This document has been prepared in accordance with the general requirements of Regulation (EU) 2016/679 (GDPR).
Last updated: 28 September 2026.
1. Data controller
"Bellevue-Golden Sands" Ltd., company registration number (EIK/Bulstat) 813146600, VAT registered under No. BG813146600, with registered office and address: Hotel Bellevue, Baba Alino area, Golden Sands resort, Primorski district, 9007 Varna, Bulgaria, referred to below as "the Hotel", is the data controller for personal data within the meaning of the GDPR, for the purposes described in this policy.
For questions about how we process personal data, you can contact us at:
- Email: info@bellevuebg.com
- Phone: +359 887 603 131
- Address: Hotel Bellevue, Baba Alino area, Golden Sands resort, Primorski district, 9007 Varna, Bulgaria.
2. What personal data we process
Depending on how you interact with us, we may process:
- Contact details: name, email address, phone number, when you fill in a contact form or send an enquiry.
- Booking details: stay dates, number of guests, room type, special requests, processed through the Clock PMS booking system (see section 5).
- Check-in details: names and ID document details, as required by the Tourism Act for registering guests at accommodation establishments.
- Technical data: IP address, browser type, on-site behaviour, through Google Tag Manager, only once you've given cookie consent (see section 7).
Bank card details aren't entered or stored on our website. For online payments, they're entered on a secure payment page and the payment is processed by United Bulgarian Bank AD (UBB). Payments on site are taken at hotel reception.
3. Purposes and legal basis for processing
- Processing a booking: performance of a contract (Article 6(1)(b) GDPR)
- Registering guests at check-in: a legal obligation (Tourism Act)
- Responding to an enquiry made through the contact form: legitimate interest / pre-contractual relations
- Traffic analytics (GTM): consent (Article 6(1)(a) GDPR)
- Direct marketing (where applicable): consent
4. Retention period
We keep personal data only for as long as necessary for the purposes it was collected for, or as required by law (for example, accounting and tourism legislation).
Retention period for documents under the Accountancy Act: 10 years.
5. Third parties and processors
To fulfil bookings, we use Clock PMS (Clock Software) as a data processor acting on our behalf. For traffic analysis, we use Google Tag Manager (see section 7). We don't sell or pass on personal data to third parties for their own marketing purposes.
6. Your rights
Under the GDPR, you have the right to:
- access your personal data;
- have inaccurate data corrected;
- have your data erased ("the right to be forgotten"), where applicable;
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
- lodge a complaint with the Commission for Personal Data Protection (CPDP), www.cpdp.bg, or with the supervisory authority in the EU member state where you habitually reside or work (Article 77 GDPR).
To exercise these rights, contact us at info@bellevuebg.com.
7. Cookies
The website uses cookies solely through Google Tag Manager, and only once you've given explicit consent via the cookie banner. You can change your choice at any time through your browser settings or the website's cookie banner.
8. Changes to this policy
We reserve the right to update this policy. In the event of material changes, we'll inform visitors by publishing an updated version of this page, showing the date it was last updated.