Privacy Policy

The protection of your personal data is important to us. We process data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act (ЗЗЛД).

Contact enquiries (form and e-mail)

When you contact us via the form or by e-mail, we process your name, e-mail address, any telephone number and your message. Purpose: handling your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures), supplementary (f). Retention: deletion once your enquiry has been dealt with, unless statutory retention periods apply.

Chat function

If you use the chat function, your input is transmitted to our service provider Groq, Inc. (USA) to generate a reply. Legal basis: Art. 6(1)(f) GDPR. The transfer to the USA is based on appropriate safeguards (Standard Contractual Clauses). Please do not enter sensitive data in the chat.

Contact via WhatsApp

If you click the WhatsApp button, you are redirected to WhatsApp (Meta Platforms Ireland Ltd.); their privacy terms apply. We process the content you send in order to respond. Legal basis: Art. 6(1)(b) and (f) GDPR.

Embedded third-party services and hosting

Weather and sea-state data are loaded via Open-Meteo (Open-Meteo, Switzerland); when the page loads, your IP address is transmitted to the provider (Art. 6(1)(f) GDPR). External links (e.g. Google Maps) open the provider’s site only when you click them. The interactive town map loads map tiles from OpenStreetMap only on click (transmitting your IP to the tile server). Hosting is provided by our processor (STRATO) with servers in Germany. The contact form is protected by Cloudflare Turnstile. When the form is submitted, your IP address and technical characteristics of your browser are transmitted to Cloudflare in order to block automated bulk requests (Art. 6(1)(f) GDPR). Turnstile does not set advertising cookies for this purpose.

Cookies

Technically necessary cookies are required to operate the website and are set without consent. In addition we measure use of the site, but only after your consent: before you agree, no measurement script is loaded and no connection to a measurement service is made. Your decision is stored locally in your browser. If you set an interface preference (e.g. the sound preference on the hero video), it is stored locally upon your active choice and serves operation alone. Embedded third-party content (webcams, maps) is loaded only after a click.

Identity verification for anti-money-laundering

In the event of a specific property transaction, as an obliged entity under чл. 4, т. 18 of the Bulgarian anti-money-laundering act (ЗМИП) we are required to establish the identity of the parties and, where applicable, of the beneficial owner, and to determine any politically-exposed-person status. For this purpose we process identity-document data and, where necessary, information on the source of funds. Legal basis: Art. 6(1)(c) GDPR (legal obligation). The data are stored for the statutory period of five years (чл. 67 ЗМИП) and then deleted.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Please address requests to the e-mail given under the controller.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the Commission for Personal Data Protection (КЗЛД), Sofia 1592, 2 “Prof. Tsvetan Lazarov” Blvd., kzld.bg.

Reach measurement and advertising performance

We measure which pages are read, how visitors reach us and how effective our advertisements are. We pursue no further purposes with this data; in particular there is no profiling for other purposes and no disclosure to third parties beyond the services named below. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without your consent no measurement script is loaded. Your IP address is truncated. You may withdraw your consent at any time using the button at the end of this section. No measurement service is active afterwards, and you will be asked again. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out until then. The services named are provided by companies established in the European Union. Data is transferred to their parent companies in the United States; this is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework of 10 July 2023. The event and user data collected is deleted after 14 months.For these purposes we currently use the following services. If a further service is added, it will be named here before it is put to use:

• Google Analytics 4 — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
• Microsoft Clarity — Microsoft Ireland Operations Limited, One Microsoft Place, Dublin 18, Irland
• Meta-Pixel — Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Irland

In addition, we use what Google calls Google signals within Google Analytics. Google links the data from your visit to your Google account if you are signed in there and have consented to personalised advertising. In doing so, Google may draw on information from your account, such as location, search history and YouTube history. What reaches us is solely aggregated analysis of age groups, gender and interests; we as the operator of this website cannot identify you from it. Google itself assigns the data to your account. This linking takes place only on the basis of your consent under Article 6(1)(a) GDPR and does not occur at all if you do not consent to measurement or if you withdraw your consent. You can view and delete the data Google holds on your account at any time at myactivity.google.com.

Status of this privacy policy: ongoing. It is updated whenever our data processing changes.