Privacy policy

1. Data controller

Миронов.про.ООД, company ID 206623942, registered office гр. Елин Пелин 2100, ул. „Стефан Караджа“ № 22, email mironovtihoslav@gmail.com, phone +359 88 605 7534.

2. What data we process

• Booking data: name, phone, email, notes, dates, stay type, number of guests, extras and payment status. We do not receive card details: these are processed by Stripe.
• Check-in data: identity document details that we must enter in the tourist register under the Bulgarian Tourism Act.
• Video recordings: from the CCTV system covering the parking area and yard.
• Communication: messages by phone, email, Viber or WhatsApp.

3. Purposes and legal bases

• Performance of the accommodation contract: booking, payment, communication (Art. 6(1)(b) GDPR).
• Legal obligations: tourist register, accounting and tax (Art. 6(1)(c) GDPR).
• Legitimate interest: security of property and guests through CCTV, defence of legal claims (Art. 6(1)(f) GDPR).
• Consent: loading Google Maps (Art. 6(1)(a) GDPR). You can withdraw consent at any time.

4. Recipients

• Stripe Payments Europe Ltd.: payment processing;
• Google Ireland Ltd.: Google Maps (with consent);
• Vercel Inc., Supabase Inc. and Resend Inc.: website hosting, database and sending confirmations;
• the Operator’s accountant;
• public authorities: where required by law (e.g. the municipality, the National Revenue Agency, the Ministry of Interior).

5. Transfers outside the EU

Some providers (Google, Stripe) may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

6. Retention

• booking data and accounting records: for the periods required by the Bulgarian Accountancy Act;
• tourist register: for the period required by the Tourism Act;
• video recordings: up to [30] days, unless needed in connection with an incident;
• correspondence: up to 3 years after the last contact.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent. To exercise your rights, write to mironovtihoslav@gmail.com.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

8. Security

We apply technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access and trusted providers.

9. Changes

We may update this policy. The current version is always published on this page.