Privacy Policy

This Privacy Policy describes how Bastion Plus (hereinafter referred to as “the Company”, “we”, “us”, “our”) collects, uses, stores, and protects the personal data of users of the website www.bastion.plus (hereinafter referred to as “the Website”).

The Company complies with the requirements of EU Regulation 2016/679 (GDPR) and the legislation of the Republic of Bulgaria on personal data protection.

1. What Data We Collect

We may collect the following categories of personal data:

First and last name;
Contact information (phone, email);
City of residence or region of interest;
Information about requested properties;
IP address, cookies, browser and device data;
Data submitted via feedback forms or online applications.

2. Purposes of Data Processing

We use personal data exclusively for legitimate purposes, including:

providing consultations and information on properties;
processing and supporting purchase, sale, or rental transactions;
responding to user inquiries;
improving website performance and user experience;
sending relevant offers (only with user consent).

3. Legal Basis for Processing

We process data based on:

User consent — for example, when subscribing to a newsletter;
Necessity for contract performance — if you request services;
Legitimate interest of the company — for service analysis and improvement;
Legal obligations — in cases provided for by Bulgarian law.

4. Data Retention Period

Personal data is stored no longer than necessary for the purposes of processing.

Contact details — up to 3 years after the last interaction;
Transaction data — according to Bulgarian legislation requirements (usually 5–10 years);
Cookies and analytical data — in accordance with browser settings or Google Analytics policy.

5. Data Disclosure to Third Parties

We may only transfer data to:

partners (agencies, developers, banks) involved in providing services;
legal advisors and notaries, if required for transaction processing;
government authorities — exclusively within the framework of the law.

All partners are obliged to comply with confidentiality and GDPR provisions.

6. Data Transfer Outside the EU

If data is processed outside the European Union, the Company guarantees that such operations comply with the European Commission’s standard contractual clauses, ensuring an adequate level of data protection.

7. User Rights

You have the right to:

access your data and obtain a copy of records;
rectify inaccurate information;
request data erasure (“right to be forgotten”);
restrict processing or object to it;
data portability to another controller;
withdraw your consent at any time.

To exercise these rights, please send a request to: office@bastionplus.net.

8. Data Protection

We implement technical and organizational security measures to protect data from unauthorized access, loss, alteration, or disclosure, including:

connection encryption (SSL/TLS);
restricting employee access to data;
regular server updates and backups.

9. Cookies

The Website uses cookies for proper operation and traffic analysis. You can disable cookies in your browser settings, but this may limit the website’s functionality. For more details, see the Cookies Policy section.

10. Contact Information

If you have questions about data protection, please contact us:
[Company Name]
Address: Sunny Beach, Tia Maria, 1 Nesebar, Bulgaria
Email: office@bastionplus.net
Phone: +359 88 2799660

11. Policy Changes

We may update the Privacy Policy from time to time. All changes will be published on this page with the update date indicated.