This Privacy Policy sets out how we from NESTWORK Ltd. (hereinafter “NESTWORK”, “We”, “Us”, “Our”) handle your personal data — the bases on which we collect any personal data from you, why and how they will be processed.
NESTWORK provides for rent workplaces and offices located in shared workspaces, as well as additional services related to the use of the respective workspaces. For the provision of the said services NESTWORK enters into agreements with individuals or legal entities (hereinafter “Clients”).
Please read this Privacy Policy carefully before providing any personal information. It describes our data processing when using our website https://nestwork.bg (the “Website”), renting workplaces and/or offices in our shared workspaces and/or using any of the additional services we may provide to you. If you do not agree to abide by these terms, you shall stop using our services.
Your data is processed by: NESTWORK Ltd., UIC 206258098, having its seat and registered office in the city of Bansko, 56 “Tsar Simeon” Str. We are a data controller and as such we are responsible for the processing and storage of your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 (the General Data Protection Regulation) and the applicable Bulgarian legislation.
If you have any questions, comments and requests regarding this Privacy Policy, you are welcome to address them to: e-mail: [email protected], phone number: +359 879 90 77 77, address: Tsar Simeon 56, Bansko 2770, Bulgaria.
As a precondition for concluding an agreement with us, the Client shall have an individual profile on our Website. If the Client is a legal entity, then the Client's profile is in the name of a representative of the same entity. Upon registration, the following data is collected: two names, phone, e-mail. After you create your account, you have the option to upload a profile picture.
We also provide an option to register by logging in via Facebook or Google. In this case the respective platform shares the following personal information from your existing account: two names, e-mail.
When a Client decides to purchase any of the services, we process the data from the individual profile, as well as any billing details. The specific details will depend on the method of payment that you choose and whether you'd like us to issue an invoice to a legal entity or to an individual. Payments may be done via a virtual POS terminal, provided by Stripe Inc. We do not receive any information regarding your bank card, except for a few numbers of it (which cannot be considered personal data).
Whether you have a question about features, pricing or anything else, you may decide to contact Us. No matter the contact form you decide to use, you will need to provide us with: two names, e-mail, telephone and any other data you may decide to provide us with.
The forms on our Website are protected from automated abuse by Cloudflare Turnstile, a service of Cloudflare, Inc., which checks signals from your browser and your IP address to tell a person from a bot. Together with your message we record the IP address and browser it was sent from, to stop abuse of the forms.
If you send a travel request from our travel pages, we share the details you give us (your name, e-mail, telephone, destination, dates, number of travellers, budget, preferences and any requests) with Jetset, our travel partner, so that it can prepare a quote and, if you accept it, book your travel. The request is e-mailed to Jetset with a copy to [email protected], and we keep it in our inbox for 12 (twelve) months, as with any other form message. Any booking you then make is between you and Jetset, which processes your data for it under its own privacy notice. The city suggestions in the travel form are built into our Website; nothing you type is sent anywhere until you submit the form.
We perform direct marketing by sending advertising messages by email only if we have collected your express consent to use your e-mail for such a purpose. You have the right to withdraw your consent at any time by clicking on the unsubscribe link available in each advertising email that you receive from Us.
In order to protect the health and life of Our employees, guests and clients, as well as Our property and the property of our Clients, the territory of our shared workspaces is permanently under video surveillance. Video surveillance data is stored for a period of 60 days under strict security measures. Further information regarding the Video surveillance is available right next to the entrance of the monitored premises.
In order to make our Website and our services available to you, or to meet a legal obligation, we need to collect and use your personal information. We may use your information for the following purposes:
Processing of personal data by NESTWORK for purposes related to the compliance with legal obligations include:
We process personal data for purposes related to the performance of agreements or taking steps at your request prior to entering into an agreement, including:
Processing of personal data for purposes related to the realization of the legitimate interests of NESTWORK or of third parties include:
Processing of personal data for purposes justified by your consent include:
We may disclose your personal data:
We process your data for the purposes of creating your individual profile until you request a deletion of your account.
We will further retain your data, including correspondence, collected for the conclusion of an agreement and the provision of our services, for a period of 5 (five) years from the date of providing the said service / termination of the agreement / deletion of your account.
Financial and accounting documents shall be retained for the minimum time required by the relevant legislation.
Messages sent through the forms on our Website are deleted 12 (twelve) months after we receive them, unless they lead to an agreement, in which case the paragraph above applies.
Data generated from the video surveillance shall be kept for 60 days.
Any data processed on the basis of your explicit consent shall be processed until you withdraw the latter.
The data mentioned in this Privacy Policy may be processed for a longer period of time, if this is necessary to achieve the purposes, for which they've been provided, or to protect any rights or legal interests of NESTWORK, or if the current legislation provides for the processing of the data for a longer period.
You have the following rights, whose exercise we will facilitate at any time:
You have the right to receive information at the time we collect your personal data regarding the data we collect, who will process it, for what purposes and for what reasons.
You may request access to your personal data that we store. You also have the right to request a free copy of your personal data that are being processed.
You have the right to request that we amend or update any inaccurate or out-of-date personal data.
You have the right to obtain the erasure of your personal data where they are no longer necessary in relation to the purposes of the processing or where there is no legal ground for the processing.
In certain cases, you have the right to request that we temporarily or permanently stop processing all or some of your personal data.
You have the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller provided that this is possible and feasible.
You have the right to make a reasoned objection to the processing of your personal data, when we use them on the basis of legitimate interest. Thus, we will be required not to use them in the future.
When we process your personal data on the basis of consent, you can withdraw it at any time. Thus, we will be required not to use them in the future.
You have the right to seek protection of your rights by the Commission for Personal Data Protection (CPDP). CPDP is an independent state body that oversees the lawfulness of personal data processing activities. You can file complaints to CPDP in person or by letter at: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592; by fax — 029153525; electronically to the CPDP's e-mail address — [email protected]. More information about the procedure could be found at the following internet address: https://www.cpdp.bg/.
You can exercise any of the listed rights by submitting a written application to our address, stated at the beginning of this document. The application should contain: name and address, personal identification number, description of the request, preferred form for receiving information, signature, date of submission of the application and address for correspondence. If the application is submitted by an authorized person, an explicit proxy should also be attached.
An application may also be submitted electronically. It has to be signed with a qualified electronic signature.
When describing your request, please include sufficient details that will allow us to properly understand the request and respond to it.
We have adopted appropriate technical and organizational measures to protect your personal data against any accidental or unlawful destruction, loss, alteration or unauthorized disclosure/access. Our measures, inter alia, ensure compliance with all principles in relation to the processing of personal data: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, accountability.
We reserve the right to change this Policy at any time by updating, supplementing and amending it. When changes are made, we will revise the updated date at the bottom of this page.
For details on the cookies our Website places on your device, see our Cookie Policy.
Last updated on 25.09.2026
