Core rules
Controller and contact
The controller is FESTIVAL EOOD, UIC 147157632. For personal-data questions: info@bgpropertyinvest.com. The published office is at Michelle complex, office 1, Sunny Beach, Bulgaria.
Data and purposes
For an inquiry we process your name, chosen contact method, message, property reference and technical anti-abuse data. We use these to respond, arrange follow-up and protect the service.
Legal basis
We process inquiry data to take steps at your request before a possible contract. We process technical anti-abuse data on the basis of our legitimate interest in protecting the form from fraud. Data sent to an external mapping service is described separately in the cookie information.
Recipients and providers
Access is limited to authorised Festival administrators and contracted technical providers to the extent required. Data is not sold or used for advertising profiling.
Retention
Inquiries are kept for up to 12 months after the last substantive contact, unless a legal duty or the defence of legal claims requires longer retention.
Your rights
Where applicable, you may request access, correction, deletion, restriction or portability, or object to processing. You may complain to the Bulgarian Commission for Personal Data Protection.
Google Analytics and inquiry delivery
Google Analytics 4 loads only after explicit consent. We measure visits, property views, contact clicks and successfully submitted inquiries. We do not send names, phone numbers, email addresses, message text or URL parameters. Advertising personalization is disabled. Your choice and analytics cookies are stored for up to 180 days; GA4 event data is retained for 2 months. Withdraw consent using “Analytics settings” at the bottom of the site. Inquiries are stored in Festival’s system and sent through Cloudflare Email Service to info@bgpropertyinvest.com and info@appbox.pw. Google and Cloudflare may process data outside the EEA under their applicable data protection terms.