Privacy
Privacy statement
This site has a public part that anyone can read without an account, and a residents portal that requires one. Personal data is only involved in the second part. This page explains exactly what is stored, why, and for how long.
Last updated on 27 July 2026.
Who is responsible
The controller for the personal data described here is Pirin Lodge — owners association, at Gramadeto, 2770 Bansko, Bulgaria. For anything about your data, write to privacy@pirinlodge.com.
The public pages
You can read every public page without an account and without being asked for anything. There is no analytics, no advertising, no tracking pixel and no third-party script. Nothing you do on the public pages is linked to you.
Cookies
This site sets two cookies, both strictly necessary for it to work, so no consent banner is shown:
- Session cookie
- Keeps you logged in inside the residents portal and remembers your language choice. Expires when you close your browser, or after two hours of inactivity.
- Security token
- Protects forms against being submitted from another website on your behalf. Expires with your session.
The fonts on this site are served from the same server as the site itself, so loading a page does not tell any other company that you visited.
The residents portal
An account is created for you by the building manager. From that moment the following is stored:
| What | Why | Legal basis |
|---|---|---|
| Your name, email address, apartment number, optional phone number and language preference | To give you access, to know which apartment a request comes from, and to show the portal in your language | Legitimate interest of the owners association in managing the building |
| Your wellness reservations: date, time, number of people, any note you add and whether you requested a massage | To keep the slot free for you, to prevent double bookings, and to arrange a massage if you asked for one | Legitimate interest in operating the shared facilities fairly |
| Fault reports: what you reported, where, when, and the follow-up by the manager | To have the fault fixed and to keep a record of the maintenance history of the building | Legitimate interest in maintaining the building |
| Server logs with your IP address and the pages requested | To keep the site secure and to investigate errors | Legitimate interest in the security of the service |
Who can see it
Other residents never see your reservations, your fault reports or your contact details. The building manager sees them, because that is what the follow-up requires: a fault report is only useful if someone knows which apartment it came from. Announcements and documents go the other way: the manager publishes them and every resident can read them.
How long it is kept
- Wellness reservations are deleted 12 months after they took place.
- Fault reports are kept for 60 months, because they are part of the maintenance history of the building.
- When you stop living here, your account is deactivated immediately and deleted after 3 months.
- Server logs are kept for 14 days.
Who else is involved
The site and the database run on a server rented from a hosting provider inside the European Union. Nothing is transferred outside the EU, and no data is sold, shared or used for advertising in any form.
Your rights
Under the GDPR you can ask for the following at any time, free of charge, by writing to privacy@pirinlodge.com:
- A copy of everything stored about you.
- Correction of anything that is wrong — you can change your name, email, phone and language yourself in your profile.
- Deletion of your data, unless the owners association still needs it for the administration of the building.
- Restriction of processing while a dispute about your data is being resolved.
- Your data in a machine-readable file.
- Objection to processing that is based on legitimate interest.
Complaints
If you are not satisfied with how your request is handled, you can complain to the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), or to the supervisory authority of the EU country you live in.
Download your data yourself
You do not have to ask anyone: in the residents portal you can download a file with your account details, your reservations and your fault reports whenever you want.
Open the portal