Legal

Privacy Policy

Last updated: August 2026

1. Controller

2. Overview of processing

This website provides information about SMART-STOP 24/7 and enables contact via forms (inquiries from site partners, investors and B2B customers, as well as a room booking request). We process personal data only to the extent necessary to provide a functioning website and to handle your inquiries.

3. Server log data (hosting)

When you visit this website, our hosting provider Cloudflare automatically collects technical access data, including IP address, date and time of access, page accessed, browser type and referrer URL. This serves the security and stability of operations. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

4. Contact and inquiry forms

When you fill out one of our forms (site partner, investor, B2B customer or room booking), we process the following data to handle your inquiry:

• Required fields: name, email address
• Optional fields: phone number, plus context-specific fields depending on the form selected (e.g. site address, investment volume, headcount, travel dates, room type)

The data is transmitted over a secure (TLS-encrypted) connection to our server-side function (Cloudflare Pages Functions) and stored in a Cloudflare D1 database. Legal basis: Art. 6(1)(b) GDPR (handling your request or pre-contractual measures) and, where no contractual relationship is established, Art. 6(1)(f) GDPR.

5. Recipients and processors

Access to inquiry data is limited to the KOHIHOT team. As a technical service provider for hosting, delivery and database services, we use Cloudflare, Inc., with whom a data processing agreement is in place. Processing may also take place outside the EU/EEA; in this case, the EU Commission's Standard Contractual Clauses ensure an adequate level of data protection.

6. Retention period

We store inquiry and booking data only for as long as necessary to handle your request — generally no longer than 24 months after the last contact — unless longer statutory retention periods apply or you request earlier deletion.

7. Cookies and local storage

This website currently does not use cookies.

8. Fonts (Fontshare)

We use web fonts provided by Fontshare. When the page loads, a connection is established to Fontshare's servers, which may result in your IP address being transmitted to Fontshare. Legal basis: Art. 6(1)(f) GDPR (consistent and performant display of our website).

9. Disclosure to third parties

Your data is not shared with third parties for advertising purposes.

10. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict the processing of, port and object to the processing of your data. Please contact info@kohihot.com for this purpose.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. Since our company is based in Bulgaria, the competent authority is the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, www.cpdp.bg). You may also contact the data protection authority responsible for your place of residence.

12. Changes to this privacy policy

We update this privacy policy whenever the legal situation or our data processing practices change. The version currently published on this page applies.