Last updated: 22.03.2023
We may collect the following categories of personal data from you:
a. Identity Data: Includes first name, last name, date of birth, and government-issued identification (e.g., passport, driver’s license).
b. Contact Data: Includes email address, phone number, and physical address.
c. Financial Data: Includes payment card details and billing information.
d. Transaction Data: Includes details of your booking history, property inquiries, and payment history.
e. Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
f. Usage Data: Includes information about how you use our website and services.
g. Marketing and Communications Data: Includes your preferences for receiving marketing communications from us and third parties, as well as your communication preferences.
We collect your personal data through various means, including:
a. Direct interactions: We collect personal data when you create an account, book a property, submit an inquiry, or communicate with us (e.g., email, phone, chat).
b. Automated technologies: We collect technical and usage data through cookies, server logs, and other similar technologies when you use our website.
c. Third parties: We may receive personal data about you from third parties, such as payment processors, analytics providers, and marketing partners.
We use your personal data for the following purposes:
a. To provide and manage your bookings and inquiries.
b. To process payments and refunds.
c. To manage and maintain your account.
d. To communicate with you about our services, promotions, and updates.
e. To personalize and improve your experience on our website.
f. To comply with legal and regulatory requirements.
g. To protect our rights and interests, as well as the rights and interests of our users and third parties.
We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis for doing so.
We process your personal data on the following legal basis:
a. Performance of a contract: We process your personal data to fulfill our contractual obligations to you, such as providing you with the booked property.
b. Legitimate interests: We process your personal data for our legitimate interests, such as improving our services, maintaining a secure website, and analyzing user behavior to optimize our website.
c. Consent: We may process your personal data based on your consent, such as sending you marketing communications. You have the right to withdraw your consent at any time.
d. Legal obligations: We process your personal data to comply with applicable laws and regulations, such as tax and reporting obligations.
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law. After that, we will securely delete or anonymize your personal data.
We may share your personal data with the following categories of recipients:
a. Service providers: We may share your personal data with third-party service providers who perform services on our behalf, such as payment processing, customer support, and website hosting.
b. Property owners and managers: We may share your personal data with property owners and managers in order to facilitate your bookings and inquiries.
c. Legal and regulatory authorities: We may disclose your personal data to comply with legal or regulatory requirements, enforce our terms and conditions, or protect our rights and interests, as well as the rights and interests of our users and third parties.
d. Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, we may transfer your personal data to the acquiring entity.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only allow third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
6.1 Third-Party Links
Your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA). We will ensure that appropriate safeguards are in place to protect your personal data in accordance with the GDPR and other applicable laws.
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal data.
Under the GDPR, you have the following rights regarding your personal data:
a. Right to access: You have the right to obtain a copy of your personal data that we hold.
b. Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data.
c. Right to erasure: You have the right to request the deletion of your personal data under certain circumstances.
d. Right to restrict processing: You have the right to request the restriction of processing your personal data under certain circumstances.
e. Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller under certain circumstances.
f. Right to object: You have the right to object to the processing of your personal data under certain circumstances, including for direct marketing purposes.
g. Right to withdraw consent: If we process your personal data based on your consent, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us at firstname.lastname@example.org . We may require you to verify your identity before responding to your request.
11. Contact Us
27 Solunska Str., Sofia 1000, Bulgaria
12. Children’s Privacy
Our website and services are not intended for use by children under the age of 16 without the supervision and consent of a parent or guardian. We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, they should contact us at [Insert Company Email]. If we become aware that we have collected personal data from a child under the age of 16 without verifiable parental consent, we will take steps to remove that data from our systems.”