Privacy Policy

Who is the data controller?

The operator of milastays.com and the controller of personal data processed when the website is visited and used is OMO 07 EOOD, UIC 175247275.

Registered office and management address: 1612 Sofia, Lagera residential district, bl. 47, ent. G, fl. 8, apt. 92, Bulgaria.

Where a particular service is provided by Milka Stoimenova, she may process the personal data necessary to provide that service in accordance with applicable law.

Personal data we may process

The website does not require registration and does not create user accounts.

If you contact Mila Stays by email, telephone, WhatsApp or Viber, we may process the information you choose to provide, such as your name, telephone number, email address, information about a property or enquiry, and the content of our correspondence.

Where a booking or enquiry comes through Booking.com, Airbnb or another platform, we may receive information needed to communicate with you and fulfil the booking, such as your name, contact details, stay dates and reservation information.

When the website is loaded, hosting and technical infrastructure providers may process standard technical information such as an IP address, request date and time, browser, device and security logs.

Purposes and legal bases

We process personal data where necessary to respond to an enquiry and take steps at your request before entering into a contract, and to perform a contract where one has been entered into.

We may also process information to comply with legal obligations, including applicable accounting, tax and tourism requirements.

Website security, abuse prevention and ordinary business correspondence may rely on our legitimate interests where those interests are not overridden by your rights and freedoms.

If the website later introduces a feature requiring consent, such as optional advertising or analytics technologies, consent will be requested separately and may be withdrawn.

Cookies and locally hosted fonts

The current Mila Stays website code does not set analytics or advertising cookies and does not use local storage to track visitors.

The fonts used by Mila Stays are stored and served locally from milastays.com. Loading these fonts does not require the browser to connect to Google Fonts.

If the website configuration changes and optional technologies are introduced which store or access information on your device, this policy and the relevant choice mechanism will be updated.

Recipients and international transfers

Personal data may be accessible to hosting and technical infrastructure providers, communications providers and professional advisers where this is necessary for the relevant purpose and subject to appropriate safeguards.

If you use Booking.com, Airbnb, WhatsApp, Viber, Google or another external service, information may also be processed by that provider under its own terms. Some providers may process data outside the European Economic Area using safeguards available under the GDPR.

Mila Stays does not sell personal information to advertisers.

How Long We Keep Information

Information is retained only for as long as necessary for the purpose for which it was collected. Enquiries and correspondence which do not lead to a contract are deleted or anonymised after a reasonable period unless there is a reason to retain them for longer.

Where there is a contract, booking, payment or legal obligation, relevant records may be retained for the periods required by applicable accounting, tax, tourism or other legislation.

Technical logs are retained in accordance with the relevant hosting or infrastructure provider’s retention periods and security requirements.

Your rights

Subject to the conditions of the GDPR, you may have the right to access your personal data, correct inaccurate information, request erasure, restrict processing, object to processing based on legitimate interests and receive data in a portable format where applicable.

Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out lawfully before withdrawal.

We may ask for sufficient information to verify your identity before acting on a rights request, in order to protect personal data from unauthorised access.

Complaints

If you believe that your personal data has been processed in breach of the relevant data protection legislation, you have the right to submit a complaint to the Bulgarian Commission for Personal Data Protection (CPDP). More information can be found on the Commission’s official website. cpdp.bg.

We encourage you to contact Mila Stays first so that we can consider and address the matter promptly.

Providing information and automated decisions

You are not required to provide personal data simply to browse the website. To respond to an enquiry, handle a booking or provide a service, we need at least appropriate contact details and the information required for the particular service.

Mila Stays does not use automated decision-making or profiling which produces legal or similarly significant effects for website visitors.

Security and changes to this policy

We use reasonable technical and organisational measures designed to reduce the risk of unauthorised access to, loss of or misuse of personal information.

This policy may be updated if the website, our services or applicable requirements change. The current version and the date of the latest revision will be published on this page.