Privacy Policy
Last updated: [[DATE]]
1. Who processes your data
The data controller is IandBeyond Ltd. (Ай Енд Бионд ЕООД), company number (ЕИК) 208484808, registered at 2 Ivan St. Geshev Street, apt. 1, Plovdiv, Bulgaria.
The company operates the Kaba Home villa in Stoykite, Smolyan Province, Bulgaria, and the website kabahome.eu.
For anything concerning your personal data: [email protected]
2. What we collect
Only what you give us through the inquiry form:
- name
- email address
- phone number (optional)
- your intended dates of stay
- number of adults, number and ages of children (optional)
- the message you write
- the language the inquiry was sent in
We use no analytics tools and do not track your behaviour on the site. We build no user profiles. We process no special categories of personal data.
Our hosting provider may keep technical server logs (IP address, request time, browser type) for security and maintenance.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your inquiry with availability and a price | Steps taken at your request before entering a contract — GDPR Art. 6(1)(b) |
| Sending the form after you tick the consent box | Consent — GDPR Art. 6(1)(a) |
| If you book: performing the contract, accounting and tax records | Contract and legal obligation — Art. 6(1)(b) and (c) |
| Site and server security | Legitimate interest — Art. 6(1)(f) |
We do not use your data for advertising and we do not send newsletters.
4. Who we share it with
We do not sell or rent your personal data. It is accessible only to:
- Web3Forms — the service that delivers the form to our mailbox. As well as delivering the message, Web3Forms stores submissions for up to 30 days on Amazon Web Services infrastructure, encrypted at rest, after which they are deleted automatically.
- Our hosting and email provider — stores the site and the correspondence we receive.
- Our accountant — only where a booking is made, and only for accounting purposes.
- Public authorities — only where the law requires it.
Some of these providers may process data outside the European Economic Area. Where that happens, transfers are made subject to appropriate safeguards under Chapter V of the GDPR.
5. How long we keep it
- Inquiries that don't lead to a booking — 12 months from our last contact, then deleted.
- Data relating to a booking — for the periods required by Bulgarian accounting and tax law.
- Data under the Bulgarian Tourism Act — for the periods it prescribes, including submissions to the Unified Tourist Information System (ESTI).
6. Your rights
You have the right to:
- access the data we hold about you
- have inaccurate data corrected
- have your data erased
- have processing restricted
- object to processing based on legitimate interest
- receive your data in a machine-readable format
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
Write to [email protected]. We reply within one month.
If you believe your rights have been breached, you may complain to the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria — kzld.bg.
7. Cookies
kabahome.eu uses no cookies and sets no tracking technologies.
The location map loads from Google Maps only after you activate it with a button. If you do load it, Google may set its own cookies and process data under its own privacy policy. If you don't press the button, no connection to Google is made.
8. Children
The site is not directed at children and we do not knowingly collect personal data from anyone under 18. Where a child's age appears in an inquiry, it is supplied by the adult making the booking and used solely to assess the accommodation.
9. Security
The site runs over an encrypted connection (HTTPS). Access to our mailbox is password-protected. We keep your data only as long as necessary.
10. Changes
If how we process data changes, we will update this page and the date at the top.