1. Data controller
LOD Corporation, company ID 204881820, 67 Georgi Benkovski St., Pazardzhik, Bulgaria, email: info@lod.bg.
2. Data we process
Profile and contact data, booking and payment history, host property data, booking communications, technical logs and platform usage data. Searches, views and pseudonymised technical identifiers may be recorded for internal statistics. Full payment card details are not stored by the platform.
3. Purposes and legal bases
Performance of a contract/booking, legal obligations, security and abuse prevention, legitimate interest in improving the service, and consent for optional analytics/marketing technologies.
4. Recipients and communications
Data may be shared with the relevant accommodation provider, payment processor SumUp, infrastructure/technical providers and competent authorities where legally required. Messages between clients and properties are stored on the platform and may be accessible to authorised administrators for support, disputes, abuse reports or service control.
5. Retention
Data is retained no longer than necessary for the stated purposes, accounting and legal retention periods, dispute resolution and security protection.
6. Rights
Subject to the GDPR, you may request access, correction, deletion, restriction, portability, objection and withdrawal of consent. Requests: info@lod.bg.
7. Security
Technical and organisational measures are used, including TLS, restricted administrative access, prepared database queries, CSRF protection and secure sessions.