Privacy policy

[наименование на дружеството], UIC [ЕИК], registered office [седалище и адрес на управление]. E-mail for data protection questions: [email protected].

• From the contact form: name, organisation, type of organisation, position (optional), e-mail, phone (optional), what you need (optional), your message and whether you would like a demo.
• Technical data when you visit: IP address, browser type and version, the page and the time of the request. Cloudflare processes it to deliver the website and protect it from attacks.
• When the form is sent: browser signals that Cloudflare Turnstile uses to check that a person is sending the form.

We use no analytics, advertising or tracking services and build no visitor profiles.

• Replying to your enquiry, a demo and preparing a quote — Art. 6(1)(b) GDPR (steps at your request before entering into a contract) and, when you write on behalf of an organisation, Art. 6(1)(f) (legitimate interest in replying to the organisation you represent).
• Protecting the website and the form from spam, automated requests and attacks — Art. 6(1)(f) (legitimate interest in the security of the website).
• If we then enter into a contract — performing it and meeting our legal obligations (Art. 6(1)(b) and (c)).

We send no marketing messages. Form data is not used for other purposes and is not sold.

Your name, organisation, e-mail and message are needed for us to reply. Position, phone and needs are optional.

• Cloudflare, Inc. — website hosting, network protection, the Turnstile check and forwarding of our e-mail.
• Sendinblue SAS (Brevo), France — delivers the form message to the Reserva team’s mailbox.
• The provider of our team’s mailbox, where the correspondence is kept.
• Public authorities — only where the law requires it.

The website keeps no form messages in a database — they are sent by e-mail and kept only in our mailbox.

Data is processed in the European Union. Cloudflare is a company based in the USA; where access to data from outside the EU/EEA is possible (for example for technical support), it takes place only on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the Commission (Articles 45 and 46 GDPR).

• Correspondence about an enquiry: up to 2 years after the last contact, if no contract follows.
• If we enter into a contract: for its term and then until the limitation periods expire (5 years), or the periods under the Accountancy Act for accounting documents.
• Technical visit data is kept by Cloudflare for the short period needed for network security.

You have the right to:

• access your data and receive a copy (Art. 15 GDPR);
• rectification (Art. 16) and erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21).

Write to us at [email protected]. We reply without undue delay and within one month at the latest (for complex requests this may be extended by two further months, in which case we will tell you). Exercising your rights is free of charge.

You have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (Комисия за защита на личните данни) — 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, www.cpdp.bg, [email protected], and to seek a judicial remedy.

We make no decisions based solely on automated processing, including profiling.

The current version is published on this page with the date of the last change.