Phone: +359 895 21 21 21info@unlimited.bg
ENБГ

Personal Data Protection Policy

Last updated: August 2026

1. General information

UNLIMITED EOOD (“UNLIMITED”, “we”, “us”) respects privacy and protects the personal data of its clients, prospective clients, owners and users of real estate, website visitors, job applicants and other individuals the company comes into contact with.

This Policy describes how we collect, use, store and protect personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
  • the Bulgarian Personal Data Protection Act;
  • other applicable Bulgarian and European legislation.

UNLIMITED EOOD is a controller of personal data within the meaning of Regulation (EU) 2016/679.

2. Controller details

UNLIMITED EOOD, UIC: 200621226

Registered seat and address of management: 263 Lyulin, entrance 11, apt. 51, Sofia, Bulgaria

Correspondence and business address: “BELLISSIMO” Business Center, 102 Bulgaria Blvd., ground floor, 1680 Sofia, Bulgaria

Phone: +359 895 21 21 21

E-mail: info@unlimited.bg

For questions and requests relating to personal data protection you can contact us at the e-mail above, marking the subject “GDPR / Personal data”.

3. What personal data we process

Depending on your relationship with UNLIMITED, we may process the following categories of personal data:

When enquiring about a property or a service

  • names;
  • telephone number;
  • e-mail address;
  • information about the property sought or offered;
  • preferences, budget and other search parameters;
  • information you voluntarily provide when communicating with us.

For brokerage and the preparation of a transaction

Where necessary for the specific transaction or required by applicable law, we may process:

  • full name;
  • address;
  • telephone and e-mail;
  • personal identification number (EGN/LNCh) or other identification data;
  • identity document data;
  • data about the property;
  • data required for the preparation and performance of contracts;
  • payment, invoicing and accounting information;
  • other data required to comply with legal obligations.

We do not collect more personal data than is necessary for the specific purpose concerned.

When applying for a job

We may process:

  • names;
  • telephone;
  • e-mail;
  • CV;
  • information about education, professional experience and qualifications;
  • other information voluntarily provided by the applicant in connection with the selection procedure.

When using the website

Depending on your settings and the consent you have given, technical data may be processed, such as:

  • IP address;
  • device type and browser;
  • operating system;
  • pages visited;
  • date and time of the visit;
  • approximate location data;
  • source of the visit;
  • interactions with the website;
  • identifiers associated with the cookies used.

Further information is set out in our Cookie Policy.

4. Purposes of processing

We process personal data for the following purposes:

  • responding to enquiries;
  • communication with existing and prospective clients;
  • providing information and property proposals;
  • arranging and carrying out viewings;
  • brokerage in the purchase, sale, letting and renting of real estate;
  • preparation, conclusion and performance of contracts;
  • communication with parties and participants in transactions;
  • management of client relationships;
  • compliance with accounting, tax and other legal obligations;
  • compliance with obligations arising from applicable legislation, including, where applicable, anti-money-laundering legislation;
  • protection of the legitimate rights and interests of UNLIMITED;
  • prevention of abuse and ensuring the security of the website and the information systems;
  • recruitment of employees;
  • analysis and improvement of the operation of the website, where the necessary legal basis or consent is in place.

5. Legal bases for processing

Depending on the specific case, we process your personal data on one or more of the following grounds:

  • Steps prior to entering into a contract and performance of a contract – where the data is necessary to provide the requested service or to perform contractual relations.
  • Legal obligation – where we are required to process or store certain data under applicable law.
  • Legitimate interest – for example to protect our rights, the security of our information systems, to prevent abuse and to improve the organisation and quality of our services, where the interests and fundamental rights of the data subject do not override them.
  • Consent – where the processing requires your prior freely given, specific, informed and unambiguous consent.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Who we may disclose personal data to

Where necessary and where a legal basis is in place, personal data may be disclosed to:

  • employees and representatives of UNLIMITED for whom access is necessary to perform their duties;
  • IT and hosting providers;
  • providers of CRM, e-mail, cloud and other software services;
  • accountants, auditors, lawyers and other professional advisers;
  • notaries, banks and other persons involved in the preparation or completion of a specific transaction, where necessary;
  • providers of analytics and other online services, where their use is permitted under applicable law and your cookie settings;
  • state, judicial, administrative and supervisory authorities, where disclosure is required by law.

Where a third party processes personal data on our behalf as a processor, we require appropriate data protection guarantees from it in accordance with applicable law.

UNLIMITED does not sell personal data.

7. Transfers outside the European Economic Area

Some of the technology providers we use may process information outside the European Economic Area.

Where such a transfer takes place, it is carried out on an applicable legal basis and with appropriate safeguards under the GDPR, including an adequacy decision or appropriate contractual mechanisms where these are required.

8. Retention periods

We store personal data only for the period necessary for the purposes for which it was collected, unless the law requires or allows a longer period.

When determining the periods we take into account:

  • the duration of the relationship with the client;
  • the nature of the service provided;
  • the applicable statutory periods;
  • accounting and tax requirements;
  • obligations under applicable legislation;
  • the need to establish, exercise or defend legal claims.

Data relating to specific transactions, contracts, accounting documents or statutory audits may be retained for a longer period where this is required by applicable law.

The personal data of job applicants is kept for the period determined by UNLIMITED, which does not exceed 6 months after the final completion of the relevant selection procedure, unless the applicant has consented to longer storage or a special law provides otherwise.

Once the need for storage falls away, personal data is deleted, destroyed or anonymised in an appropriate manner.

9. Your rights

Under the GDPR and applicable law you have the right, where the relevant legal conditions are met, to request:

  • information about the processing of your personal data;
  • access to your personal data and a copy of it;
  • rectification of inaccurate or incomplete data;
  • erasure of personal data (“right to be forgotten”);
  • restriction of processing;
  • data portability;
  • objection to processing;
  • withdrawal of consent given, at any time;
  • not to be subject to a decision based solely on automated processing, including profiling, where the conditions of the GDPR are met;
  • to lodge a complaint with the competent supervisory authority.

These rights are not absolute and may be restricted in the cases provided for by law.

10. How to exercise your rights

You can submit a request to UNLIMITED EOOD by e-mail at info@unlimited.bg, subject: “GDPR / Personal data”, or in writing to our correspondence address.

In order to protect your personal data, where there is reasonable doubt as to the identity of the applicant, we may request additional information necessary to confirm their identity.

We will respond to a valid request without undue delay and, as a rule, within one month of receiving it. In cases of factual or legal complexity and in other cases provided for by the GDPR, this period may be extended in accordance with the Regulation, of which the applicant will be informed.

11. Cookies and analytics services

The website uses cookies and similar technologies.

Cookies that are strictly necessary for the operation of the site may be used without prior consent, to the extent applicable law allows this.

Analytics, advertising and other optional technologies are activated only where the necessary legal basis is in place and, where required, after obtaining your consent through the cookie management panel.

If we use Google Analytics or other analytics services, information about them, their purposes, retention periods and the available choices is provided in detail in the Cookie Policy and in the consent management panel.

You can change your choice at any time through “Cookie settings” on the website.

12. Security of personal data

UNLIMITED applies appropriate technical and organisational measures to protect personal data against:

  • unlawful or unauthorised access;
  • loss;
  • destruction;
  • alteration;
  • unlawful disclosure;
  • other unlawful processing.

Access to personal data is limited to employees and other persons for whom it is necessary in connection with the performance of their functions.

We use appropriate measures to protect our electronic systems, communications and stored information, and we periodically review the security measures in place.

13. Automated decision-making

UNLIMITED does not take decisions producing legal effects or significantly affecting you that are based solely on automated processing of personal data, unless this is expressly stated and an applicable legal basis is in place.

14. Supervisory authority

If you consider that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Republic of Bulgaria, website: www.cpdp.bg.

You can first contact us at info@unlimited.bg so that we can try to resolve your issue.

15. Changes to this policy

UNLIMITED may update this Policy from time to time where this is necessary due to changes in legislation, in the company's activity, in the technologies used or in the way personal data is processed.

The current version will always be published on the website, with the date of the last update stated at the beginning of the document.

Personal Data Protection Policy | UNLIMITED Luxury Estates