1. Introduction

YVONNE HOTELS EOOD, managing Speranta Hotel & Villas, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your data in accordance with the EU General Data Protection Regulation (GDPR) and Bulgarian law.

 

2. Data Controller

YVONNE HOTELS EOOD (ИВОН ХОТЕЛС ЕООД)
Gramos 22, Sofia, Bulgaria
VAT No.: BG207515738
Email: reservations@yvonne.bg
Phone: +359 888 833 322
Website: www.yvonne.bg

 

3. Data We Collect

• Identity: name, title, date of birth, nationality
• Contact: phone number, email, address
• Booking: check-in/check-out dates, room or villa type, preferences, guests
• Payment: card or bank details (processed securely)
• Technical: IP address, browser data, cookies, website usage
• Communication: emails or messages exchanged with the hotel

 

4. Purpose of Processing

We process your data to:

• Manage reservations, check-ins, and accommodation services
• Issue invoices and comply with accounting and legal obligations
• Communicate with you about your booking
• Send marketing or promotional materials only with your consent
• Improve our services and website performance

 

5. Data Retention Policy

At Speranta Hotel & Villas, we retain personal data only for as long as necessary for legal, accounting, or operational purposes. The following retention periods apply as part of our internal policy:

📁 Speranta Hotel & Villas – Data Retention Policy

Purpose of Storage	Retention Period	Note
Data in the National Tourism Information System (ESTI)	5 years	Required under the Bulgarian Tourism Act
Guest registration card (paper or electronic)	up to 5 years	Securely destroyed after this period
Data in invoices and fiscal receipts	10 years	In accordance with the Accounting Act
Marketing / customer database	until consent is withdrawn	Stored only with explicit consent

We regularly review stored data and ensure secure destruction or anonymization after the expiration of the above periods.

 

6. Data Sharing

We do not sell, rent, or share your personal data with any third-party partners or marketing companies.
Your data may be disclosed only when legally required, for example to:

• State authorities such as tax or law enforcement bodies, when obliged by law;
• Technical service providers directly involved in maintaining our booking or IT systems, under strict confidentiality agreements.

 

7. Cookies and Analytics

Our website uses cookies for functionality, statistics, and personalization. You can control or disable cookies in your browser settings.

 

8. Data Security

We apply technical and organisational measures such as encryption, firewalls, and secure access to protect your personal data.

 

9. Your Rights

You have the right to:

• Access your data
• Correct or update it
• Request deletion
• Restrict or object to processing
• Withdraw consent (for marketing)
• File a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria

 

10. Contact

For any data inquiries:
📧 reservations@yvonne.bg
📞 +359 888 833 322
📍 Gramos 22, Sofia, Bulgaria

 

COMPETENT SUPERVISORY AUTHORITY

The competent supervisory authority on the territory of the Republic of Bulgaria is the Commission for Personal Data Protection (CPDP).

In case of doubt that your rights related to the protection of your personal data have been violated, you can report to:

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Email: kzld@cpdp.bg
Website: www.cpdp.bg
Phone: 02 / 91-53-518