Last updated: 30.06.2026
1. Who we are
This website zitashome.bg is operated by “ZITA ABASTROY” Ltd. (the “Company”, “we”, “us”), which is the data controller within the meaning of Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act (PDPA).
- Company name: “ZITA ABASTROY” Ltd.
- UIC: 205047041
- Registered office and address of management: Sofia, Mladost-2 residential district, Block 262, Entrance A, Office 1
- Contact email: office@za-stroy.com
- Telephone: +359 884 744 134
2. What personal data we collect
We collect only the data we need in order to respond to your enquiries and to provide our services:
- Contact / enquiry form data: name, email address, telephone number and the content of your message (for example, interest in a particular apartment or property).
- Data provided when requesting a viewing or meeting: full name and contact details, preferred date and time.
- Technical data: IP address, device and browser type, operating system, the pages you visit and the time of your visit – collected through cookies and analytics tools.
We do not knowingly collect special categories of personal data (so-called sensitive data) through this website.
3. Purposes and legal bases for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and communicating with you | Art. 6(1)(b) (pre-contractual steps) and Art. 6(1)(f) (legitimate interest) |
| Arranging viewings and meetings | Art. 6(1)(b) |
| Sending marketing communications (only with your explicit consent) | Art. 6(1)(a) (consent) |
| Analysing and improving the website through cookies | Art. 6(1)(a) (consent) |
| Compliance with legal obligations (accounting, tax, etc.) | Art. 6(1)(c) |
| Protecting rights and establishing legal claims | Art. 6(1)(f) (legitimate interest) |
4. Cookies
The website uses cookies in order to function properly and to analyse traffic. We use:
- Strictly necessary cookies — for the core functions of the website (consent not required).
- Analytics cookies — Google Analytics, for visitor statistics (consent required).
- Functional/marketing cookies — where used, to remember your preferences (consent required).
You can manage or refuse cookies through the consent banner or your browser settings. Refusing cookies may limit certain features of the website.
5. Who we disclose data to (processors)
We do not sell your personal data. We may share it with trusted providers who process it on our behalf and in accordance with our instructions:
- website hosting and maintenance provider;
- email service provider;
- analytics tool providers;
- accounting, legal and notarial advisers – where necessary;
- competent public authorities – where required by law.
6. Transfers of data outside the EU/EEA
Where we use providers located outside the European Economic Area (e.g. analytics tools), such transfers are carried out subject to appropriate safeguards under the GDPR (standard contractual clauses or an adequacy decision).
7. Retention period
- Enquiries submitted via the contact form: up to 12 months after the communication has ended, unless a contractual relationship arises.
- Data relating to concluded transactions: for the period required by accounting and tax legislation (up to 10 years).
- Marketing data: until you withdraw your consent.
- Analytics data: in accordance with the settings of the respective tool.
8. Your rights
Under the GDPR, you have the right of: access to your data; rectification; erasure (the “right to be forgotten”); restriction of processing; data portability; objection to processing; and withdrawal of consent at any time (without affecting the lawfulness of processing carried out before its withdrawal).
To exercise your rights, please contact us at the contact email address above.
9. Right to lodge a complaint
If you believe that your rights have been infringed, you have the right to lodge a complaint with:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
Telephone: +359 2 915 3580
Email: kzld@cpdp.bg
Website: www.cpdp.bg
10. Security
We apply appropriate technical and organisational measures (encrypted connection via HTTPS, access control, regular updates) to protect your personal data against unauthorised access, loss or misuse.
11. Children
This website is not directed at persons under the age of 18, and we do not knowingly collect data from minors.
12. Changes to this policy
We reserve the right to update this policy. The current version is always available on this page, together with the date of its last update.