Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how Visit Bulgaria PM Ltd., operating the Public Locker Sofia service, collects, uses and protects personal data when you use our website and luggage storage service.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Bulgarian data protection legislation.

1. Data Controller

The data controller is:

Visit Bulgaria PM Ltd.
UIC: 207147204
Registered address: 59 Gen. Mikhail D. Skobelev Blvd., Entrance G, Floor 5, Apartment 11, 1606 Sofia, Bulgaria
Email: [email protected]

2. Personal Data We Collect

Booking information

When you make a booking, we collect only the information necessary to provide the service:

First name
Last name
Email address
Phone number

We also process information relating to your booking, such as the booking date, selected locker and access information necessary to provide the service.

Payment information

Payments are processed securely through DSK Bank. Depending on the payment options available at checkout, you may also choose to pay using Google Pay or Apple Pay.

Public Locker Sofia does not store your full debit or credit card details. Payment information required to process the transaction is handled by the relevant payment service provider.

CCTV

Public Locker Sofia is an indoor self-service facility protected by 24/7 CCTV surveillance. Video surveillance is used exclusively for:

protecting customers and their belongings;
protecting our premises and equipment;
preventing and investigating theft, damage, fraud or misuse;
establishing facts in the event of an incident or legal claim.

CCTV recordings are normally retained for up to 7 days and are then automatically overwritten or deleted. Where footage is required in connection with a specific incident, investigation, legal claim or request from a competent authority, the relevant recording may be retained for longer for as long as reasonably necessary for that purpose.

Appropriate notices informing visitors about CCTV surveillance are displayed at the premises.

Website and technical information

When you use our website, certain technical information may be processed automatically, including IP address, browser and device information, website interactions and cookie identifiers. Some of this information is collected only where you have provided the relevant cookie consent. For further information, please see our Cookie Policy.

3. Why We Process Your Data

to create and manage your locker booking;
to send your booking confirmation, locker number, PIN code and other information necessary to use the service;
to communicate with you about your booking;
to process payments;
to provide customer support;
to maintain the security of our premises, customers and equipment;
to prevent and investigate fraud, misuse, theft or damage;
to comply with accounting, tax and other legal obligations;
to understand how our website is used and improve its performance;
where you have consented, to measure advertising performance and effectiveness.

4. Legal Basis for Processing

Depending on the purpose, we process personal data on one or more of the following legal grounds:

Performance of a contract — where processing is necessary to make and administer your booking and provide the luggage storage service.

Legal obligation — where information must be processed or retained to comply with applicable accounting, tax or other legal requirements.

Legitimate interests — including protecting our premises and equipment, maintaining security, preventing fraud and misuse, handling disputes and protecting our legal rights.

Consent — where required for analytical or advertising technologies used on our website. You may withdraw your consent at any time through our Cookie Settings without affecting the lawfulness of processing carried out before withdrawal.

5. How Long We Keep Your Data

We do not keep personal data longer than necessary for the purpose for which it was collected.

Booking and customer information is retained for as long as reasonably necessary to administer the booking, provide customer support, handle possible disputes and comply with applicable legal obligations.

Information that forms part of accounting or legally required business records may be retained for the period required by applicable law.

CCTV recordings are normally retained for up to 7 days, unless a specific recording is required for an incident, investigation, legal claim or lawful request by a competent authority.

Cookie and analytics retention depends on the technology concerned and is described, where applicable, in our Cookie Policy and Cookie Settings.

6. Who May Receive Your Data

We do not sell your personal data.

Where necessary for the operation of our service, information may be processed by or shared with:

DSK Bank and relevant payment service providers for payment processing;
Google, where Google Analytics, Google Ads or Google Pay services are used;
Apple, where Apple Pay is selected;
website hosting and technical service providers acting on our behalf;
professional advisers where reasonably necessary;
public authorities, courts or law enforcement bodies where disclosure is required by law or pursuant to a valid legal request.

Service providers receive only the information necessary for the relevant purpose and are required to process personal data in accordance with applicable data protection requirements.

Some third-party technology providers may process information outside the European Economic Area. Where this occurs, personal data is transferred only where a lawful transfer mechanism or other appropriate safeguards required by GDPR apply.

7. Google Analytics and Google Ads

Subject to your cookie choices, our website uses Google Analytics to understand how visitors use the website and Google Ads technologies to measure the performance of our advertising.

These technologies may process information such as your device and browser information, IP address, website interactions and online identifiers.

Analytics and advertising technologies that require consent are not activated unless you choose to allow the relevant cookie category.

You can change or withdraw your choice at any time through Cookie Settings. For more information, please see our Cookie Policy.

8. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

Access to personal information and CCTV recordings is restricted to authorised persons and service providers who require access for legitimate operational, security or legal purposes.

No internet-based system can guarantee absolute security, but we take reasonable measures appropriate to the nature of the information we process.

9. Your Rights

Under GDPR, depending on the circumstances, you have the right to:

request access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a portable format where applicable;
withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at: [email protected]

We may request reasonable information to verify your identity before processing a request. You also have the right to lodge a complaint with the Commission for Personal Data Protection of the Republic of Bulgaria or, where applicable, another competent EU/EEA supervisory authority.

10. Automated Decision-Making

Public Locker Sofia does not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.

11. Children

Our luggage storage service is not specifically directed at children, and we do not intentionally collect personal data from children for marketing purposes.

12. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology or legal obligations change. The current version will always be available on our website, together with the date of the latest update.

13. Contact

For questions about this Privacy Policy or the way we process personal data, please contact:

Visit Bulgaria PM Ltd.
Public Locker Sofia
[email protected]