Legal

Privacy notice

What we collect when you book and stay with us, why, and how long we keep it.

Who is responsible for your data

The controller of your personal data is „ЕС КЕЙ СОФТУЕР“ ЕООД, ЕИК 206246651, with its registered seat at ul. Radetski 13, fl. 2, apt. 1, 9000 Varna, Bulgaria. We operate Varna Family Apartment and the website varnafamilyapartment.com.

For anything in this notice, write to booking@varnafamilyapartment.com.

What we process

Your booking or enquiry

When you book through the form on this website we receive your name, email address, phone number, the dates, the size of your group and anything else you choose to add, such as your address or a message. When you write to us by email or WhatsApp we receive your name, the contact details you write from and what you ask about.

Guest registration

Bulgarian law requires us to register every guest who stays overnight: full name, ID or passport number, date of birth and nationality. This data is reported to the national tourist register (ЕСТИ) under art. 116 of the Tourism Act. Without it we cannot lawfully accommodate you.

Invoicing

If you ask for an invoice, we process the billing name and address you give us, company details where applicable, and the reference of your payment.

Why we are allowed to process it

  • Performing our contract with youHandling your enquiry, confirming the stay, taking payment and hosting you.
  • Complying with a legal obligationGuest registration and reporting to the national tourist register, plus the tax and accounting records Bulgarian law requires us to keep.
  • Our legitimate interestKeeping a record of our correspondence with you, so that what was agreed can be checked later.

How long we keep it

  • ID details from the guest registration (personal ID number, document number and date of birth) — deleted on the 8th of the month after you leave. Your name and the dates of your stay remain on the booking.
  • Bookings and invoices — for as long as Bulgarian accounting and tax law require us to keep them.
  • Enquiries that do not turn into a booking — up to 12 months, after which we delete them.

Who else sees it

  • Our accounting provider, for invoices and tax records.
  • The national tourist register (ЕСТИ), for the guest registration described above.
  • Our booking system provider (Smoobu), which runs the booking form and stores your booking, and our payment provider (Stripe), which processes your card payment.

We do not sell your data and we never share it for advertising. We take no automated decisions about you and we do not profile you.

Cookies

No analytics, no advertising

This website sets no analytics cookies and no advertising cookies. The only cookie we use is a functional one that remembers the language you chose, so the site opens in it next time. The booking form is provided by our booking system and the card payment by Stripe; when you use the form, they set the cookies the booking and fraud prevention need.

Your rights

  • Access — a copy of the data we hold about you.
  • Rectification — correction of anything inaccurate.
  • Erasure — deletion, where we are not legally required to keep it.
  • Restriction — a pause on our use of it while something is being checked.
  • Portability — the data you gave us, in a machine-readable form.
  • Objection — to processing we base on our legitimate interest.

To use any of them, write to booking@varnafamilyapartment.com. If you believe we have handled your data badly, you can also complain to the Bulgarian supervisory authority, Комисия за защита на личните данни: Commission for Personal Data Protection (cpdp.bg) — opens in a new tab.

Last updated October 20, 2026.