Privacy policy

In force from [ДАТА НА ПУСКАНЕ]

This is an English translation provided for convenience. In case of any discrepancy the Bulgarian version prevails.

1. Who is responsible for the data

The controller of personal data is [ФИРМА ЕООД/ООД], company ID (EIK) [ЕИК], address: [АДРЕС], email for questions about personal data: contact@letiipesti.eu.

2. What data we collect and why

What	When	Why	Legal basis (GDPR, Art. 6)
Email and your quiz answers (airport, how often you fly, who with, which places interest you)	When you complete the quiz	To show you suitable deals and, if you agreed, to send you deals by email	Consent (point (a)) and steps prior to a contract (point (b))
Email and password (the password is stored only as an irreversible hash)	When you create an account	To log in to the platform	Contract (point (b))
Airports, watched places, saved deals, alert settings	When you choose them	For the service to work	Contract (point (b))
Payment data: amount, date, plan, Stripe payment number	When you pay	For the subscription, refunds and accounting	Contract and legal obligation (points (b) and (c))
Invoice details: company, company ID, VAT number, address, legal representative	Only if you fill them in	To issue an invoice to the company	Legal obligation (point (c))
Emails sent to you (subject, type, date)	With every email	To know what was sent and to solve problems	Legitimate interest (point (f))
Whether you opened an email with deals and whether you clicked a link in it	When you open or click	To know which emails are useful and not send unnecessary ones	Legitimate interest (point (f))
Unsubscribing from emails (only the email and the date)	When you unsubscribe	So we don't write to you any more	Legal obligation (point (c))
Clicks on “Book” (which deal, when)	When you click	To know which deals are useful	Legitimate interest (point (f))
Login attempts, quiz submissions and contact form messages: email, IP address, date	When you log in, submit the quiz or send a message	Protection against password cracking and spam	Legitimate interest (point (f))
Messages from “Contact” and “Write to us”: name, email, phone (optional) and the text	When you write to us	To reply to you	Legitimate interest (point (f)); for subscribers – contract (point (b))
For “Something isn't working” reports: the browser and device you write from	When you send the report	To find and fix the problem	Legitimate interest (point (f))
Page visits – without cookies and without IP	Every time a page is opened	Statistics on how many people come and from where	Legitimate interest (point (f))

Visit statistics work without cookies. We do not store the IP address. We record a token calculated from the IP address, the browser and a secret word that changes every day. It cannot be used to tell who you are, and the next day the same person gets a different token. We also record the country (from Cloudflare data), the type of device, the page and where you came from.

Email opens are detected through a small image in the email. Some mail services block it by themselves. You can unsubscribe from emails with deals using the “Unsubscribe from these emails” link in every such email.

Your card details (number, expiry date, CVC) are never seen or stored by us. You enter them directly with Stripe.

3. Cookies

We use only essential cookies, with no advertising and no tracking. That is why we do not show a consent banner.

Name	Purpose	Duration
lp_session	Logging in to the platform	30 days
lp_theme	Light or dark theme	1 year
lp_lang	The language you chose (Bulgarian or English)	1 year
lp_admin	Logging in to the administration (for us only)	12 hours
lp_notrack	Not counting our own visits in the statistics (for us only)	1 year

4. Who we share data with

We do not sell data and do not give it out for advertising. We use the following providers, who process data only on our instructions:

Provider	Purpose	Where
Stripe	Card payments	[провери]
Supabase	The database	Frankfurt, Germany
Cloudflare	The website and its protection	Worldwide, closest to you
Resend	Sending emails	[провери]
GitHub	Daily jobs (price checks, alerts, emails)	[провери]

For transfers outside the EU, the European Commission's standard contractual clauses or an adequacy decision are used. [за потвърждение за всеки доставчик]

5. How long we keep data

Data	Period
Account, preferences, watched places	For as long as the account exists
Payments	10 years, as required by the Bulgarian Accountancy Act. After the account is deleted they are kept without the email.
Messages from “Contact” and “Write to us” (with the phone and device, if any)	2 months after the reply
Login attempts, quiz submissions and messages (with the IP address)	24 hours
Temporarily blocked login after many wrong attempts (only the email)	30 days
Page visits	400 days. After that only overall daily numbers remain.
Email from the quiz without a purchase and the emails sent to it	Until you unsubscribe or ask us to delete them

6. Deleting your account

From “Profile” → “Security” → “Delete account forever”. We delete immediately:

your email, password and access to the platform;
your preferences, watched places and saved deals;
your alerts, quiz answers, sent emails and unsubscribe record.

Payments remain, but without the email, under section 5.

7. Your rights

You have the right:

to get a copy of your data;
to correct it;
to request deletion;
to restrict processing;
to object to processing based on legitimate interest;
to withdraw consent to emails with deals at any time: with the “Unsubscribe from these emails” link in every email or from “Profile” → “Alerts”;
to receive your data in a machine-readable format.

Write to us at contact@letiipesti.eu. We reply within 1 month.

You can file a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg.

8. Security

Passwords are stored only as an irreversible hash, and password links are single-use and expire.
Login attempts are limited.
Only our server has access to the database, and the connection is encrypted.

9. Children

The Service is not intended for people under 18.

10. Changes

We will notify you by email of significant changes. See also the Terms and conditions.