Cookies Policy

This Cookies Policy explains how Hot Pilot OOD (HotPilot Ltd), UIC 208812339, registered office at 64 Lev Tolstoy, ent. V, fl. 3, ap. 44, Sofia, Bulgaria ("we", "us", "our") uses cookies and similar technologies on hotpilot.ai and on the booking and management interfaces of the HotPilot platform (the "Site"). Read it together with our Privacy Policy.

Data protection officer: Hristo Aleksandrov · [email protected] · +359 894 622 720. For any request about your data, write to [email protected].

1. What cookies are

A cookie is a small text file placed on your device when you visit a website. It lets the site recognise your device, remember preferences and measure usage. We also use related technologies — pixels, local storage, session storage and similar identifiers. This Policy calls all of them "cookies".

2. Cookies we set ourselves

These are first-party cookies, set by hotpilot.ai and by the hotel websites running on the platform.

3. Cookies set by others

These are set only after you accept marketing cookies. Each provider is an independent controller for its own processing — their own policies apply in addition to this one.

Not every provider is active on every site. A hotel using the platform chooses which of these it enables, and the banner on that site reflects its own selection.

4. Legal basis

Storing a cookie on your device, or reading one from it, is governed by the ePrivacy Directive as transposed into Bulgarian law, and the data that follows is governed by the GDPR.

• The cookies in section 2 marked "not required" are exempt from consent, because they are strictly necessary to deliver the service you asked for. Without them you cannot sign in, complete a booking, or have the site remember that you already answered the banner.
• Everything else — analytics and marketing — is set only after you consent, and nothing in those categories loads before you choose.

5. Your choice, and how we record it

You can change or withdraw your choice at any time through the "Cookie preferences" link in the footer. Withdrawing is as easy as giving — the same panel, the same two clicks — and it takes effect immediately for everything that has not already happened.

When you make a choice we keep a record of it: the time, which categories you accepted, the version of this Policy you were shown, and the text of the banner as it appeared to you. This is how we are able to demonstrate that consent was given, which Article 7(1) GDPR requires of us. A withdrawal is stored as a new record rather than by overwriting the old one, so the history stays honest. We deliberately do not store your IP address in this record — the timestamp and a pseudonymous identifier already prove the choice, and an IP address would make the record more identifying than the tracking it exists to justify.

You can also delete or block cookies in your browser settings, though doing so may break parts of the Site. Some advertising providers offer their own opt-outs, for example at youronlinechoices.eu.

6. How long we keep the data

The lifetimes above are how long each cookie stays on your device. The data collected through analytics cookies is kept for 13 months and then deleted. Consent records are kept for as long as we may need to demonstrate the choice, and are covered by our retention schedule like every other record.

7. Changes

We update this Policy whenever we add, remove or change a cookie. The "Last updated" date at the top reflects the current version, and the version you consented to is stored with your consent record.

8. Contact

Questions about cookies or about your data: [email protected].

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection — 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592 · [email protected] · cpdp.bg. You do not have to contact us first.