Privacy Policy

Last updated: 6 November 2026

This policy explains how personal data is processed on blackseagolfhomes.com (“the website”), where three homes at Thracian Cliffs Golf & Beach Resort, Bulgaria, are offered for sale by their owner.

1. Who is responsible for your data

The controller of personal data processed through the website is the seller of the three homes:

Hygea Water Ltd (ХИГЕЯ УОТЪР ООД)
UIC (ЕИК): 148145355 · VAT: BG148145355
Registered office: 133 Knyaz Boris I Blvd, office 3, Varna, Bulgaria
Email: [email protected] · Phone: +359 897 98 11 10

2. When you send an enquiry

The form on the website asks for your name, your email address and, if you choose, your phone number, the home you are interested in and a message. We use them to answer you, to arrange a viewing and, if you decide to buy, to prepare the purchase.

The enquiry is not stored in a database on the website. It is delivered as an email to the owner’s mailbox through Cloudflare, and kept there as correspondence.

To keep automated spam out, the form may be checked by Cloudflare Turnstile, which looks at technical signals from your browser and sets no advertising cookies.

If you have given marketing consent (see section 4), the fact that an enquiry was sent is also reported to Meta, so that we can measure our advertising. For this, your email address and phone number are first turned into a one-way code (SHA-256 hash) in our system; Meta receives the code, not the address itself. Without marketing consent nothing about your enquiry is sent to Meta.

3. When you call or write to us directly

If you call, email us, or write on WhatsApp or Viber, we use your number, your address and what you write to reply to you. WhatsApp and Viber process the messages under their own terms.

4. Cookies and similar technologies

A cookie is a small file stored on your device. The website uses cookies and similar technologies in three categories. Statistics and marketing are switched on only after you agree in the cookie banner.

We use Google Consent Mode v2: until you choose, all non-essential storage is set to “denied”.

Necessary

Required for the website to work and to remember your choices. They cannot be switched off. They are your cookie choice (stored in your browser as bsgh_consent) and your language (the bsgh_lang cookie). When you make a choice, a record of it is also kept on our server so that we can show your consent if asked: a random consent ID, your choices, the banner version, the page, the date and time, your IP address with its last part removed, your country and your browser type. The record is stored with Cloudflare in the European Union.

Statistics: only with consent

Google Analytics 4. It shows us, in aggregate, how visitors use the website: pages viewed, approximate location, device. Provider: Google Ireland Ltd. Without your consent Google receives only anonymous signals with no cookies, which it uses to estimate visits in aggregate.

Marketing: only with consent

Meta Pixel. It measures our advertising and helps show relevant content on Facebook and Instagram. Provider: Meta Platforms Ireland Ltd.

Changing or withdrawing consent

You can change or withdraw your consent at any time under Cookies at the foot of every page. Your choice is kept for 12 months, after which the banner asks again. You can also delete cookies in your browser settings.

5. Legal basis

• Your enquiry and our correspondence: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
• Statistics and marketing cookies, and the report of an enquiry to Meta: your consent (Art. 6(1)(a) GDPR).
• Necessary cookies, spam protection and the consent record: our legitimate interest in a secure, working website and in being able to prove consent (Art. 6(1)(f) GDPR).

6. Who receives data

• Cloudflare: hosting and delivery of the website, delivery of enquiry emails, spam protection, the consent record.
• Google: Google Analytics 4 (with consent) and the website’s fonts, which are loaded from Google’s servers; your browser’s IP address reaches Google when they load.
• Meta: the Meta Pixel and enquiry reports (with consent).
• Google (Gmail) hosts the owner’s mailbox, where enquiries arrive.

Some of these providers may process data outside the European Economic Area. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

We do not sell personal data, and we make no decisions about you by automated means.

7. How long we keep data

• Enquiries and correspondence: as long as needed to answer you and arrange a viewing. If no purchase follows, no longer than two years after our last exchange. If you buy, documents of the sale are kept as long as Bulgarian accounting and tax law requires.
• The consent record: 24 months, then deleted automatically. The choice in your browser: 12 months.
• Google Analytics data: 14 months.

8. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting what was done before. To use these rights, write to [email protected].

9. Supervisory authority

If you believe your rights have been infringed, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, [email protected], www.cpdp.bg, or with the authority in the EU country where you live.

10. Changes to this policy

We may update this policy. The current version and its date are always shown at the top of this page.