Privacy Policy – Mountain Villa Kama

Last updated: 15.07.2026

This Privacy Policy explains how Villa Kama (“we,” “us,” or “our”) collects, uses, stores, and protects personal data when you visit our website, submit a contact or booking form, subscribe to our newsletter, or use our services for villa accommodation, tours, and airport transfers.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Personal Data Protection Act of the Republic of Bulgaria.

1. Data controller

The data controller responsible for the processing of personal data is:

Villa Kama / Kama-23 LLC.
UIC / EIK: BG207366575

Registered address: [Insert address in Bulgaria]
Email: info@kama.bg
Phone: +359 878 283830

2. What data we collect

We may collect and process the following personal data:

Full name.
Email address.
Phone number.
Country and city.
Arrival and departure dates.
Booking details for accommodation, tours, and airport transfers.
Number of guests, including adults and children.
Special requests or preferences.
Contact form messages.
Newsletter subscription details.
Payment and billing details, where required.
Technical data such as IP address, browser type, device information, and cookies.

3. How we collect data

We collect personal data when you:

Fill in a booking form.
Fill in a contact form.
Subscribe to our newsletter.
Communicate with us by email, phone, or messaging services.
Browse our website, where cookies and analytics tools may collect technical data.

4. Purposes of processing

We use your personal data for the following purposes:

To process accommodation bookings.
To arrange tours and airport transfers.
To respond to inquiries and requests.
To send booking confirmations, invoices, and service updates.
To send monthly newsletters and promotional emails, where you have given consent.
To improve our website, services, and customer experience.
To comply with legal, accounting, and tax obligations.

5. Legal basis

We process your personal data only when we have a valid legal basis under GDPR:

Performance of a contract: to manage your booking or service request.
Consent: for newsletter subscriptions and non-essential cookies.
Legal obligation: for accounting, tax, and other statutory requirements.
Legitimate interests: for security, website improvement, and basic customer communication.

You may withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

If you subscribe to our newsletter, we will use your name and email address to send you monthly offers, updates, and news. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.

7. Contact forms

When you contact us through the website, we use the information you provide only to answer your request and manage communication with you. If we later use your information for marketing purposes, we will ask for the appropriate consent where required.

We do not sell or rent your personal data.

We may share data only with trusted third parties, such as:

Website hosting and IT providers.
Booking and reservation software providers.
Email newsletter platforms.
Payment processors.
Accounting and tax service providers.
Transport or tour partners, if needed to fulfill your request.rhodesprime+1

These providers may process your data on our behalf under appropriate data protection agreements.

9. International transfers

If any of our service providers process data outside the EU/EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

10. Data retention

We keep your personal data only for as long as necessary for the purposes stated in this policy or as required by law.

Typical retention periods may include:

Booking and billing records: as required by applicable accounting and tax laws.
Contact form messages: for a limited period after the request is resolved.
Newsletter data: until you unsubscribe.
Cookie data: according to the cookie policy and consent settings.

11. Cookies and analytics

Our website may use cookies and similar technologies to improve functionality, measure traffic, and understand how visitors use the site. Non-essential cookies should only be used with consent.

You have the right to:

Access your personal data.
Request correction of inaccurate data.
Request deletion of your data.
Restrict processing.
Object to processing.
Withdraw consent at any time.
Request data portability.
File a complaint with the Commission for Personal Data Protection in Bulgaria.

13. Security

We use appropriate technical and organizational measures to protect your personal data, including access control, secure hosting, and reasonable administrative safeguards.

14. Children’s data

Our services are intended for adults making bookings for themselves or their families. We do not knowingly collect personal data from children without appropriate parental or guardian involvement.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page, with the updated date shown at the top.

16. Contact us

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

Villa Kama / Kama-23 LLC.
Email: info@kama.bg
Phone: +359 876 277140
Address: 2 Oborishte St., Pavelsko, Bulgaria