Privacy Policy
Last updated: 8/21/2026
This Privacy Policy explains how CityGuide.bg collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and Bulgarian data protection laws.
The data controller responsible for your personal data is:
We collect the following types of data:
- User-generated content: Photos you upload, captions, and comments
- Technical data: IP address, browser type, device information
- Usage data: Pages visited, features used, interaction patterns
- Location data: Approximate location based on IP (not precise GPS)
Under GDPR Article 6, we process your data based on:
| Legal Basis | Purpose |
|---|---|
| Consent (Art. 6(1)(a)) | Cookies, marketing communications, photo uploads |
| Legitimate Interest (Art. 6(1)(f)) | Providing our services, service improvement, security, fraud prevention |
We use the following cookies and similar technologies:
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| cookie-consent | Essential | 1 year | Stores your cookie preferences |
| language | Functional | Session | Remembers your language preference |
| mapbox-* | Third-party | Varies | Map functionality (Mapbox) |
You can manage your cookie preferences at any time by clearing your browser data or using our cookie consent banner.
As a data subject, you have the following rights:
Right of Access (Art. 15)
Request a copy of your personal data
Right to Rectification (Art. 16)
Correct inaccurate or incomplete data
Right to Erasure (Art. 17)
"Right to be forgotten" - request deletion of your data
Right to Restriction (Art. 18)
Limit how we use your data
Right to Portability (Art. 20)
Receive your data in a machine-readable format
Right to Object (Art. 21)
Object to processing based on legitimate interest
To exercise your rights, contact us at: hello@cityguide.bg
We share data with the following third-party service providers:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database, storage | supabase.com/privacy |
| Mapbox | Interactive maps | mapbox.com/privacy |
| Google Maps | Place photos and data | google.com/privacy |
Your data may be transferred outside the EU/EEA. We ensure adequate protection through:
- Supabase: AWS EU-Central-1 (Frankfurt, Germany) - data stays in EU
- Mapbox: USA - Standard Contractual Clauses (SCCs)
- Google: USA - Standard Contractual Clauses (SCCs)
Standard Contractual Clauses are approved by the European Commission to ensure adequate data protection for international transfers.
We retain your data for the following periods:
| Data Type | Retention Period |
|---|---|
| Uploaded photos | Until deleted by user |
| Cookie preferences | 1 year |
| Language preferences | Session |
| Server logs | 90 days |
The information provided on CityGuide.bg is for general informational purposes only. We make no warranties about the accuracy, completeness, or reliability of any content displayed on this website.
We reserve the right to modify this Privacy Policy at any time without prior notice. Changes become effective immediately upon posting. Continued use of the website after changes constitutes acceptance of the updated policy.
We recommend reviewing this policy periodically to stay informed about how we protect your information.
For any questions about this Privacy Policy or our data practices:
Email: hello@cityguide.bg