Privacy Policy
1. Data Controller
The data controller for your personal data is Tim Marinov, operating VelekaVibe, based in Bulgaria. Contact: privacy@velekavibe.com.
2. Information We Collect
When you create an account, we collect your name, email address, and optional phone number. When you make a booking, payment information is processed securely by Stripe and is never stored on our servers. We also collect technical data such as your IP address and browser type for security and analytics purposes.
3. Legal Basis for Processing
We process your data based on: (a) contractual necessity — to fulfill your booking and provide our services; (b) legitimate interest — to improve our platform and prevent fraud; (c) consent — for optional communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4. How We Use Your Information
We use your information to facilitate bookings, enable communication between hosts and guests, send booking confirmations and updates, improve our platform, and comply with legal obligations.
5. Data Storage and Retention
Your data is stored securely using Supabase infrastructure (hosted in the EU) with encryption at rest and in transit. We retain your account data for as long as your account is active. Booking records are retained for 5 years after the stay for legal and tax compliance. You may request deletion of your account at any time, after which we will remove your personal data within 30 days, except where retention is required by law.
6. Sharing of Information
We share your name and contact information with hosts or guests as necessary to complete bookings. We use Stripe for payment processing (Stripe's privacy policy applies to payment data). We do not sell your personal data to third parties. We may disclose data if required by law or to protect our legal rights.
7. Cookies
We use essential cookies for authentication and session management, which are necessary for the platform to function. No third-party tracking cookies are used. You can manage your cookie preferences through the cookie banner displayed on your first visit. For more details, see our cookie settings.
8. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to: access your personal data; rectify inaccurate data; erase your data ('right to be forgotten'); restrict processing; data portability (receive your data in a structured format); object to processing based on legitimate interest; and not be subject to automated decision-making. To exercise any of these rights, contact us at privacy@velekavibe.com. We will respond within 30 days.
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria (CPDP) at www.cpdp.bg, or with the supervisory authority in your EU member state of residence.
10. Contact
For privacy-related questions or to exercise your rights, contact us at privacy@velekavibe.com.
Last updated: April 2026