PRIVACY POLICY AND PERSONAL DATA PROTECTION
processed by YAKOVI Ltd.

I. INTRODUCTION

YAKOVI Ltd. is a commercial company operating in the field of hospitality, accommodation services, and related tourist services.

In connection with its activities, YAKOVI Ltd. administers the website elegantbansko.com, through which it provides information about Hotel Elegant Lux – Bansko, enables users to submit inquiries, make reservations, and contact the Company.

For the purposes of communication, reservation management, inquiry administration, and customer relationship management, YAKOVI Ltd. collects and processes certain personal data of individuals.

II. SCOPE OF THE PRIVACY POLICY

This Privacy Policy (“the Policy”) aims to inform you about what personal data we collect, how and on what legal grounds we process it, and what your rights are in relation to such processing.

The Policy is drafted in accordance with applicable Bulgarian and European legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Personal Data Protection Act.

This Policy does not limit or waive any rights granted to you under applicable law.

Please read this Policy carefully before providing us with your personal data. If you do not wish your personal data to be processed as described herein, please do not provide it.

III. DATA CONTROLLER

Personal Data Controller:

YAKOVI Ltd.
UIC/VAT No.: BG101634154
Registered office and management address:
3 Polezhan St., Bansko, Bulgaria

E-mail (personal data inquiries): info@elegantbansko.com
Phone: +359 886 33 77 89

IV. DATA COLLECTION CHANNELS AND SOURCES

Personal data may be provided through one or more of the following channels:

• contact and reservation forms on the website elegantbansko.com;

• telephone communication;

• e-mail correspondence;

• in-person contact at the hotel;

• partner reservation platforms;

• social media and online platforms (e.g. Google, Meta), where applicable.

V. CATEGORIES OF PERSONAL DATA PROCESSED

Depending on the purpose of processing, we may process the following categories of personal data:

• identification data – names;

• contact details – phone number, e-mail address;

• reservation data – stay dates, number of guests, accommodation type;

• correspondence and inquiry history;

• other information voluntarily provided by you in connection with your stay.

VI. PURPOSES AND LEGAL GROUNDS FOR PROCESSING

1. At the request of the data subject
   To respond to inquiries, process and confirm reservations, provide information about services, prices, and conditions, and communicate regarding your stay.

2. Performance of a contract
   For the conclusion and performance of an accommodation and hotel services contract.

3. Legitimate interest

• administration and improvement of service quality;

• protection of the Company’s legal interests in case of disputes;

• prevention of abuse.

4. Consent
   Where you have given explicit consent, we may process personal data for marketing purposes (e.g. sending information about offers and news).

Right to withdraw consent:
You may withdraw your consent at any time by contacting us via e-mail or by another indicated method, without affecting the lawfulness of processing prior to withdrawal.

VII. RETENTION PERIOD

Personal data is stored:

• for as long as necessary to achieve the purposes for which it was collected;

• for the duration of contractual relationships and statutory retention periods;

• until consent is withdrawn, where processing is based on consent.

VIII. DATA STORAGE LOCATION

Personal data is stored within the territory of the European Union and the European Economic Area.

As of the date of adoption of this Policy, YAKOVI Ltd. does not transfer personal data outside the EU.

IX. CATEGORIES OF THIRD PARTIES WITH ACCESS TO DATA

Where necessary, personal data may be accessed by:

• IT, hosting, and reservation system service providers;

• accounting, legal, and GDPR consultants;

• public authorities where required by law.

All third parties process personal data in compliance with applicable data protection legislation.

X. YOUR RIGHTS

You have the right to:

• access your personal data;

• rectification of inaccurate or incomplete data;

• erasure (“right to be forgotten”), where applicable;

• restriction of processing;

• data portability;

• object to processing;

• lodge a complaint with the supervisory authority.

Supervisory authority:
Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
www.cpdp.bg

XI. AUTOMATED DECISION-MAKING

YAKOVI Ltd. does not use automated decision-making, including profiling.

XII. LINKS TO OTHER WEBSITES

The Website may contain links to external websites. YAKOVI Ltd. is not responsible for the privacy policies or practices of such websites.

XIII. COOKIE POLICY

The Website uses cookies to ensure proper functionality. Detailed information is available in a separate Cookie Policy.

XIV. CHANGES TO THIS POLICY

This Privacy Policy may be updated periodically. All changes take effect upon publication on the Website.

Last updated: 12 February 2026