Processing of Personal Data

REGNUM EOOD

Last updated: 10.11.2026

At Pirin Vista Residences by Regnum, we are committed to protecting your personal data and respecting your privacy throughout your interactions with our residential development.


As the data controller, Regnum EOOD processes personal information in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable Personal Data Protection Act of the Republic of Bulgaria.


This notice explains how we collect, use, store, share, and safeguard personal data in connection with property enquiries, private viewings, sales consultations, potential property transactions, and interactions with our official website.



Our approach is guided by transparency, confidentiality, and the responsible handling of personal information.

1. DATA CONTROLLER

The data controller responsible for the processing of personal data through the Pirin Vista Residences by Regnum website is:


Regnum EOOD
Project: Pirin Vista Residences by Regnum
Registered Address: Sofia, zh.k. “Gradina”, Bl. 10, Fl. 4, Apt. 18, Bulgaria
Email: gdpr@regnum.bg

2. TYPES OF PERSONAL DATA WE PROCESS

Depending on your interaction with Pirin Vista Residences by Regnum, including property enquiries, private viewing requests, sales consultations, and website visits, we may process the following categories of personal data:

  • Personal Identification: Full name and, where necessary, information required for property purchase procedures.
  • Contact Information: Email address, telephone number, country of residence, and correspondence address.
  • Property Enquiry Details: Preferred villa type, property interests, purchase requirements, and information voluntarily provided during enquiries.
  • Sales & Communication Records: Correspondence, enquiries, viewing appointments, consultation requests, and communication history.
  • Transaction Information: Billing and payment-related information, where necessary for reservation agreements, property transactions, or other contractual obligations.
  • Marketing Preferences: Newsletter subscriptions, communication preferences, and marketing consent records, where applicable.
  • Website & Technical Data: IP address, browser information, cookies, and website usage data, subject to applicable privacy and cookie requirements.

We collect and process personal data only where necessary for legitimate business purposes, responding to enquiries, managing property sales processes, fulfilling contractual or legal obligations, or providing marketing communications where legally permitted.

We do not intentionally collect sensitive personal data through our website. Should such information be provided, it will only be processed where a valid legal basis exists under applicable data protection legislation.

3. PURPOSE OF PROCESSING

We process personal data only for specified, legitimate, and lawful purposes related to Pirin Vista Residences by Regnum, including:

  • Responding to property enquiries and requests for information about our residences.
  • Arranging private property viewings, sales appointments, and personalized consultations.
  • Providing property details, availability information, brochures, and tailored commercial offers.
  • Managing prospective buyer communications and property purchase procedures.
  • Preparing and administering reservation agreements, property sale documentation, and related transactions, where applicable.
  • Processing payments, issuing invoices, and fulfilling applicable legal and financial obligations.
  • Maintaining communication records and managing customer relationships.
  • Sending project updates, exclusive offers, and promotional communications where legally permitted.
  • Ensuring website security, preventing unauthorized access, and maintaining technical functionality.
  • Analyzing website performance and improving user experience, subject to applicable consent and privacy requirements.
  • Responding to requests, complaints, and legal claims.


Personal data shall be processed only to the extent necessary for the relevant purpose and in accordance with applicable data protection legislation.

4. LEGAL GROUNDS FOR PROCESSING

We process personal data only where a valid legal basis exists under Article 6 of the General Data Protection Regulation (GDPR).

Depending on the nature and purpose of the processing, the following legal grounds may apply:

  • Contractual Necessity – Article 6(1)(b): Processing necessary to take steps at your request before entering into a contract or to perform a contract with you, including property enquiries, purchase consultations, and property-related agreements where applicable.
  • Legal Obligations – Article 6(1)(c): Processing required to comply with applicable Bulgarian and European Union legislation, including accounting, taxation, and property transaction obligations.
  • Consent – Article 6(1)(a): Processing based on your freely given consent, including newsletters, promotional communications, and non-essential cookies where consent is required.
  • Legitimate Interests – Article 6(1)(f): Processing necessary for our legitimate business interests, such as maintaining website security, preventing fraud, responding to certain business enquiries, and managing customer relationships, provided that these interests are not overridden by your fundamental rights and freedoms.

Where processing is based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Where processing is based on legitimate interests, you may exercise your right to object in accordance with Article 21 of the GDPR.

We do not use personal data for purposes incompatible with those for which it was originally collected, unless otherwise permitted by applicable law.

5. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Bulgarian and European Union legislation.


Retention periods are determined according to the nature of the information, the purpose of processing, applicable legal obligations, and the need to establish, exercise, or defend legal claims.


The following principles apply:


  • Property Enquiries & Sales Communications: Personal data is retained for the period necessary to manage enquiries, conduct sales discussions, and maintain relevant communications, subject to periodic review.
  • Property Transactions & Contractual Records: Documents relating to property purchases, agreements, payments, and transactions are retained in accordance with applicable contractual, accounting, tax, and legal requirements.
  • Marketing Communications: Personal data processed on the basis of consent is retained until consent is withdrawn or the relevant processing purpose ends, unless further retention is legally justified.
  • Website & Technical Data: Technical records and website usage information are retained according to documented security and technical requirements and applicable cookie retention periods.
  • Legal Claims & Compliance: Relevant records may be retained where necessary to comply with legal obligations or establish, exercise, or defend legal claims.


Once the applicable retention period expires, personal data will be securely deleted or anonymized, unless continued retention is required or permitted by law.

6. DATA SHARING AND TRANSFERS

We do not sell personal data to third parties.


Where necessary for the purposes described in this Privacy Policy, personal data may be shared with the following categories of recipients:


  • Authorized Sales Representatives: Personnel responsible for property enquiries, consultations, private viewings, and purchase arrangements.
  • Professional Advisors: Legal advisors, notaries, accountants, and other authorized professionals involved in property transactions, where applicable.
  • Real Estate Partners: Authorized agents or intermediaries involved in a specific enquiry or transaction, where a valid legal basis exists.
  • Technology & Service Providers: Website hosting providers, CRM providers, email communication platforms, IT support services, and other processors acting under appropriate data protection arrangements.
  • Financial Institutions: Banks and payment service providers, where required for legitimate property-related transactions.
  • Public Authorities: Competent regulatory, judicial, tax, or other public authorities where disclosure is required by applicable law.


Personal data is shared only to the extent necessary for the relevant purpose and subject to appropriate confidentiality and data protection safeguards.


International Data Transfers


Where personal data is transferred outside the European Economic Area (EEA), such transfers will be carried out only where a valid transfer mechanism applies under Chapter V of the GDPR.


Depending on the destination and circumstances, this may include an adequacy decision by the European Commission or appropriate safeguards, such as the European Commission's Standard Contractual Clauses.


Information about applicable international transfers and safeguards may be requested using the contact details provided in this Privacy Policy.

7. DATA SECURITY MEASURES

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction.


Depending on the nature of the processing and associated risks, these measures may include:


  • Secure website infrastructure and encrypted data transmission.
  • Access controls and authentication procedures.
  • Restricted access to personal and property-related information.
  • Appropriate security measures for CRM and communication systems.
  • Confidentiality obligations for authorized personnel and service providers.
  • Data backup and recovery procedures.
  • Periodic security reviews and updates.
  • Procedures for identifying and responding to personal data security incidents.



Our security measures are reviewed and adjusted as appropriate, taking into account technological developments, processing activities, and applicable data protection requirements.

8. YOUR RIGHTS UNDER GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights, subject to applicable legal conditions:


  • Right of Access: Request confirmation of whether your personal data is being processed and obtain access to that data.
  • Right to Rectification: Request the correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request the deletion of your personal data where the legal conditions are met.
  • Right to Restriction: Request the restriction of certain processing activities.
  • Right to Object: Object to processing based on legitimate interests, including the right to object at any time to processing for direct marketing purposes.
  • Right to Data Portability: Receive certain personal data in a structured, commonly used, machine-readable format, and request its transfer where legally applicable.
  • Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
  • Rights Related to Automated Decision-Making: Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.


To exercise your rights or submit a privacy-related request, please contact:


gdpr@regnum.bg


We will respond to requests within the time limits established by applicable data protection legislation.


You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or another competent supervisory authority.

9. COOKIES AND WEBSITE ANALYTICS

The Pirin Vista Residences by Regnum website may use cookies and similar technologies to support website functionality, improve the browsing experience, and, where applicable, analyze website performance or support marketing activities.


Depending on the technologies implemented, cookies may fall into the following categories:


  • Strictly Necessary Cookies: Required for essential website functions, security, and the operation of requested services.
  • Functional Cookies: Used to remember selected preferences and improve website functionality.
  • Analytics Cookies: Used to understand website traffic, visitor interactions, and website performance.
  • Marketing Cookies: Used, where applicable, for advertising measurement, campaign performance, and relevant promotional communications.


Cookies and similar technologies that require consent will be activated only after the visitor has provided valid consent.


Visitors must be able to accept or reject non-essential cookies and manage or withdraw their consent through the available cookie preference controls.


Detailed information about the cookies actually used, their purposes, providers, and retention periods is provided in our separate Cookie Policy.

10. UPDATES TO THIS NOTICE

We may update this Privacy Policy periodically to reflect changes in our business activities, website functionality, data processing practices, or applicable legal requirements.


The most recent version will be made available on the official Pirin Vista Residences by Regnum website.



Where changes materially affect the processing of personal data, we will provide additional information or notification where required by applicable law.


Last Updated: [10.11.2026]

11. CONTACT US

If you have questions or concerns regarding the processing of your personal data, please contact:


Pirin Vista Residences by Regnum – Data Protection Office


Email: gdpr@regnum.bg

Phone: +359 749 84 000