Privacy Policy

1. Introduction

Welcome to zenasye.com ("we," "our," or "us"), a website dedicated to providing tours and information about Sofia, the capital of Bulgaria. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Information We Collect

2.1 Personal Data

We may collect personal identification information, including but not limited to:

• Name and surname
• Email address
• Phone number
• Billing and payment details
• Travel preferences and requirements
• Passport or ID information (when necessary for booking services)

2.2 Non-Personal Data

We may also collect non-personal identification information about users whenever they interact with our site, including:

• Browser name and type
• Device information
• Operating system
• Internet Service Provider
• Date and time of visit
• Pages visited
• IP address
• Referring website

3. How We Use Your Information

We may use the information we collect from you for the following purposes:

• To process and manage your tour bookings
• To personalize your experience and deliver content and product offerings relevant to your interests
• To improve our website, products, and services
• To send periodic emails regarding your bookings or other products and services
• To respond to your inquiries, questions, and/or other requests
• To comply with legal obligations
• To prevent fraud and enhance the security of our website

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes.
• Contract: Processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

Types of cookies we use:

• Essential cookies: Necessary for the operation of our website
• Analytical/performance cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website
• Functionality cookies: Enable us to personalize content for you
• Targeting cookies: Record your visit to our website, the pages you have visited, and the links you have followed

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

7. Your Data Protection Rights

Under the GDPR and other applicable data protection laws, you have the following rights:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us through our website contact form.

8. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our website is at your own risk.

9. Third-Party Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.

We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes.

11. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.

12. International Data Transfers

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Bulgaria and choose to provide information to us, please note that we transfer the data, including personal data, to Bulgaria and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.