Privacy Policy
Effective Date: January 1, 2024
Welcome to our Bulgarian cuisine restaurant website. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your data when you visit our website or use our services.
1. Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Make a reservation through our online booking system
- Subscribe to our newsletter or promotional communications
- Contact us through our inquiry forms
- Participate in surveys, contests, or promotional activities
- Leave reviews or feedback about our services
Types of personal data collected may include: name, email address, phone number, dietary preferences, special occasion details, and any other information you choose to provide.
Automatically Collected Information
When you visit our website, we automatically collect certain technical information including:
- IP address and geographical location
- Browser type, version, and operating system
- Pages visited, time spent on pages, and navigation patterns
- Referring website and search terms used
- Device information and screen resolution
2. How We Use Your Information
We process your personal information for the following legitimate purposes:
Service Provision
- Processing and confirming restaurant reservations
- Communicating about your booking details and special requests
- Providing customer support and responding to inquiries
- Accommodating dietary restrictions and preferences
Marketing and Communications
- Sending newsletters about seasonal menus and special events
- Informing you about promotional offers and discounts
- Sharing information about Bulgarian cultural events and celebrations
- Conducting customer satisfaction surveys
Website Improvement
- Analyzing website usage patterns and user behavior
- Optimizing website performance and user experience
- Developing new features and services
- Ensuring website security and preventing fraud
3. Legal Basis for Processing (GDPR Compliance)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Consent: When you explicitly agree to receive marketing communications
- Contract Performance: To fulfill reservation agreements and provide requested services
- Legitimate Interest: For website analytics, security, and business operations
- Legal Obligation: To comply with applicable laws and regulations
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:
- Service Providers: With trusted third-party vendors who assist in website operations, payment processing, or email communications
- Legal Requirements: When required by law, court order, or government regulation
- Business Protection: To protect our rights, property, or safety, or that of our customers
- Business Transfers: In connection with any merger, acquisition, or sale of business assets
5. Data Security and Protection
We implement comprehensive security measures to protect your personal information:
- SSL encryption for all data transmissions
- Secure server infrastructure with regular security updates
- Access controls limiting employee access to personal data
- Regular security audits and vulnerability assessments
- Data backup and recovery procedures
6. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal information:
- Right of Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Opt-out of certain data processing activities
- Right to Withdraw Consent: Revoke previously given consent
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Reservation data: Retained for 2 years for operational and legal purposes
- Marketing communications: Until you unsubscribe or withdraw consent
- Website analytics: Anonymized data retained for statistical analysis
- Legal compliance: As required by applicable laws and regulations
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience. We use:
- Essential Cookies: Required for basic website functionality
- Performance Cookies: Help us understand how visitors interact with our website
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertisements (with your consent)
9. International Data Transfers
If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.
10. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information.
11. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new effective date. We encourage you to review this policy regularly to stay informed about how we protect your information.
12. Your Choices
You have several options regarding your personal information:
- Opt-out of marketing communications at any time
- Adjust your browser settings to control cookies
- Request access to or deletion of your personal data
- Update your preferences through your account settings
Important: This Privacy Policy applies only to information collected through our website and does not cover information collected offline or through third-party websites linked from our site.
By using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. Thank you for trusting us with your personal information as we serve you authentic Bulgarian cuisine and hospitality.