Privacy Policy

Guestero ("Guestero", "we", "us") is operated by Dan Velev EOOD, a company registered in Bulgaria under UIC 206909833, with its registered address at 9/D/1 Vasil Levski St., 9300 Dobrich, Bulgaria.

This policy explains how we process personal data when you visit our website, join our waitlist, or use the Guestero service. You can contact us about privacy at any time at [email protected].

• For website visitors, waitlist members, and hosts, Guestero is the data controller.
• For guest data collected through registration forms, the host who created the form is the data controller and Guestero acts as a data processor on the host's behalf. We process this data only to provide the service to the host.

Waitlist members: your email address, the language you used on our website, and the date you signed up.

Hosts: account details such as your name, email address, and password, plus the information you enter about your properties and stays (for example, dates and number of guests).

Guests: the information required by local guest registration laws, which may include full name, date of birth, nationality, sex, identity document type and number, address, and dates of stay.

Technical data: basic information your browser sends when you visit our website, such as IP address, browser type, and pages visited, used to keep the website secure and working.

Analytics data: if you accept analytics cookies, information about how you use our website, such as pages viewed, approximate location, device, and browser, collected through Google Analytics.

• Waitlist: to tell you about our launch and early access offer, based on your consent. You can withdraw consent at any time.
• Providing the service to hosts: to create your account and let you create forms, collect guest data, and export it, based on our contract with you.
• Guest registration: to collect and store the data hosts are legally required to keep and report, on the host's instructions and based on the host's legal obligation.
• Security and improvement: to protect the website and service and fix problems, based on our legitimate interests. To protect our signup form from spam and bots, we use Cloudflare Turnstile, which checks technical signals from your browser and IP address without using tracking cookies.
• Analytics: to understand how visitors use our website and improve it, only if you accept analytics cookies (consent).

We do not sell personal data, and we do not use guest data for marketing.

We share personal data only with trusted service providers who help us run Guestero, such as hosting and email delivery providers. They may process data only on our instructions and under appropriate data protection agreements.

Guest data is available to the host who created the form. Hosts are responsible for submitting guest data to the authorities as required by law. We may also disclose data where we are legally required to do so.

We aim to store data within the European Economic Area. If data is transferred outside the EEA, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• Waitlist emails: until launch communications end or you unsubscribe.
• Host account data: for as long as your account is active, and as required by law afterwards.
• Guest data: for the period required by applicable guest registration laws or as set by the host, after which it is deleted.

We use technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, including encrypted connections and restricted access to data.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise these rights, email [email protected]. If you are a guest, you may also contact the host who sent you the registration form.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the data protection authority in your country.

Necessary: we store your cookie choice in your browser's local storage so we don't ask you again on every visit. This is required for the website to work and does not need consent.

Analytics (optional): only if you accept, we use Google Analytics, provided by Google Ireland Limited, which sets the cookies _ga and _ga_<ID> to distinguish visitors. They expire after up to 2 years. Google may process this data in the United States under the EU-U.S. Data Privacy Framework. Google Analytics is not loaded until you give consent.

You can change or withdraw your choice at any time by clicking "Cookie settings" at the bottom of any page. If you withdraw consent, we delete the analytics cookies from your browser.

We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date. For significant changes, we will notify you by email.