PRIVACY POLICY

HOTELLERIE SOFIA Ltd.
Effective from: 17.02.2026

1. Who We Are

HOTELLERIE SOFIA Ltd., UIC 148052157
Address: 132 Mimi Balkanska Str., 1540 Sofia, Bulgaria
Email: info@airportstay.bg

We are the data controller responsible for processing your personal data.

2. What Personal Data We Collect

We may collect and process:

• Full name
  • Email address
  • Phone number
  • Address
  • Payment details
  • Booking details
  • IP address and device information
  • CCTV recordings (when visiting the property or parking)
  • Call recordings (if contacting us by phone)

We may also process data available in public registers when legally required.

3. Why We Process Your Data

We process personal data for the following purposes:

1. Contract performance

• Managing reservations
  • Processing payments
  • Issuing invoices
  • Customer support
  • Handling complaints

1. Legal obligations

• Accounting and tax compliance
  • Consumer protection requirements
  • Responding to authorities

1. Legitimate interests

• Security and video surveillance
  • Service quality monitoring
  • Fraud prevention

1. Consent-based processing

• Marketing communication
  • Promotional campaigns
  • Creating an online profile (if applicable)

4. Data Retention

We store personal data:

• For the duration of the contract and up to 5 years after its termination
  • Accounting documents – minimum 11 years
  • CCTV recordings – up to 60 days
  • Call recordings – up to 360 days
  • Marketing data – until consent is withdrawn

5. Third Parties

Your data may be shared with:

• Security companies
  • IT service providers
  • Payment processors and banks
  • Accountants and legal advisors
  • Public authorities when legally required

We do not sell personal data.

6. Your Rights

Under EU Regulation 2016/679 (GDPR), you have the right to:

• Access your personal data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Request data portability
  • File a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg)

Requests can be sent to: info@airportstay.bg

7. Security Measures

We implement technical and organizational measures including:

• Restricted staff access
  • Encrypted systems
  • Secure payment platforms
  • Internal data protection procedures

8. Cookies

Our website uses cookies for:

• Essential website functionality
  • Traffic analytics
  • Improving user experience

You can control cookies through your browser settings.

9. Children

We do not knowingly collect personal data from children under 16 years of age.

10. Updates

We may update this Privacy Policy periodically. The latest version will always be available on our website.