Legal information
Privacy policy
The data controller for this site is Апарт Енерджи ЕООД.
Апарт Енерджи ЕООД предлага апартаменти, студия и къщи за гости за краткосрочно настаняване. This policy explains what personal data we process, for what purposes, and what rights you have in relation to it, in accordance with Regulation (EU) 2016/679 (GDPR).
UIC (EIK): [ЕИК — попълнете от админ панела]. Registered address: [адрес на управление — попълнете от админ панела].
What Personal Data We Process
When you make a booking or an inquiry through the website, we process data you provide voluntarily: your name, phone number, email address, correspondence address (where relevant), and booking details — stay dates, number of guests and the selected property.
We do not store payment card data — payments are processed by a licensed payment service provider, and your card details are used only by the intermediary bank.
Legal Basis and Purposes of Processing
We process personal data on the basis of contract performance (for booking purposes), legal obligation (e.g. tourist registry requirements) and legitimate interest (to improve our services and communicate with clients), in accordance with Article 6 of Regulation (EU) 2016/679 (GDPR).
Your data is used to: confirm and process bookings; communicate with you about your stay; improve our services and website; and respond to inquiries and customer service requests. We do not use your data for automated decision-making or profiling.
Who We Share Data With
We do not sell or trade your personal data. We only share it with trusted third parties necessary to fulfil your booking (e.g. our payment service provider, accounting or tourist registry administration), or where required by law.
Data Retention and Security
Personal data is kept only for as long as necessary to fulfil your booking and our legal obligations (e.g. accounting legislation), after which it is deleted or anonymised.
We apply appropriate technical and organisational measures to protect your data from unauthorised access, loss or unlawful processing, including restricting access to authorised personnel only.
Cookies
The website uses cookies to analyse traffic and improve the user experience — details are available in our Cookie Policy.
Your Rights
Under the GDPR you have the right to: access your personal data; rectify inaccurate data; erasure ("the right to be forgotten"); restrict processing; data portability; object to processing; and lodge a complaint with the Commission for Personal Data Protection (CPDP).
To exercise these rights, please contact us using the details listed on the "Contacts" page of the website.
Children
Our website and services are intended for individuals over the age of 18. We do not knowingly collect personal data from minors.
Changes to This Policy
If we change this privacy policy, the updated version will be published on this page.