Privacy policy

Data controller

Solina EOOD, UIC 208262907, registered seat and management address: Varna 9000, Primorski district, 2 Chavdar Voyvoda Street.

For questions and requests regarding your personal data, contact: contact@solina-apartments.com.

What personal data we process

During the pre-arrival online check-in we collect the data required to register accommodated guests as required by law: first, middle and last name; personal identification number (EGN) or personal identifier; date of birth; identity document type and number; requested additional services and comments.

Technical data: to prevent abuse we store only an irreversible (hashed) fingerprint of the IP address — the IP address itself is not stored.

Purposes and legal basis

We process this data to comply with a legal obligation to register accommodated guests under the Tourism Act and to enter them into the Unified Tourist Information System (ESTI). The legal basis is Article 6(1)(c) of the General Data Protection Regulation (GDPR).

Retention period

Registration data is stored only until it is entered into ESTI, after which it is deleted. We do not keep this data longer than necessary.

Data security

Sensitive fields (personal identifier, date of birth, document number) are encrypted with AES-256-GCM before storage. Access to the data is restricted to the owner only, and the connection to the site is secured (HTTPS).

Recipients and processors

For hosting and storage we use Supabase (database and authentication) and Vercel (site hosting). The data is entered manually by the owner into the state ESTI system. We do not sell or share your personal data with third parties for marketing purposes.

Your rights

You have the right to access, rectification, erasure, restriction of processing and objection, as well as the right to lodge a complaint with the Commission for Personal Data Protection (CPDP). To exercise your rights, contact contact@solina-apartments.com.

Cookies

For the cookies we use, please see the separate Cookie Policy.

Automated decision-making

We do not carry out automated decision-making or profiling based on your data.

Changes to this policy

We may update this policy when necessary. The current version is always published on this page.