Privacy Policy

Who we are

The website villaselya.com is operated by Boychev Constructions EOOD, UIC (EIK) 207290558, registered in Bulgaria, with its registered office at Mladost district, bl. 27, entr. 1, fl. 11, apt. 83, 1000 Sofia. The company is the data controller for the personal data processed through this website. For privacy matters, write to borisboychev007@gmail.com.

What this website does

This website only presents Villa Selya, a holiday villa in the village of Selyanin, Sofia Province, Bulgaria. You cannot book or pay here, there is no contact form and there are no user accounts. We take no payments and keep no reservations through this site.

Reservations are made on Airbnb or, where the villa is also listed there, on Booking.com. If you book, you give your booking and payment details to that platform, not to this website. Airbnb and Booking.com are separate websites with their own privacy policies. Each collects and uses your details as a separate data controller, and its policy also explains what it passes on to hosts.

What we process and why

Messages you choose to send us. If you write to us by email or call us using the contact links on this site, we receive what you decide to tell us: your email address or phone number, your name and the content of your message. We use this only to answer you and to handle your enquiry. Our legal ground is our legitimate interest in answering the people who contact us.

Technical logs. As with any website, the servers that deliver this site receive your IP address, your browser type (user agent) and the time of each request, and keep them in technical logs. We use the logs only to keep the site running, to keep it secure and to stop abuse. Our legal ground is our legitimate interest in running the site safely.

Analytics and advertising cookies, only if you agree. The site uses Google Tag Manager with Google Consent Mode, but it does not load Tag Manager, or any tag in it, until you agree in the cookie banner. Until you make a choice, and if you refuse both, your browser makes no request to Tag Manager and Google receives nothing from this site through it. If you agree, Tag Manager loads and its tags collect statistics about how the site is used, including clicks on the Reserve buttons and on your choice between Airbnb and Booking.com, and measure advertising, as described in the Cookie Policy. If you agree to only one of the two, your choice for each category is passed to Tag Manager through Google Consent Mode. Google's own tags follow that signal and store and read no cookies for the category you refused, although, as Consent Mode works, they may still send limited signals that carry no cookies or identifiers. Google's cookies of that category that were set earlier on this site are deleted when you refuse. The legal ground is your consent, which you can withdraw at any time. Withdrawing all of it stops Tag Manager from loading on later page views.

The map comes from Google

The location section of the home page offers an embedded map from Google Maps, but the map is not loaded when you open the page. You first see a placeholder, and the map is requested from Google only when you press "Show the map". Until then your browser makes no request to Google for it. Once you press the button, your browser connects directly to Google, so Google receives your IP address and details about your browser, and inside the map frame Google may also set its own cookies. The cookie banner does not control this: pressing "Show the map" is your choice to load it. A plain link, "Open in Google Maps", is also offered; it opens the villa's own Google Maps link (maps.app.goo.gl) in a new tab only if you click it, and from then on Google's own privacy policy applies. The site's fonts are served by the site itself, so they cause no request to Google.

It is loaded only at your own request, to show where the villa is. Google handles this data under its own privacy policy.

Who else receives data

Hosting. The site runs on a server in the European Union rented from our hosting provider, Hetzner. Hetzner handles visitors' technical data (IP address, browser details, time of the request) on our behalf, as a data processor.

Google. Google provides Google Tag Manager and Google Analytics, which load only if you agree in the cookie banner, and the map described above, which loads only if you press "Show the map". Advertising tags, where we use them, belong to the advertising platforms we run campaigns on and run inside Tag Manager, which is started only after you agree to at least one category.

Email and phone. Messages you send us pass through our email provider, and calls through our phone operator.

Airbnb and Booking.com. These are separate websites with their own privacy policies. They receive data from you only if you click a link to them, which opens in a new tab. Our links are set not to tell them which page you came from, and when Reserve opens the box where you choose between the two, nothing is sent to either until you click one.

Google is an international company and may process data outside the European Economic Area. Its terms provide for the safeguards that EU law requires for such transfers, such as the Standard Contractual Clauses.

We do not sell personal data, and we do not give it to anyone other than the recipients described here unless the law obliges us to.

How long we keep it

Messages: for as long as we need them to answer you and handle your enquiry. After that we delete them, unless the law requires us to keep them longer.

Technical logs: for a short time, normally a few weeks, after which they are deleted.

Your cookie choice: 12 months in your own browser, or until you clear it.

Analytics data collected with your consent: for the retention period set in our Google Analytics account.

Your rights

Under the GDPR (the EU General Data Protection Regulation) you can ask us for access to your personal data, for a copy of it, for it to be corrected or deleted, or for its use to be restricted. Where it applies, you can ask to receive your data in a portable format. You can object to processing that is based on our legitimate interest, and you can withdraw a consent you have given at any time through "Cookie settings" in the footer. Withdrawing consent does not affect what was processed before.

To use any of these rights, write to borisboychev007@gmail.com. The GDPR gives us one month to reply.

If you believe we handle your data unlawfully, you can complain to the Bulgarian Commission for Personal Data Protection (CPDP), www.cpdp.bg, or to the data protection authority of the EU country where you live.