Privacy Policy

1. Controller

The data controller is Nisoma Ltd., UIC 200694904, VAT No. BG200694904, 40 Vasil Drumev Street, 9005 Varna, Bulgaria. Data protection contact: info@velohotel.eu and +359 897 860 987.

2. Data we collect

• name, phone number and email address;
• area and collection/return address;
• bicycle or battery type, model and relevant features;
• preferred dates, selected services, notes and request reference;
• photographs and condition records created at check-in;
• payment and document information, without storing full card details;
• technical and security logs necessary to operate and protect the website.

3. Purposes and legal bases

We do not use booking data for marketing without a separate valid legal basis.

• handling the request, communication, confirmation and contract performance — steps before a contract and performance of a contract;
• check-in, storage, servicing, payment and return — performance of a contract;
• accounting, tax and other statutory duties — compliance with a legal obligation;
• website security, abuse prevention and legal claims — legitimate interests balanced against individual rights.

4. Recipients and processors

Data may be processed by the Hostinger hosting and email provider, banking and card payment providers, accounting and technical partners, and competent authorities when required by law. Access is limited to what is necessary for each service.

Where a provider processes data outside the European Economic Area, an applicable GDPR transfer safeguard is used.

5. Retention

• unconfirmed requests — up to 6 months after the last communication;
• confirmed bookings, handover records and related correspondence — up to 5 years after completion, unless longer retention is required for a dispute;
• accounting and tax documents — for the applicable statutory period;
• technical and security logs — normally up to 12 months, unless required for an incident or legal duty.

6. Your rights

You may request information, access, rectification, erasure, restriction, portability, object to processing, and withdraw consent where processing is based on consent. Certain rights may be restricted by a legal retention duty or the need to establish and defend legal claims.

• To exercise a right, email info@velohotel.eu with enough information to identify your request.
• You may lodge a complaint with the Bulgarian Commission for Personal Data Protection.

7. Security and required fields

We apply appropriate technical and organisational measures, including restricted administrative access, protected connections and separate system credentials. Internet communication cannot be guaranteed to be entirely risk-free.

Fields marked as required are needed to process the request and organise collection. Without them we cannot provide the service.

8. Changes

Material changes will be published with a new effective date. The Bulgarian version prevails if the translation differs.