Privacy Policy

1. Controller and scope

The controller of personal data in connection with this website is “RELAX 2000” EOOD, Bulgarian Unified Identification Code (UIC) 204975471, with registered office and management address at 3 Aleksandar Pushkin St., Varna, Bulgaria, represented by Maya Hristova Kabova. This policy applies to hotelrelax-varna.com, the contact and reservation enquiry forms, and direct communication with the hotel.

For questions about personal data processing or to exercise your rights, use the email address, telephone number, or postal address provided.

2. Personal data we may process

• Identification and contact details — first name, surname, email address, and telephone number.
• Stay details — selected dates, room type and number of rooms, number of guests, and the content of your enquiry.
• Technical data — IP address, browser and device type, system logs, and necessary cookies.
• Other information that you voluntarily provide in a message or conversation.

Please do not send sensitive personal data unless it is expressly necessary and requested.

3. Purposes and legal bases

The applicable legal basis depends on the specific purpose: steps before entering into a contract or performance of a contract, a legal obligation, legitimate interests, or consent.

• Responding to an enquiry and preparing a reservation.
• Providing the requested hotel service.
• Complying with legal, accounting, and tax obligations.
• Protecting the website, preventing misuse, and establishing or defending legal claims.
• Optional cookies or external content — based on consent where consent is required.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Cookies and external services

The website may use necessary cookies for core functions, preferences, and security. Optional services such as a map, video, or review platform may receive technical data and set their own cookies when loaded.

Where consent is required by law, these services are activated after you make your choice. You can manage your choice through the cookie banner and your browser settings.

5. Recipients and data transfers

Access may be granted only to authorised hotel personnel, providers that support the website and communications, professional advisers, and competent authorities where required by law. We do not sell personal data.

If an external provider processes data outside the European Economic Area, the transfer takes place only where an applicable legal basis and appropriate safeguards are in place.

6. Retention and security

We keep personal data only for as long as needed for the relevant purpose and applicable statutory periods. It is then deleted or anonymised unless the law requires otherwise.

We apply reasonable technical and organisational security measures. However, transmitting information over the internet cannot be guaranteed to be completely secure.

7. Your rights

Where the applicable conditions are met, you have the right to information and access, rectification, erasure, restriction of processing, objection, data portability, and withdrawal of consent. These rights are not absolute, and the law provides exceptions to some of them.

To exercise a right, email hotelrelax@mail.bg with the subject “Personal data”. We may request additional information solely to verify your identity and will respond within the applicable statutory time limits.

8. Complaints and policy updates

If you believe that your personal data is being processed unlawfully, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

This policy may be updated when services or requirements change. The current version and the date of the latest update are published on this page.