Privacy policy


Why is your consent required?

Our exclusive priority is to protect your personal data and to obtain your free, informed and unambiguous consent for the processing of your personal data.

If you check the option "I accept everything" you agree that you provide your personal data voluntarily and that you have read your rights in accordance with the Personal Data Protection Act and REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016-GDPR and give your consent to your personal data being collected, processed, stored and passed on to third parties for the purposes we have set out below.


"Personal data" means any information related to an identifiable individual ("data subject" or "user"); natural person, is a person who can be identified directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or by one or more characteristics specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual;

"Administrator" means a body which determines alone or jointly with other authorities the purposes and means of the processing of personal data; when the purposes and means for this processing are determined by the law of the European Union or the law of the Republic of Bulgaria the administrator or the special criteria for its determination may be established in the law of the European Union or in the Bulgarian legislation. In the present case the administrator is "WEB BOOKING SERVICES" Ltd., UIC: 203413127, VAT registration: BG203413127, with registered office and address of management: Sofia, 1784, 12 Mihail Tenev Str., 3rd floor, office 12, telephone: 02/439 21 00, fax: 02/439 21 09, e-mail:, (hereinafter referred to as Administrator);

"Processor of personal data" means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the administrator;

"Processing" means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, distribution or other form of access to data, arranging or combining, restricting, deleting or destroying;

"Supervisory authority" means an independent public body of a Member State of the European Union responsible for monitoring the application of data protection rules. For the Republic of Bulgaria, the supervisory body is the Commission for Personal Data Protection.

Purpose of the document

The purpose of the Privacy policy is to ensure that the Administrator: complies with the data protection legislation, namely the Personal Data Protection Act and the General Regulation on Personal Data Protection and other applicable legislation and follows good practices in data processing; protects the users, employees, clients and partners of "WEB BOOKING SERVICES" Ltd.; ensures transparency about the ways in which the personal data of the users are stored and processed; provides protection against the risks associated with data breaches;

How do we collect information about you?

We may collect information about you in several ways: Completed and submitted by you forms related to the services used. By filling them in you knowingly share personal information. For each form containing the transmission of personal data we will indicate the purposes of use, the period of their storage, third parties with whom we may share them, the ways to claim your rights in accordance to the Regulation. We will minimize the amount of data in the form according to the announced goals. For example: when you create an account on the website you provide us with personal information, including your name, telephone number and e-mail.

The following categories of personal data are collected and automatically processed for all users of the WEB BOOKING SERVICES Information System (hereinafter referred to as the WBS IS):

  • IP address;
  • Date and time of the request;
  • Country of origin of the request;
  • Requested content (specific web page);
  • Access status / HTTP status code;
  • Website from which the request was submitted;
  • Browser;
  • Operating system and interface;
  • Browser language and software version;
  • The volume of data sent in each separate case;
  • Time zone difference as of Greenwich Mean Time (GMT).

These data are technically required to enable the display of the Internet website of They are also required to ensure the proper operation of the "WBS" information system.

Personal data collected for WBS IS Users:
  • Name, Family name;
  • E-mail address;
  • Telephone/mobile;
  • Password;
  • Location data;
  • Country/City data based on the IP address of the user device (an integral part of the information received from each website);
  • Information about actions performed on the website by the user (history of bookings, sites and pages viewed);
  • Information about the type of the browser/device which is used.
Purposes of the data processing:
  • Analysis of the actions of the users of the website in connection to the improvement of its services;
  • Notification of upcoming bookings or reminder of the next procedure;
  • Marketing research on customer satisfaction;
  • In order to always send up-to-date and useful information about our initiatives, we collect data such as e-mail address or other way of contact to you - Viber, Skype, Messenger or other communication platform account.
Collection period

Collection period is a period not longer than required for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as they will be processed solely for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1). The last is on the condition that the appropriate technical and organizational measures are provided with accordance to the Regulation in order to guarantee the rights and freedoms of the subject of data ("storage restriction"); The periods for storage of personal data are in compliance with: Law on the National Archive Fund, Law on Accounting, Tax-Social Security Procedure Code, all other applicable legal provisions, procedures, policies and rules internal for the company.

Place of personal data processing

The administrator processes personal data on the territory of the Republic of Bulgaria. Personal data may be processed in very limited cases outside the Republic of Bulgaria (for example in the European Union and the so-called "Third Countries"). This will be done only if the User has given his explicit consent when it is required by law or by the Administrator in order to provide the service.

Rights of subjects of personal data

The users of the information system "WBS" have the following rights regarding the personal data processed by the Administrator:

  • Receiving confirmation from the administrator whether personal data related to him are processed, the categories of data and the purposes for which they are processed;
  • Correction of inaccurate or incomplete data and/or their amendment;
  • Deletion of personal data that are no longer required for the purpose for which they were used, or if the consent has been withdrawn or an objection to the processing has been lodged;
  • Restriction of data processing in certain circumstances when deletion is not possible;
  • The right to receive the provided personal data in a structured, widely used and machine-readable format, as well as to transfer them to another administrator or to request their transfer to another administrator;
  • The right to object to the processing of data in connection with a legitimate interest;
  • Withdrawal of consent for personal data processing, which enters into force in the future;
  • Right to appeal to the Commission for Personal Data Protection which is submitted in the form and with details according to the law.

WEB BOOKING SERVICES Ltd. reserves the right to amend and/or add content to this policy at any time. The changes take effect immediately after their publication on the website, unless otherwise in the updated version of the Policy is provided. The policy may be updated at any time without specific notice to users and we are not responsible in case a user has not read the latest version of this policy.