1. General Information
The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this Privacy Policy.
1.1 Data Controller Gaetano Marino Trauben 12 88250 Weingarten Germany Email: info@marino-mar.com
1.2 Booking and Statutory Reporting (ESTI Bulgaria) When you book our apartment, we collect personal data. Purpose: Fulfillment of the contract and legal obligations. Legal Obligation (ESTI): As a registered host in the Municipality of Nessebar, Bulgaria, I am legally required by the Bulgarian Tourism Act to collect guest data (Full name, Date of birth, Citizenship, ID/Passport number) and report it to the Unified Tourist Information System (ESTI). Legal Basis: Art. 6 (1) (b) GDPR (Contract) and Art. 6 (1) (c) GDPR (Legal obligation).
1.3 Payment via Stripe We use Stripe for payment processing. The data provided during the booking process is passed on to Stripe (Stripe Payments Europe Ltd.). Stripe processes this data as an independent controller to prevent fraud and complete the transaction.
1.4 Newsletter, Contact Form, Jotform and WhatsApp If you contact us via our website or messenger services, we store your data to handle your inquiry.
Newsletter & Mailchimp: We use Mailchimp (Intuit Inc., 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) to manage our email subscriber list and send newsletters. Mailchimp stores your email address and any other data provided to manage the mailing list and analyze newsletter performance (e.g., open rates). We use this service based on your consent (Art. 6 (1) (a) GDPR), which you can revoke at any time. We have a Data Processing Addendum (DPA) in place with Mailchimp to ensure your data is protected.
Contact Form: Data entered into our contact form is processed directly on our server for the purpose of responding to your request (Art. 6 (1) (b) GDPR).
WhatsApp: If you contact us via WhatsApp, your phone number and message content will be processed. We use this service based on your consent (Art. 6 (1) (a) GDPR) or to initiate a contract. Note: Data may be transferred to servers in the USA by Meta Platforms Ireland Ltd.
JotForm: For the legal registration (ESTI), we use JotForm to collect your data securely. We have a Data Processing Addendum (DPA) in place with JotForm.
1.5 Cookies, Google Maps, Social Media and Ads We use cookies to improve your experience. Google Maps: Used to show our location in Sunny Beach. Marketing (Google/Instagram Ads): We use tracking pixels only if you grant consent via our cookie banner (Complianz). Social Media (Facebook, Instagram, YouTube, Pinterest): We maintain profiles on these platforms to communicate with guests and showcase our services. When you visit these pages, personal data is processed by the respective providers (Meta Platforms Ireland Ltd., Google Ireland Ltd., Pinterest Europe Ltd.). We are jointly responsible with these providers for the processing of visitor statistics (Insights/Analytics) according to Art. 26 GDPR. Review Widgets (Trustindex): We display reviews from platforms such as Airbnb, https://www.google.com/url?sa=E&source=gmail&q=Booking.com, and Google via the Trustindex plugin. This may involve transferring your IP address to the servers of Trustindex and the review providers.
1.6 Hosting and Data Processing (IONOS) Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS provides infrastructure and software services, including hosting, cloud services, and IT support. When you access our website, IONOS collects server log files (including IP addresses), which is necessary for the secure and efficient operation of the site. Legal Basis: The use of IONOS is based on Art. 6 (1) (f) GDPR (Legitimate interest in a reliable and secure presentation of our website). Data Processing Agreement (AVV): We have concluded a Data Processing Agreement (AVV) with IONOS in accordance with Art. 28 (3) GDPR. This ensures that IONOS processes the personal data of our visitors only according to our instructions and in compliance with the GDPR.
2. Your Rights
Under the GDPR, you have the right to access, rectify, or erase your personal data at any time. You also have the right to restrict processing, the right to object, and the right to data portability. To exercise these rights, please contact us at info@marino-mar.com.