PERSONAL DATA PROTECTION POLICY

1. Data Controller

 This policy aims to inform you how „Dream City Investment“ Ltd., UIC 208414514, with registered office and address: Varna, Ivan Vazov St. No. 13, ground floor, in its capacity as a data controller, processes your personal data when using the website and when submitting inquiries related to apartments and commercial spaces in Dream City complex.
 
Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.
 
Depending on how you use the website or the Company’s services, the following categories of personal data may be collected:

2. What personal data we collect

Depending on how you use the website or our services, we may collect the following categories of data:
 
2.1. Contact data
These are the data you voluntarily provide when filling out contact forms, registering, subscribing to a newsletter, or sending an inquiry. These may include:
·  First and last name
·  Phone number
·  Email address
·  Correspondence address
·  Country
These data are provided voluntarily through contact forms, inquiries, or subscriptions.

2.2. Data for contract conclusion and execution
·  Full name
·  Personal identification number or foreigner ID number
·  Identity document details
·  Permanent and correspondence address
·  Information required by law

2.3. Data via social networks
When accessing through a social platform, we may receive:
·  Username
·  Profile picture
·  Email address
·  Publicly available information permitted by you

2.4. Technical information
·  IP address
·  Device and browser data
·  Information about visited pages and actions on the website
These data are collected through „cookies“ and similar technologies.

2.5. Data we do not collect
The Company does not process sensitive personal data such as information about origin, religion, political views, health status, criminal record, or membership in organizations. No bank card data is stored through the website.

3. Purposes of processing

Personal data are used for:
3.1. Providing information and services related to real estate;
3.2. Communication and responding to inquiries;
3.3. Organizing viewings and conducting negotiations;
3.4. Concluding and executing contracts;
3.5. Improving service quality;
3.6. Protecting the legitimate interests of the Company;
3.7. Fulfilling legal obligations;
3.8. Sending marketing communications with consent.
 
Anonymized data may be used for statistical analysis.

4. Legal basis for processing

 Processing is carried out on the basis of:
4.1. Legitimate interest – for providing and improving services;
4.2. Performance of a contract or taking steps prior to entering into a contract;
4.3. Legal obligation;
4.4. Consent – for marketing purposes.
 
Consent may be withdrawn at any time.

5. Processing methods and protection

 Personal data are processed using automated and non-automated means. Technical and organizational measures are applied to protect against unauthorized access, loss, destruction, or misuse.

6. Recipients of personal data

 Personal data may be provided to:
 
6.1. IT providers, hosting companies, and technical support;
6.2. Accounting and legal consultants;
6.3. Related parties where necessary;
6.4. Public authorities where required by law.
 
Data are not sold to third parties.

7. Transfer outside the EU

 Personal data are not transferred outside the European Economic Area unless adequate safeguards are ensured in accordance with European legislation.

8. Your rights

 You have the right to:
8.1. Access your data;
8.2. Request correction or update;
8.3. Request deletion;
8.4. Restrict processing;
8.5. Object to processing;
8.6. Request data portability;
8.7. Lodge a complaint with the Personal Data Protection Commission.

To exercise your rights, you can contact us at:
gdpr@dreamcity.bg

9. Security

 The Company applies measures to protect personal data against unauthorized access, loss, destruction, or unlawful use.

10. Retention periods

10.1. Data related to services and contracts – for the duration of the relationship and according to statutory limitation periods;
10.2. Data related to social networks – for the duration of the linked profile;
10.3. Data for marketing purposes – up to 24 months or until consent is withdrawn.
 
After the expiration of these periods, the data are deleted or anonymized.

11. Policy updates

„Dream City Investment“ Ltd. reserves the right to update this policy in case of changes in legislation or processing practices. The latest version is published on the official website.

12. Contacts

If you have any questions regarding this Personal Data Protection Policy, please contact us at the following email address: gdpr@dreamcity.bg