Privacy Policy

Privacy Policy

This Privacy Policy is intended to inform you how “Sunterra RE” OOD processes personal data of users of the website www.sunterra.eu, as well as of individuals who contact the company through contact forms, email, telephone or other communication channels. We respect your right to privacy and process your personal data lawfully, fairly and transparently, in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation, the Bulgarian Personal Data Protection Act, and the applicable Bulgarian and European legislation.

  1. Data Controller

The data controller is:

“Sunterra RE” OOD
UIC: 207080079
Address: 5 Dunav Blvd., Plovdiv, Bulgaria
Phone: +359 32 202 400
Email: [email protected]
Website: www.sunterra.eu

For questions related to the processing of personal data, you may contact us at the email address listed above.

  1. What Personal Data We Process

Depending on the way you use the website and communicate with us, we may process the following categories of personal data:

  • first and last name;
  • email address;
  • telephone number;
  • company/organization you represent;
  • subject and content of the message sent;
  • data provided through a contact form or subscription form;
  • technical information related to the use of the website, including IP address, browser type, device, operating system, date and time of visit;
  • information collected through cookies and similar technologies, where applicable.

We do not request or collect special categories of personal data through the website, such as health data, political opinions, religious beliefs or other sensitive data. Please do not send us such information through the contact forms.

  1. Purposes for Processing Your Personal Data

We process personal data for the following purposes:

  • to respond to your inquiry submitted through a contact form, email or telephone;
  • to communicate with potential partners, clients, suppliers, institutions, media and other stakeholders;
  • to provide information about the activities, projects, services and initiatives of Sunterra RE;
  • to send news, updates and announcements when you have subscribed or given your consent to receive them;
  • to maintain the security and normal functioning of the website;
  • to analyze website traffic and improve the content and user experience of the website when analytical tools are used;
  • to comply with legal obligations;
  • to protect the rights and legitimate interests of “Sunterra RE” OO
  1. Legal Basis for Processing

The processing of personal data is carried out on one or more of the following legal bases:

  • Your consent — for example, when subscribing to news, accepting certain cookies or submitting information through a contact form, where applicable;
  • Taking steps at your request prior to entering into a contract — for example, in relation to inquiries about partnerships, services, business relations or career opportunities;
  • Performance of a contract — where processing is necessary in connection with already established contractual relations;
  • Legal obligation — where we are required to store or provide certain information under applicable legislation;
  • Legitimate interest — for example, to protect the website, prevent abuse, manage communication and protect the rights and interests of the company.
  1. Contact Forms on the Website

When you use a contact form on the website, we process the data you provide in order to review your inquiry and respond to you. The data may include your name, email address, telephone number, company, subject and content of the message. Providing this data is voluntary, but without it we may not be able to process your inquiry or respond to you properly.

  1. Subscription to News and Updates

When you subscribe to receive news and updates from Sunterra RE, we may process your email address and, where applicable, other data provided by you. You may withdraw your consent to receive such communications at any time by using the unsubscribe mechanism, if available, or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

  1. Cookies and Similar Technologies

The website may use cookies and similar technologies for the purposes of normal functioning, improving security, analyzing traffic and enhancing the user experience.Cookies are small text files stored on your device when you visit a website. Some of them are necessary for the functioning of the website, while others are used only where there is an appropriate legal basis, such as your consent.

The possible categories of cookies include:

  • Necessary cookies — ensure the basic functionality and security of the website;
  • Analytical cookies — help us understand how visitors use the website and which pages are most visited;
  • Marketing cookies — may be used to measure the effectiveness of campaigns or display relevant content, where applicable.

You can manage cookies through your browser settings or through an available consent management tool on the website, if such a tool has been implemented.

  1. Gоogle reCAPTCHA

The website may use Google reCAPTCHA to protect forms from automated abuse, spam and unauthorized access. When reCAPTCHA is used, Google may process certain technical data, including IP address, device information, browser information and user behavior on the website. This processing is carried out in accordance with Google’s policies and terms. More information about Google’s data processing can be found in Google’s Privacy Policy and Terms of Service.

  1. Who We May Share Personal Data With

We do not sell your personal data. In certain cases, we may share personal data with third parties where this is necessary and lawful, including:

  • hosting, technical support and IT service providers;
  • providers of email, CRM, analytical or communication tools, where such tools are used;
  • consultants, lawyers, auditors and other professional advisers;
  • public authorities, regulators, courts or other competent institutions where this is required by law;
  • other companies within the economic group, where this is necessary for legitimate business purposes and in compliance with personal data protection requirements.

All third parties that process personal data on our behalf are required to apply appropriate technical and organizational measures to protect the data.

  1. Transfer of Data Outside the European Economic Area

When we use providers or services that may involve the transfer of personal data outside the European Economic Area, we take the necessary measures to ensure an adequate level of protection in accordance with applicable legislation. Such measures may include standard contractual clauses, adequacy decisions of the European Commission or other applicable protection mechanisms.

  1. Data Retention Period

We retain personal data only for the period necessary to achieve the purposes for which it was collected, unless the law requires a longer retention period.

The indicative retention periods are:

  • data from contact forms and inquiries — for the period necessary to process the inquiry and conduct subsequent communication;
  • data related to contractual or pre-contractual relations — for the duration of the relationship and the applicable statutory limitation periods;
  • data for news subscriptions — until consent is withdrawn or the user unsubscribes;
  • technical and analytical data — in accordance with the settings of the relevant tools and applicable legislation;
  • data subject to statutory retention — for the periods provided for in the relevant legal act.

After the expiry of the applicable retention periods, the data is deleted, anonymized or archived where this is permitted and necessary.

  1. Security of Personal Data

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration or unlawful disclosure.

These measures include access control, technical protection of systems, limiting access to data only to persons who need to process it, as well as other measures appropriate to the nature and risk of the processing. Despite the measures applied, please note that the transmission of information over the internet cannot be guaranteed as fully secure.

  1. Your Rights

Under the applicable legislation, you have the following rights in relation to your personal data:

  • the right of access to the personal data we process about you;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of personal data where there are legal grounds for this;
  • the right to restriction of processing;
  • the right to object to processing where it is based on legitimate interest;
  • the right to data portability, where applicable;
  • the right to withdraw your consent at any time;
  • the right to lodge a complaint with the competent supervisory authority.

To exercise your rights, you may contact us at [email protected]. We may request additional information to verify your identity where this is necessary.

  1. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection:

Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Website: www.cpdp.bg

  1. Links to External Websites

The website may contain links to external websites, platforms or services. We are not responsible for the content, privacy policies or practices of third parties.We recommend that you review the privacy policies of each external website you visit.

  1. Changes to This Policy

“Sunterra RE” OOD may periodically update this Privacy Policy to reflect changes in legislation, the company’s activities, the functionality of the website or the way we process personal data.

The current version of the Policy will be published on www.sunterra.eu.

Date of last update: 06 July 2026