Work in progress

Privacy

PRIVACY POLICY — 25/10/2026 Controller and contact Камола ООД (Kamola OOD). Personal-data questions and requests: lacasaplovdiv@outlook.com. Data and purposes For bookings we process name, phone, email, date, time, party size, seating preference, optional notes and wine choice. This arranges and manages your visit, based on steps requested by you and provision of a service (GDPR Article 6(1)(b)). Name, phone and email are needed for the online form; you can also contact us by phone. Avoid unnecessary sensitive information in notes. With separate consent we record your marketing choice, its date and consent version for email offers (Article 6(1)(a)). Refusal does not affect a booking. Unsubscribe through your management link or contact us; withdrawal does not affect earlier lawful processing. Audit history and technical request limits support security and accountability based on our legitimate interest in a reliable service (Article 6(1)(f)). Access and external services Authorized staff have access according to their role. We use Vercel for website hosting and delivery, Supabase for the PostgreSQL database in Ireland, and Resend for transactional booking emails. The application is configured for the Dublin region. Database and sending regions do not mean that all technical data remains in the EU: global delivery, support and provider logs may involve processing outside the EEA. Resend stores email data in the United States. Applicable safeguards are described in the providers’ data processing agreements and standard contractual clauses: https://vercel.com/legal/dpa, https://supabase.com/legal/dpa and https://resend.com/legal/dpa. We do not sell reservation data. Delivery platforms, social networks and Tripadvisor apply their own policies when their links are opened. The embedded Google map loads following your choice; see our cookie policy. Retention There is no fixed general retention period for completed bookings and no automatic deletion. The need to retain data depends on fulfilling and managing the booking, handling requests and disputes, and applicable legal obligations; this does not mean a right to retain data indefinitely. For information about a particular booking or a request to erase or anonymize it, including related history and consent records, contact lacasaplovdiv@outlook.com. Backups follow the separate retention cycle of the infrastructure used. Your rights Subject to applicable conditions, request access, rectification, erasure, restriction or portability; object to processing based on legitimate interests; or withdraw consent. Send requests to the stated email; reasonable identity verification may be necessary. You can complain to Bulgaria's Commission for Personal Data Protection: https://cpdp.bg/. There is no profiling for individualized offers. Automated booking checks evaluate rules and capacity; staff can help by phone. Do not share your private management link publicly.