Privacy Policy

Who we are

The controller of personal data is SMART TRIP EOOD, Company ID (EIK) 205572256, with registered office at 32 Orfey St, 4710 Shiroka Laka, Bulgaria, represented by its manager Nikolay Anastasov – owner and host of Spa Villa Mezinska.

For any questions about your personal data: office@spavillamezinska.com, tel. +359 878 303 538.

What data we collect

• When you book: name, email, phone, dates of stay, number of guests and any notes you send us.
• When you pay by card: payment is processed by Stripe. We do not see or store your card details – we only receive a payment confirmation.
• Guest registration: where the Bulgarian Tourism Act requires it, details from an identity document for registration in the Unified Tourist Information System (ESTI).
• When you send an enquiry: name, email and the content of your message (by email, phone or through the contact form).
• When you visit the website: technical data (IP address, device and browser type) and cookie data – see the “Cookies” section.
• CCTV: there are cameras in the villa’s garden solely for the security of the property and guests. There are no cameras inside the villa.

Why we use it and on what legal basis

• Performing your booking – confirmation, payment, door code, guest guide and communication before and during your stay (contract – Art. 6(1)(b) GDPR).
• Legal obligations – accounting records and guest registration (Art. 6(1)(c)).
• Security of the property and guests, including CCTV in the garden (legitimate interest – Art. 6(1)(f)).
• Statistics and advertising – analysing visits and measuring ads on Google, Facebook/Instagram and TikTok (your consent – Art. 6(1)(a)).
• News and offers by email – only if you have agreed. You can unsubscribe at any time.

How long we keep it

• Booking and payment data – up to 10 years, as required by the Bulgarian Accountancy Act.
• Enquiries and correspondence – as long as needed to reply, but no longer than 2 years.
• CCTV recordings – a short period, after which they are deleted automatically.
• Email newsletter data – until you withdraw your consent.

Who we share data with

We do not sell personal data. We share it only as far as necessary with:

• Stripe – card payment processing;
• Jump.bg – website and email hosting (in Bulgaria);
• Google (Analytics, Maps, YouTube), Meta (Facebook/Instagram) and TikTok – statistics, maps, video and advertising;
• Airbnb and Booking.com – when you book through them, their privacy policies also apply;
• our accountant and public authorities – where the law requires it.

Some of these companies process data outside the EU (for example in the USA). This is done with appropriate safeguards – the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Cookies

Cookies are small files that the website stores in your browser.

• Necessary – for the website and the booking system to work (for example, the booking session). Without them a booking cannot be made.
• Statistics – Google Analytics and Jetpack Stats: how many people visit the website and which pages they view.
• Marketing – Meta Pixel (Facebook/Instagram) and TikTok Pixel: measuring ads and showing ads to people who have visited the website.
• Embedded content – the Google Maps map and the YouTube video. The video loads only when you press “play”.

On your first visit we ask which cookies you allow. Statistics and advertising cookies load only after your consent. You can change your choice at any time via “Cookie settings” at the bottom of every page. Your choice is kept for 6 months in the mzs_consent cookie.

You can also delete or block cookies in your browser settings. If you block necessary cookies, booking through the website may not work.

Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing and data portability, to object to processing and to withdraw your consent at any time. Write to us at office@spavillamezinska.com – we reply within 1 month.

If you believe your rights have been violated, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, www.cpdp.bg.

Changes to this policy

We may update this policy. The current version is always on this page, with the date of the last change at the top.