Privacy policy

This page explains what data about you we receive through this site and what we do with it. It follows the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.

Who processes your data

Your data is processed by the company that runs Hotel Arsenal. Its name, company number and address are at the foot of every page of this site. For questions about your personal data, write to us or call the phones on the Contacts page.

What data we collect

• With a booking enquiry we receive your first and last name, phone, email, the dates of your stay, the number of guests and rooms, and any additional information you wrote.
• With a question from the Contacts page we receive your name, email, your phone if you gave it, and the text of the question.
• With every form you send we receive the IP address it was sent from. We keep it for two days to stop enquiries sent by machines.

We collect no card details, since nothing is paid on this site.

What we use it for

We use your data only to answer your enquiry or question, to offer you free rooms and a price, and to prepare the booking if you confirm it. The legal basis is the consent you give with the tick in the form and the steps before a contract that you asked for. We send you no advertising and we do not sell your data.

How long we keep it

We keep enquiries and questions for up to three years, unless you ask us to delete them sooner. We keep the data of a confirmed booking for as long as the law requires, for example for accounting records.

Who else sees it

Only the hotel staff who answer enquiries see your data. The site and its email run with hosting and email providers who keep the data on our behalf and use it for nothing else. The site goes through the Cloudflare network, which protects it from attacks and sees your IP address.

Cookies

This site uses no cookies for advertising or tracking and keeps no visitor statistics. The map on the Contacts page loads from Google Maps, and Google may set its own cookies.

Your rights

You can ask to see your data, to have it corrected or deleted, to limit its use or to receive it in a file. You can also withdraw your consent at any time. Write to us and we will answer within one month.

If you think we are breaching your rights, you can complain to the Bulgarian Commission for Personal Data Protection, www.cpdp.bg.

Last updated: 13.11.2026.