.
PRIVACY POLICY of www.nevyasta.com
I. GENERAL INFORMATION
As a personal data controller, GRAND HOTEL PLOVDIV LTD (“Nevyasta Residential Complex” or “the Company”) strictly adheres to all legal and regulatory requirements related to the collection and processing of personal data. The satisfaction of our clients in all aspects is a priority for us—especially when it concerns your personal data. Therefore, we consider it our responsibility to exercise due care when processing your information and to take all necessary measures to protect it against unlawful access or actions.
This Privacy Policy provides information regarding the processing of your personal data, your rights related to their protection, as well as the information required under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
Our aim is to offer innovative and secure solutions through recognized standards and advanced technologies, ensuring the protection of the information and data you entrust to us.
II. DATA CONTROLLER DETAILS
GRAND HOTEL PLOVDIV LTD, UIC: 205364294
Registered address: Sofia, Tsarigradsko Shose Blvd., 7th km, Block 2, Floor 4
Website: www.nevyasta.com
Data Protection Officer: Association for Personal Data Protection
Contact: legal.dpa@mydata.bg
III. PURPOSES FOR WHICH WE COLLECT AND PROCESS YOUR DATA
During the course of our business activity, we collect and process personal data for the following primary purposes:
A. Conclusion and performance of contracts with our partners and suppliers
If you are our partner or supplier, we collect certain information necessary for establishing and maintaining our relationship. This includes identifying information and contact details for you or your employees (such as name, PIN—if legally required—address, phone/email).
These data are retained for a period not longer than the statutory limitation period following the completion of the respective contract.
B. Conclusion and performance of contracts and provision of services to our clients
For the performance of a contract concluded with you, or for taking steps prior to entering into such contract, we process identifying information and contact details such as names, PIN, address, telephone/email.
If you authorize us to perform a specific service on your behalf, we collect the data required by law to validate such authorization—for example, information needed for preparing a power of attorney.
This data is processed solely for the execution of the contractual relationship, including sending notifications, updates, and safeguarding your and our rights when necessary.
C. Marketing Activities
If you are our client or partner, based on our legitimate interest, we may contact you via email to inform you about new projects. You may object to receiving such messages at any time by sending us an email request.
D. Video Surveillance
Video surveillance is carried out at our headquarters in Sofia and at our sites. It is performed for the protection of the premises and assets. Recordings are stored for the minimum period required by law.
Access to the recordings is strictly limited and provided only according to internal rules. External service providers may have access only when necessary for fulfilling contractual obligations.
IV. LEGAL GROUNDS FOR PROCESSING & CONSENT
We collect and process personal data only in compliance with the requirements of legality and good faith.
The legal bases include:
-
pre-contractual and contractual obligations;
-
legal obligations applicable to us;
-
our legitimate interest in developing our business and protecting property.
Consent is required only in limited cases. Whenever we rely on consent, you will be informed in advance.
We do not use automated decision-making or profiling.
V. SOURCES OF INFORMATION
We collect information directly from you, your representatives, or from publicly available sources (such as registers of the Registry Agency), official lists, media, etc.
VI. DATA SHARING
Nevyasta Residential Complex shares personal data only with:
-
authorities legally entitled to receive such data;
-
carefully selected service providers (IT maintenance, etc.), who are contractually bound to protect your confidentiality.
No data is transferred outside the EU.
VII. YOUR RIGHTS
You have the following rights under GDPR:
-
Right to be informed whether we process your data;
-
Right of access;
-
Right to rectification;
-
Right to erasure (“right to be forgotten”), where applicable;
-
Right to restrict processing;
-
Right to object;
-
Right to data portability.
We will respond to any request within one month. If an extension is needed, you will be notified.
VIII. RIGHT TO COMPLAIN
If you believe your rights have been violated, you may contact us at any time.
You also have the right to file a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).
Website: https://www.cpdp.bg/
IX. ADDITIONAL INFORMATION
Am I required to provide personal data?
Within our business relationship, you must provide the personal data necessary for establishing, performing, or terminating contractual obligations or meeting applicable legal requirements.
If you refuse to provide the required data, we will be unable to enter into or continue contractual relations with you.
This Policy is reviewed and updated regularly. We invite you to check for updates on our website: https://www.nevyasta.com/.
Last updated: November 2025