Privacy policy

1. Who processes your data

The data controller is LUNDI, with registered office in Sofia, Bulgaria. For questions about how we process your personal data, contact us at privacy@lundi.bg.

2. What data we collect

Depending on how you interact with us, we process the following categories of data:

• Contact data: name, email, phone number, business/venue name — when you send an enquiry or register.
• Usage data: technical data such as device type, browser, IP address, and pages visited.
• Order and reservation data (when using the business service): items, time, value, used by our partner clients to serve their guests.

3. How we use data

• To respond to your enquiry or provide a specific service.
• To maintain, improve, and develop the platform.
• To ensure security and prevent abuse.
• To fulfil legal obligations, including tax and accounting requirements.
• With your explicit consent — to send news and product updates, which you can unsubscribe from at any time.

4. Legal bases

We process personal data on the basis of:

• Conclusion and performance of a contract with you or the business whose venue you are in.
• Our legitimate interests (e.g. security, performance measurement).
• Compliance with legal obligations.
• Your explicit consent, where applicable.

5. Sharing with third parties

We do not sell personal data. We share data only with providers who help us deliver the service (hosting, email, analytics, payments). These providers process data only on our instructions and under data protection agreements. Disclosure may also occur where required by law.

6. Retention period

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by law. Enquiries via the site are kept for up to 24 months unless you become a customer — in that case commercial record retention periods apply.

7. Your rights

As a data subject you have the right to:

To exercise any of these rights, email us at privacy@lundi.bg.

• Obtain confirmation and a copy of the data we process about you.
• Request correction of inaccurate or incomplete data.
• Request erasure ('right to be forgotten').
• Object to processing or request restriction.
• Withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with the Commission for Personal Data Protection (CPDP).

8. Cookies and analytics

The site uses a limited number of technical cookies necessary for its operation. If we introduce new analytics tools we will update this policy and, where required, ask for your consent through a visible notice.

9. Changes to this policy

This policy may be updated to reflect changes in the service or regulatory requirements. The current version is published on this page with the date of the last update.