Privacy Policy

1. Data Controller

The data controller of your personal data is [TBD — legal name / company number / legal form], with a registered address at: [TBD — full address].

Contact for data-protection matters: email [TBD — email], phone +359 878 263 887. You can also reach us via WhatsApp on the same number.

2. What data we process

• Data you share voluntarily when sending an inquiry via WhatsApp or phone: phone number, name (if provided), message content, preferred dates and number of guests.
• Technical data logged automatically by our hosting provider (Vercel) when you visit the site: IP address, browser type, request time. Used for technical security and reliability; retained briefly.
• The site does not use cookies or analytics trackers.

3. Purposes and legal bases for processing

• Responding to your inquiries and preparing a reservation — Art. 6(1)(b) GDPR (pre-contractual steps at the request of the data subject).
• Performing a concluded rental contract and related obligations — Art. 6(1)(b) GDPR.
• Compliance with legal obligations (accounting, tax and similar records) — Art. 6(1)(c) GDPR.

4. Recipients of personal data

• WhatsApp / Meta Platforms Ireland Ltd. — the messaging channel you choose to use; WhatsApp's own policy applies to messages you send.
• Vercel Inc. — hosting provider, processing technical logs on our behalf.
• Google LLC — the site reads availability from public iCal feeds; no personal data is sent to Google in that direction.

5. International data transfers

Some of the recipients listed above may process data outside the European Union. In such cases we rely on appropriate safeguards — the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.

6. Retention periods

• Inquiries and messages that do not result in a reservation — for the duration of the conversation and up to 12 months after the last interaction.
• Documents related to concluded contracts — for the periods required by Bulgarian accounting and tax law (up to 10 years).

7. Your rights

You have the right of access to your personal data, the right to rectification, erasure, restriction of processing, data portability and the right to object to processing.

To exercise your rights, please contact us at [TBD — email] or +359 878 263 887. We respond within one month of receiving your request.

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) — 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, kzld@cpdp.bg, www.cpdp.bg.

8. Data security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

9. Changes to this Policy

We may update this Policy from time to time. The current version is always published on this page. The date of the last update is shown below.