“Kabata 2620” Ltd. (“we”, “us”, or “our”) is committed to protecting your privacy and conducting its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data. This policy sets out how we process the personal data we collect from you or that you provide to us.
Data Controller:
Company name: “Kabata 2620” Ltd.
Registered office and management address:
Country: Bulgaria
Region: Sofia (Capital)
Municipality: Stolichna Municipality
City: Sofia, postal code 1618
Vitosha District
12 Budilnik Street
EIK (Company ID): 208688903
Email address: contact@kabata2620.com
Telephone: +359 888 930 176
Business activity address:
Country: Bulgaria
Region: Blagoevgrad
Municipality: Bansko
City: Bansko, postal code 2770
25 Vasil Aprilov Street
We use the following types of personal data:
Full name
Phone numbe
rEmail address
Gender
Personal identification number (EGN) – in connection with the mandatory registration in ESTI
Date of birthDocument number (identity card or passport) – in connection with the mandatory registration in ESTI
By agreeing to this policy, you also agree to provide these data. We do not collect any of your personal data other than which that you voluntarily provide to us.
We use your personal data for the following purposes:
Communication with you regarding your inquiries – based on legitimate interest
Fulfilment of the obligation to register guests in the ESTI (Unified Tourist Information System) – based on a legal obligation
Creation and management of reservations – based on contract performance
If we do not process these personal data, we may not be able to provide our services to you.
Legal basis for processing:
Performance of a contract
Legal obligation
Legitimate interest
Retention period:
We store personal data for a period of 5 years from the last overnight stay or in accordance with the requirements of applicable legislation, which may impose a longer retention period.We do not use automated decision-making based on the data you provide.
We share your personal data with the following third parties:
Service providers engaged by us to perform functions or activities on our behalf
Payment processing partners
Regulatory authorities, tax and financial authorities, judicial, administrative, and law enforcement authorities, all in accordance with applicable law
Technical support: IT specialists providing technical assistance
Some of the services we use may transfer data outside the EU. In such cases, we ensure that this is done in accordance with Article 49(1)(b) and (c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
You have the following rights regarding your personal data:
Right to be informed
Right of access to your data
Right to rectification of inaccurate data
Right to erasure of data
Right to restriction of processing
Right to data portability
Right to object to processing
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
You have the right to judicial or administrative protection in case your rights have been violated.Right to lodge a complaint: You have the right to lodge a complaint regarding the processing of your personal data with us to the Commission for Personal Data Protection, which is the competent supervisory authority.
Commission for Personal Data Protection:
Address: Sofia, 1592, 2 Prof. Tsvetan Lazarov Street
Telephone: (02) 915 3519
Email: kzld@cpdp.bgWe may refuse to delete your personal data if they are necessary for compliance with a legal obligation (pursuant to Article 17(3)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016). To exercise these rights, you may contact us at: Email: contact@kabata2620.com, Telephone: +359 888 930 176
We implement the following measures to protect your data:
SSL certificate for data encryption
Secure servers with regular updates
Access control to personal data
Regular security reviews
Firewalls and antivirus software
We keep the right to update the content of this privacy pollicy. All changes will be uploaded to this page.
For questions regarding this policy, you may contact us at:
Email: contact@kabata2620.com
Telephone: +359 888 930 176
Last updated: 15.05.2026