Last updated: September 9, 2025.
1. Who we are
Therma Palace, Kranevo, is the administrator of personal data according to the GDPR. Contact information:
Address: Kranevo, Bulgaria
Email: info@thermapalace.com
Phone: +359 885 884 600
2. What data do we collect
- Name, email, and phone – during online reservation;
- Payment information (partially through secured payment operators);
- IP address and cookies when using the site;
- Communication with us via contact forms.
3. Purposes and legal bases
Personal data is used for:
- Processing and confirming reservations;
- Invoicing and fulfilling legal obligations;
- Improvement of service and communication;
- Marketing communications (only with explicit consent).
4. Cookies
The site uses cookies for proper functionality, statistics, and marketing. You can control your settings through the browser.
5. Sharing with third parties
The data may be shared with trusted partners (payment operators, accounting, IT support) only when necessary and in compliance with the law.
6. Transfers outside the EU
Unless utilizing providers outside the EU, transfers will be made under guaranteed protection mechanisms (e.g., standard contractual clauses).
7. Retention periods
Data related to reservations is retained for up to 5 years in accordance with accounting legislation. Marketing data is retained until consent is withdrawn.
8. Your rights
- The right to access and copy the data;
- The right to rectify or delete;
- The right to restrict processing;
- The right to portability;
- The right to withdraw consent;
- The right to complain to the CPDP (www.cpdp.bg).
9. Contacts
If you have questions regarding the processing of personal data, please contact us:
Email: info@thermapalace.com
Phone: +359 885 884 600