This policy explains how “NOV VEK Real Estate” EOOD processes the personal data of visitors and clients of the novvek.bg website in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act.
1Data controller
- Controller: “NOV VEK Real Estate” EOOD, UIC 202177784
- Registered office: Varna, Primorski district, Vilna Zona residential area, 20 28-ma St., apt. 15
- Office address: Varna, 3 Sofia St.
- Contact for personal data matters: office@novvek.bg, +359 896 162 777
2What data we collect and why
2.1. Enquiry and contact forms
When you send an enquiry (about a property, a viewing, selling your property or a general question), we collect: your name, telephone number, email address and the content of your message.
Purpose and legal basis: responding to your enquiry and taking steps at your request before a possible contract is concluded (Art. 6(1)(b) GDPR), as well as our legitimate interest in documenting communications and protecting ourselves against abuse (Art. 6(1)(f) GDPR).
2.2. Mortgage enquiry form
Through the form on the “Mortgage” page you can voluntarily provide additional information: the type and price of the property, your age and monthly income. This data is used solely so that we can assess suitable options together with you and give you feedback on your enquiry. Providing it is not mandatory. The data is not shared with third parties (including banks) without your explicit request or consent.
2.3. Subscription for new properties (newsletter)
If you subscribe, we process your email address to send you notifications about new listings. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email or at office@novvek.bg.
2.4. Technical data
When you visit the site, the server records standard log data (IP address, date and time, requested resource, browser) for security and maintenance purposes — legitimate interest (Art. 6(1)(f) GDPR). For cookies, see the Cookie policy.
3How form data is processed
Data submitted through the forms is transmitted over an encrypted connection (HTTPS) and delivered as a notification to our business email address via the technical provider that maintains the website, which acts as a processor under Art. 28 GDPR on the basis of a contract. We do not use your data for automated decision-making or profiling.
4Who we may disclose data to
- providers of technical support, hosting and communication services (processors bound by a contract and a duty of confidentiality);
- public authorities — only where legally required;
- third parties (e.g. a bank, notary, counterparty to a transaction) — only to the extent necessary to perform a service you have requested or with your explicit consent.
We do not sell or provide your personal data to third parties for their marketing purposes. Data is processed within the EU/EEA; when using Google services (see the Cookie policy), transfer to third countries is possible subject to the safeguards under Chapter V of the GDPR.
5How long we keep data
- enquiries through the forms — up to 12 months after the communication ends, unless a contract follows;
- data under concluded contracts and accounting documents — within the statutory periods (up to 10 years under the Tax and Social Security Procedure Code and the Accountancy Act);
- newsletter subscription — until consent is withdrawn;
- server logs — up to 6 months.
6Your rights
With regard to your personal data you have the right to: access; rectification; erasure (“right to be forgotten”); restriction of processing; portability; objection to processing based on legitimate interest; withdrawal of consent at any time, without affecting the lawfulness of processing before the withdrawal.
You can exercise your rights by sending a request to office@novvek.bg or in writing to our office address. We will reply within one month.
7Right to complain
If you believe your rights have been violated, you have the right to complain to the Commission for Personal Data Protection (CPDP): Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., tel. 02/91-53-518, kzld@cpdp.bg, www.cpdp.bg.
8Security
We apply appropriate technical and organisational measures to protect data: an encrypted connection (HTTPS/TLS), restricted access on a need-to-know basis, protection of business mailboxes and regular backups.
9Updates
This policy may be updated, and the current version is published on this page.
Last updated: 06.08.2026