Privacy & Cookie Policy

Coworking Bansko, ul. Kir Blago Todev 1, Bansko 2770, Bulgaria ("we", "us") is the data controller for the personal data described in this policy.

For any privacy question or request, write to info@coworkingbansko.com.

We collect only what we need to run bookings and the property:

• Booking data: name, email address, phone number, arrival and departure dates, room or plan selected, add-ons and notes you send us.
• Payment data: payment status, amount, currency and a payment reference. Card details are entered directly with our payment provider (Stripe) and are never stored by us.
• Registration data: passport or national ID details, collected on arrival because Bulgarian law requires guest registration.
• Technical data: IP address, browser type, pages viewed and approximate location, generated automatically when you visit the website.
• Communications: emails and messages you send us, and our replies.

We do not knowingly collect data from children, and we do not sell personal data to anyone.

Performance of a contract: to take and confirm your booking, provide accommodation, coworking access and add-on services, and to contact you about your stay.

Legal obligation: guest registration with the authorities, accounting and tax records, and payment records.

Legitimate interests: keeping the property and our guests safe, preventing fraud and abuse, and improving our website and services.

Consent: non-essential cookies, analytics and marketing emails. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Cookies are small files stored on your device. We use them in two groups:

• Strictly necessary cookies — required for the site and checkout to work, to keep you signed in and to remember your cookie choice. These are always on and do not need consent.
• Optional cookies (analytics and preferences) — help us understand how the site is used and remember settings. These are only set after you accept them in the cookie banner.

Our payment provider may set cookies during checkout that are strictly necessary to complete a payment securely.

You can change your choice at any time using the cookie banner shown after clearing site data in your browser, or by adjusting your browser's cookie settings. Blocking strictly necessary cookies may prevent booking from working.

We share personal data only with parties that help us deliver the service, under contract and only for that purpose:

• Payment provider (Stripe) — to process payments.
• Hosting, database and email delivery providers — to run the website, store reservations and send confirmations.
• Our property management system — to administer reservations.
• Public authorities — where Bulgarian or EU law requires it.

Where a provider is located outside the European Economic Area, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

Booking and payment records are kept for the period required by Bulgarian accounting and tax law (generally up to 10 years). Guest registration data is kept for the period the law prescribes.

Marketing contact data is kept until you unsubscribe. Website technical logs are kept for a short period for security purposes, and then deleted or anonymised.

Under the GDPR you have the right to: access your data; correct it; have it deleted; restrict or object to processing; receive it in a portable format; and withdraw consent at any time.

To exercise any of these rights, email info@coworkingbansko.com. We reply within one month.

If you believe we have handled your data improperly you may complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the supervisory authority in your country of residence.

We use encrypted connections, access controls and reputable providers to protect personal data. No method of transmission is completely secure, but we take reasonable steps to reduce risk.

We may update this policy. The current version is always published on this page.