Privacy Policy
Last updated: 30 September 2026
These policies cover stays at The Nest Bungalows / Бунгала „Гнездото“ in Lozenets, Bulgaria.
Accommodation operator: Vasil Syakolov
Correspondence address: 12 Osogovo Street, 8277 Lozenets, Bulgaria
Email: [email protected]
Phone: +359877116050
Accommodation registration/licence number: Ц2-0ФА-Г33-С0
Data controller
The data controller for personal information connected with direct enquiries and bookings is:
Vasil Syakolov, operator of The Nest Bungalows
Address: 12 Osogovo Street, 8277 Lozenets, Bulgaria
Privacy contact email: [email protected]
Phone: +359877116050
Information we process
If you send an enquiry or make a direct booking, we may process your name, phone number, email address, requested dates, number and composition of guests, information about pets, special requests and our correspondence with you.
For confirmed bookings, we may also process information that accommodation providers must collect for guest registration, accounting or other legal requirements.
The website and its service providers may also process limited technical information, such as your IP address, browser and device details, the date and time of a request, and logs needed to keep the site secure and working.
Why we process personal data
We use personal data when needed to:
- reply to an enquiry and take steps you request before entering into a contract;
- manage and fulfil a confirmed booking;
- communicate with you before, during and after your stay;
- meet legal requirements for guest registration, tourism, accounting, tax or other applicable matters;
- protect the website, prevent abuse, and establish, exercise or defend legal claims;
- carry out an activity for which consent is the appropriate legal basis.
Information submitted for booking purposes is not used for marketing communications without an appropriate lawful basis.
Legal bases
The legal basis depends on the activity. We may rely on:
- steps taken at your request before entering into a contract;
- performance of a contract;
- a legal obligation;
- our legitimate interests in keeping the service secure, communicating with guests and protecting legal rights;
- your consent, where the activity is based on it.
Recipients and service providers
We share personal data only when needed to provide a service or meet a legal obligation.
The website uses or may use the following providers:
Cloudflare for infrastructure, website protection and Cloudflare Turnstile. Turnstile is used to distinguish genuine users from automated requests and may process technical browser and device signals.
Resend for sending and delivering emails relating to enquiries and bookings. The content of relevant messages and information required to deliver them may be processed by Resend.
Google Maps when a visitor loads the interactive map on the location page. When the map is loaded, Google may receive technical information about the device and connection in accordance with Google’s own privacy terms.
Where a booking is made through Booking.com, Airbnb or another platform, that platform also processes personal data under its own terms and privacy policy.
Information may also be disclosed to competent public authorities where required by law.
Transfers outside the European Economic Area
Some technology providers may process information outside the European Economic Area (EEA).
Where required, we use a transfer mechanism recognised under EU data protection law, such as an adequacy decision, Standard Contractual Clauses or another permitted safeguard.
Resend states that customer data is stored in the United States and that EEA transfers are covered by Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Retention
We keep enquiries that do not lead to a booking only as long as needed to handle the enquiry and related messages. As a rule, we delete them within 12 months of the last contact unless we have a justified reason to keep them longer.
We keep booking information for as long as needed to provide the stay, resolve potential disputes and meet legal record-keeping requirements for tourism, accounting, tax or other mandatory records.
We keep technical information according to our security needs and the retention rules of the relevant service providers.
When we no longer have a legal or operational reason to keep information, we delete or anonymise it.
Children’s information
We may process limited information relating to children where they are included in a booking and the information is required to organise the stay or comply with a legal obligation.
Please have a parent, guardian or another authorised adult provide this information.
Your rights
Under the General Data Protection Regulation, you may have the right to access your personal data, correct inaccurate information, request erasure or restriction of processing, receive your data in a portable format, and object to certain processing.
Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect processing that was lawful before withdrawal.
Requests may be sent to [email protected].
We may request reasonable information to verify your identity where this is necessary to protect your personal data.
Supervisory authority
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection:
Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Email: [email protected]
Website: cpdp.bg
Automated decision-making
We do not use booking-form information for automated decisions that determine whether to accept a reservation and have legal or similarly significant effects on you.
Cloudflare Turnstile performs automated technical checks for bot and abuse protection, but it does not determine whether a reservation is accepted or refused.
Security
We use reasonable technical and organisational measures to protect information from unauthorised access, loss, alteration or unlawful disclosure.
No internet-based system can guarantee absolute security.
External websites
The website may contain links to Booking.com, Airbnb, social networks and other external services.
Once you open an external link, that service handles your information under its own privacy policy.
Changes to this policy
We may update this policy when the website, booking process, service providers or applicable legal requirements change.
The current version and its latest revision date will be published on this page.