
| Both | Device/Analytics | Fraud prevention, site optimization, marketing performance |
4. Direct Marketing (GE Resorts EAD)
4.1 Purpose of Processing
Your personal data for marketing is used only to:
- Send promotional offers, campaigns, events, and bonuses from GE Resorts EAD (if opted-in).
- Communicate relevant information about new services (if opted-in).
- Analyze engagement to improve marketing strategies.
4.2 Means / Channels
Marketing communications may be delivered via:
- Messaging apps: SMS, WhatsApp, Viber, push notifications.
- Telephone / voice calls: outbound calls for promotional purposes.
- Email: newsletters, campaigns, or personalized offers.
4.3 Types of Data Processed
- Messaging apps: mobile phone number, name, preferred language.
- Phone calls: phone number, name.
- Email: email address, name, preferred language, segmentation or preference data.
4.4 Optional / Voluntary
- All marketing consents are voluntary. Refusal will not affect your access to other services.
- Consent is freely given, informed, specific, and unambiguous.
4.5 Retention
- Marketing data is retained until you withdraw consent or evidence shows no engagement.
- Periodic reviews are performed to delete or anonymize data no longer needed.
- No automatic withdrawal based on inactivity is applied; retention is based on criteria and engagement.
4.6 Sharing and Third Parties
- Shared only with authorized partners (e.g., email/SMS providers, marketing agencies).
- Full compliance with GDPR and gambling regulations is required by all partners.
- May be shared to comply with legal obligations or regulatory requests.
4.7 Your Rights in Direct Marketing
You have the following rights regarding your personal data for marketing:
- Access - request confirmation of data held and obtain a copy.
- Rectification - correct inaccurate or incomplete personal data.
- Erasure / Right to be Forgotten - request deletion of personal data.
- Restriction of Processing - limit processing of personal data under certain conditions.
- Objection - object to processing of personal data for marketing at any time; withdrawal does not affect prior processing.
- Data Portability - receive your data in a structured, commonly used format.
- Complaint - lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria. You can exercise these rights by contacting us at legal@goldeneyeresorts.com.
5. Sharing Your Personal Information
We may share your personal information with:
- Service providers who process data on our behalf (e.g., SMS/email platforms, payment processors, analytics providers).
- Regulatory authorities when required by law, including gambling regulators.
- Third parties for fraud prevention, security, or legal compliance.
We do not sell your personal information to third parties for marketing purposes.
6. Behavioral Advertising and Marketing
We may use your personal information to deliver targeted marketing and promotions. You can opt out at any time via:
- Email: legal@goldeneyeresorts.com
- Messaging STOP commands for SMS, WhatsApp, Viber, push notifications.
- Unsubscribe links in emails.
- Opt-out tools:
- Facebook Ads: https://www.facebook.com/settings/?tab=ads
- Google Ads: https://www.google.com/settings/ads/anonymous
- Digital Advertising Alliance: http://optout.aboutads.info/
- Retention of Personal Data
| Data Category | Controller | Retention Period |
|---|
| Marketing Data | GE Resorts EAD | Until withdrawn / engagement ceases; periodic reviews |
| Hotel / Booking Data | BC Industries EOOD | Duration of service relationship + legal/accounting obligations |
| Casino / Player Data | GE Resorts EAD | Duration of service + gambling regulation obligations |
| Device / Analytics | Both | Anonymized or deleted after 12 months unless needed for fraud prevention |
| Order / Booking Data | BC Industries EOOD | 10 years for accounting/legal compliance |
8. Data Security
We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
- Encrypted storage and transmission where applicable.
- Access restricted to authorized personnel only.
- Regular security audits and staff training on data protection.
9. International Transfers
Your data may be transferred outside the EU/EEA (e.g., to the U.S., Canada) to service providers. Transfers are made in compliance with GDPR using adequate safeguards, such as standard contractual clauses.
10. Changes to This Privacy Policy
We may update this policy to reflect changes in services, legal obligations, or operational practices.
- Updated policies will be posted on the website and app.
- Continued use of services constitutes acceptance of changes.
11. Contact Information
For questions, complaints, or to exercise your rights:
Email: legal@goldeneyeresorts.com
Postal address: Kapitan Andreevo Village, Golden Eye No. 1, Bulgaria
