Privacy Policy

Privacy Policy – ​​Sunnyisland.bg

Last updated: 06.06.2025

This Privacy Policy aims to inform you about what personal data we collect through the website www.sunnyisland.bg, how we process, store and protect it. We are committed to protecting the confidentiality of your data and to using it only in accordance with the General Data Protection Regulation (GDPR) and Bulgarian legislation.

1. Personal Data Administrator
"Sun Rocks" Ltd. 
Website: www.sunnyisland.bg
Email for contact regarding privacy: office@sunnyisland.bg

2. What data do we collect
2.1. Data provided by you through the contact forms

When you send a property inquiry through our forms, we may collect the following data:

Name
Email address
Phone number (if provided)
Content of the inquiry / description of the property you are looking for
Other data that you voluntarily provide

2.2. Data collected automatically

When visiting the site, data is collected through cookies and logs:

IP ​​address
Device and browser type
Duration of visit
Pages viewed
Traffic source and other analytical information
This information is collected automatically from your browser or through Google Analytics.

3. Cookies
Our site uses cookies for:

Basic functionality of the site
Improving the user experience
Analytic purposes through Google Analytics
Google Analytics uses its own set of cookies to analyze traffic and user behavior. The data is processed in accordance with Google standards and GDPR.

You can manage or delete cookies through your browser settings.

4. Purposes of processing
Your personal data is processed only for the following purposes:

Responding to your inquiries sent via contact forms
Communication regarding property offers
Improving the functionality and content of the site
Analysis of traffic and optimization of our services
Protection against misuse and maintaining the security of the site
We do not use your personal data for marketing without your explicit consent.

5. Legal grounds for processing
We process personal data on the following legal grounds:

Art. 6, para. 1, b. (b) GDPR – to take steps at your request (e.g. responding to an inquiry);
Art. 6, para. 1, b. (f) GDPR – legitimate interest (improvement of the site, security);
Art. 6, para. 1, b. (a) GDPR – your consent (for cookies and analytical tools).

6. Sharing data with third parties
We do not sell or provide personal data to third parties except in the following cases:

To the hosting service provider (for site maintenance only)

To Google LLC through Google Analytics

When required by law or by a competent authority

All partners process data only according to our instructions and in accordance with the GDPR.

7. Data retention
We retain personal data only for the period necessary:

Contact form data – up to 12 months after the communication has ended, unless it becomes part of a subsequent service
Technical logs – according to our internal security policy and legal requirements
Cookies – according to their validity period

8. Data security
We implement technical and organizational measures to protect against:

unauthorized access
loss
unauthorized use
alteration or destruction

9. Your rights as a data subject
You have the right to:

access your personal data
request correction of inaccurate data
request erasure (“right to be forgotten”)
restrict processing
object to processing
receive a copy of your data in a standard format (portability)
withdraw your consent to analytical cookies

You have the right to access the personal data concerning you stored by the Commission and request their correction or erasure or restriction of processing, or, where applicable, the right to object to processing or the right to data portability. Where processing is based on your consent or explicit consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.

For any request related to the processing of your personal data, we invite you to contact the responsible operational administrator (identified in the privacy statement in relation to the specific processing activity or electronic service).

To exercise your rights, please contact us at: office@sunnyisland.bg

10. Changes to the Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.