Privacy policy

1. Data controller

The controller of personal data processed through novakeysbansko.com is НОВА КИЙС ООД (NOVA KEYS Ltd.), UIC 208942757, registered seat Bulgaria, Blagoevgrad District, Bansko Municipality, Bansko 2770, 1 Neofit Rilski St.. Managers: Milena Kostadinova Yuleva, Yuliya Misyuk. Representation: jointly and separately. Email: office@novakeysbansko.com.

Shareholdings in the company capital are not required for GDPR compliance and are not published here.

2. Data we process

When you send an enquiry through the contact form: name, email and/or phone, message, and any link to a specific listing.

To protect the form from abuse we store an anonymous technical key in your browser (localStorage). It is not your name, email or phone and is used only to limit the number of requests.

To improve the site we record aggregated statistics on viewed listings and searches (property type, area, price range, language). These records are not linked to your name.

3. Purposes and legal bases

We process enquiry data to reply and, if you wish, to take steps toward a possible brokerage service — GDPR Art. 6(1)(b) (pre-contractual steps at your request).

The technical key and site protection are based on GDPR Art. 6(1)(f) (legitimate interest in preventing spam and abuse).

Aggregated usage statistics are based on the same legitimate interest in improving listings and navigation, without advertising profiling.

4. Retention

Enquiries are kept while we handle them and then for up to 3 years after the last correspondence, unless a longer period is required by law or you validly request earlier erasure.

The technical key remains on your device until you clear this site’s data in your browser.

5. Recipients and processors

Access is limited to the managers and authorised staff of NOVA KEYS Ltd., as needed to answer your enquiry.

The site is hosted and data are processed by infrastructure providers (including Vercel and Convex) acting as processors on our instructions.

6. Transfers outside the EEA

Some processors may store data outside the European Economic Area. In those cases we require appropriate GDPR safeguards (for example standard contractual clauses).

7. Cookies and local storage

We do not use third-party advertising or tracking cookies.

We only use strictly necessary storage: site language and an anonymous key to protect the form. These do not require a separate consent.

8. Your rights

You have the right of access, rectification, erasure, restriction, objection, data portability, and to withdraw consent where we have relied on it.

To exercise your rights, email office@novakeysbansko.com. We will respond within the GDPR time limits.

9. Complaint to a supervisory authority

If you believe processing infringes the GDPR, you may lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, https://www.cpdp.bg.

10. Changes

We may update this policy if our processing or the law changes. The new version is published on this page with an update date.