Privacy Policy
Last updated: August 2026
Art. 1 · Who is responsible for your data
The controller of personal data is Hotel Consult Ltd ("Хотел Консулт" ЕООД), company number (ЕИК) 204073745, registered office Sofia 1415, Bulgaria.
For any question relating to this policy: manager@hotelconsult.bg, tel. +359 8998 234 48.
Where we write "we" and "us" below, we mean Hotel Consult Ltd.
Art. 2 · What this document covers
This policy explains what personal data we collect through the hotelconsult.bg website, why we collect it, on what legal basis, how long we keep it, who we pass it to, and what rights you have.
It applies to the website. If we work together under a contract, processing under that contract is governed by the contract itself.
Art. 3 · What we collect, and when
This website collects very little. There is no registration, there are no accounts, and nothing is ordered online.
When you write to us. The contact button opens your own mail programme and the message reaches us directly. We receive what you have written — usually a name, an email address, a phone number and a description of your question. The website stores none of this; it sits in our mailbox.
When you leave a testimonial. The form on the Testimonials page collects a name, a role, the name of the property, the text of the testimonial and an email address for contact. Details are in Art. 5.
When you browse the site. If you have consented, we collect anonymous statistics about the visit — which pages are opened, how long is spent on them, from which country and on what kind of device. Details are in Art. 8.
We do not collect special categories of data — health, origin, beliefs. Please do not send them to us and do not write them into free-text fields.
Art. 4 · Enquiries — why, and for how long
We use the data in your enquiry in order to reply to you and, if it comes to that, to prepare an offer.
Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b) of Regulation (EU) 2016/679. Where an enquiry does not lead to a contract — our legitimate interest in responding to an enquiry addressed to us, Article 6(1)(f).
Retention: we keep correspondence for up to two years from the last message. Where a contract has been concluded, accounting records are kept for the periods required by Bulgarian accounting and tax legislation.
Art. 5 · Testimonials
When you fill in the form on the Testimonials page, we collect: your name, your role, the name of the property, the text of your testimonial and an email address for contact.
What we use it for. The name, role, property and text are published on the website if you have given your explicit consent through the checkbox in the form. The email address is used only to contact you — to confirm the content before publication or to ask a clarifying question. It is not published and it is not used for anything else.
Legal basis: your explicit consent, Article 6(1)(a). Consent is voluntary and refusing it has no consequences for you.
If you do not consent to publication. Your submission still reaches us and we read it, but we publish nothing from it. In that case the data is used solely to reply to you.
Translation. If your testimonial is published on the other language version of the website, it is translated by us and marked as a translation. We confirm the content with you before anything is published, in either language.
Retention. Published testimonials remain on the website until you ask for their removal. Data from submissions not approved for publication is kept for up to two years.
Withdrawal. You may withdraw your consent at any time, ask for the published text to be corrected, or ask for it to be removed entirely. Write to manager@hotelconsult.bg. We remove a published testimonial within 5 working days.
Art. 6 · Who we pass data to
We do not sell or rent personal data. We do not provide it to third parties for their own marketing purposes.
We use the following providers, each of which processes data only for the stated purpose and under a contract with us:
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | website hosting; technical request logs | USA |
| Google Ireland Ltd. / Google LLC | Google Analytics — visit statistics, only where consent has been given | EU and USA |
| Formspree Inc. | delivering testimonial form submissions to our mailbox | USA |
Data may also be provided to a public authority, but only in the cases provided for by law and no more than what has been requested.
Art. 7 · Transfers outside the European Union
The three providers listed in Art. 6 process data on servers in the United States.
Transfers take place on the basis of the Standard Contractual Clauses adopted by the European Commission and, where applicable, the Commission's adequacy decision on the EU–US Data Privacy Framework.
Art. 8 · Cookies and statistics
The site uses Google Analytics 4 so that we know which pages are read and which are not.
Analytics cookies are not loaded until you press "Accept" in the consent bar. Until then Google Analytics does not run and records nothing. If you decline, the site works normally.
Legal basis: your consent, Article 6(1)(a). You may withdraw it at any time through your browser settings or by deleting the site's cookies.
Strictly necessary cookies — those without which the site does not display correctly, including the record of your own choice in the consent bar — operate without consent, because without them the service cannot be provided.
IP addresses in Google Analytics are processed in truncated form. We do not use statistical data to identify individuals.
Retention: data in Google Analytics is kept for 14 months and is then deleted automatically.
Art. 9 · Advertising and profiling
This website runs no remarketing and does no profiling.
We have no Google Ads or Facebook advertising pixels. We do not build visitor profiles and we do not take automated decisions producing legal effects concerning you.
Art. 10 · When we will contact you
We contact you in order to answer your enquiry, to perform a contract between us, or — if you have left a testimonial — to confirm it before publication.
We send no marketing messages — by email, telephone or post — without your prior explicit consent.
Art. 11 · Your rights
At any time you have the right to request:
- access — confirmation of whether we process your data, what data, for what purpose, who we pass it to, and a copy of it
- rectification of inaccurate or outdated data
- erasure ("the right to be forgotten") in the cases provided for by the Regulation
- restriction of processing
- portability — your data in a structured, commonly used, machine-readable format
- objection to processing based on legitimate interest
- withdrawal of consent at any time, without affecting the lawfulness of processing before the withdrawal
How. An email to manager@hotelconsult.bg describing what you want is enough. No notarised power of attorney, written application or signature is required.
We reply within 14 days. The statutory period is one month; we have set ourselves a shorter one.
Exercising your rights is free of charge.
Art. 12 · Complaints
If you believe we are processing your data unlawfully, write to us first at manager@hotelconsult.bg — that is the fastest route.
You also have the right to lodge a complaint with the supervisory authority:
Commission for Personal Data Protection 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria tel. +359 2 915 3518 · kzld@cpdp.bg · www.cpdp.bg
Art. 13 · Security
The site runs entirely over HTTPS — the connection between your browser and the site is encrypted.
Access to the mailbox that receives enquiries and testimonials is limited to the managing director. We use providers that maintain generally accepted security standards.
One honest qualification: no transmission over the internet is one hundred per cent secure. We take reasonable measures, but we cannot guarantee the security of data while it travels to us.
Art. 14 · Links to other websites
The site contains links to websites operated by other organisations — for example to the Bulgarian Tourism Act or to LinkedIn profiles. This policy applies only to hotelconsult.bg. Those sites are governed by their own policies and we are not responsible for them.
Art. 15 · Changes to this policy
We review this policy periodically. If we change it materially, the date at the top is updated.
This version dates from August 2026 and replaces the version of March 2018.