Home2Host

Privacy Policy

Last updated: 28 August 2026

This Privacy Policy explains how HOME TO HOST Ltd collects, uses, stores and protects your personal data when you visit the home2host.com website or contact us. We process your data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Bulgarian Personal Data Protection Act.

1. Data controller

Name
HOME TO HOST Ltd („ХОУМ ТУ ХОСТ“ ООД)
UIC (ЕИК)
208513462
Legal form
Limited liability company
Registered address
70 Han Asparuh St, floor 1, apt. 2, Burgas 8000, Bulgaria
Phone
+359 885 146 191; +359 885 777 342
Website
home2host.com

For any questions relating to the processing of your personal data, you can contact us using the details above.

2. What personal data we collect

We collect only the data necessary for the purposes described below:

  • Data you provide voluntarily — when you fill in the contact form: your name, email address, phone number (optional) and the content of your message.
  • Data collected automatically — when you visit the site, through cookies and analytics tools: IP address (in anonymized form), device and browser type, operating system, pages visited, approximate location and traffic source. This data is collected only after you consent to analytics cookies.

We do not collect special categories of personal data (such as health or ethnic-origin data) and we do not knowingly process data of persons under 16.

3. Purposes of processing

We process your personal data for the following purposes:

  • To respond to your enquiries and communicate with you about our services;
  • To provide and administer the property-management services you are interested in;
  • To analyze and improve how the site works (only where you have consented to analytics cookies);
  • To comply with our legal obligations.

4. Legal basis for processing

We process your data on one or more of the following legal bases under Article 6 of the GDPR:

  • Your consent — for example, for the use of analytics cookies;
  • Performance of a contract, or taking steps at your request prior to entering into a contract — when you enquire about our services;
  • Legal obligation — where processing is necessary to comply with applicable law;
  • Legitimate interest — for the security of the site and protection against abuse, insofar as this does not override your rights and freedoms.

5. Recipients and data processors

For site traffic analytics we use Google Analytics — a service provided by Google (Google Ireland Ltd / Google LLC), which may process data on our behalf. Analytics cookies load only after your consent.

We also use trusted providers for hosting and email services, which may process data on our behalf under a contract and with appropriate safeguards. We do not sell or rent your personal data to third parties. We may disclose data to competent authorities only where required by law.

6. Transfers outside the EU/EEA

Google Analytics may process data outside the European Economic Area, including in the USA. In such cases, the transfer is carried out with appropriate safeguards under the GDPR — for example, standard contractual clauses approved by the European Commission.

7. Retention period

We keep your personal data only for as long as necessary for the purposes for which it was collected:

  • Contact-form messages — for as long as needed to handle your enquiry and maintain our communication with you;
  • Analytics data — in accordance with Google Analytics' retention rules;
  • Data we are legally required to keep — for the period set by law.

8. Data security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or misuse, including an encrypted connection (HTTPS) and infrastructure protection.

9. Your rights

Under the GDPR you have the following rights regarding your personal data:

  • The right to access your data;
  • The right to rectify inaccurate or incomplete data;
  • The right to erasure (the “right to be forgotten”);
  • The right to restrict processing;
  • The right to data portability;
  • The right to object to processing;
  • The right to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within the period provided by applicable law.

10. Right to lodge a complaint

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the supervisory authority in the Republic of Bulgaria:

Authority
Commission for Personal Data Protection (CPDP / КЗЛД)
Address
2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria
Phone
+359 2 915 3 518
Website
www.cpdp.bg

11. Cookies

This site uses cookies. Detailed information about which cookies we use and how to manage your consent is available in our Cookie Policy.

12. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and the date of the last update is shown at the top.

13. Contact

For questions about this Privacy Policy or the processing of your personal data, contact us at [email protected] or [email protected], or by phone at +359 885 146 191.