Privacy Policy

1. Data Controller Information

The data controller is Homebox Europe, UIC 208692876, registered in the Republic of Bulgaria (hereinafter referred to as "the Company", "we" or "us").

Contact: [email protected]

2. What Personal Data We Collect

When using our website and mobile application, we may collect the following categories of personal data:

• Identification data: name, surname, phone number, email address
• Contact data: address, city, contact phone
• Request data: information about requested services, work description, property preferences
• Technical data: IP address, browser type, operating system, cookie data
• Registration data: username, password (encrypted), request history

3. Purposes of Data Processing

Your personal data is processed for the following purposes:

• Providing property search and listing services
• Processing requests for craftsmen and home services
• Communication with users regarding their inquiries
• Improving website and application functionality
• Sending marketing communications (only with explicit consent)
• Compliance with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal grounds under Regulation (EU) 2016/679 (GDPR):

• Consent (Art. 6(1)(a)): for marketing communications and cookies
• Performance of contract (Art. 6(1)(b)): for providing requested services
• Legal obligation (Art. 6(1)(c)): for compliance with applicable legislation
• Legitimate interest (Art. 6(1)(f)): for improving services and security

5. Cookies

Our website uses cookies to improve user experience. For detailed information, please see our Cookie Policy.

6. Data Retention Period

We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, or to comply with legal obligations. Request data is retained for up to 3 years after the service is completed. User account data is retained until the user deletes their account.

7. Data Sharing with Third Parties

We may share your data with:

• Craftsmen and service providers (only when you submit a request)
• Hosting and IT service providers
• Payment processors (for payment processing)
• Government authorities (when legally required)

Public visibility of craftsman data: When you register as a craftsman, your phone number, name, city, and service descriptions will be publicly visible on your profile to all platform users. By registering as a craftsman, you consent to the public display of this data.

We do not sell or rent your personal data to third parties for marketing purposes.

8. Your Rights

Under GDPR, you have the following rights:

• Right of access: to obtain information about what data we process about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data ("right to be forgotten")
• Right to restriction: to restrict the processing of your data
• Right to data portability: to receive your data in a structured format
• Right to object: to object to the processing of your data
• Right to withdraw consent: to withdraw given consent at any time

To exercise your rights, please contact us at: [email protected]

9. Account Deletion

You can delete your HomeBox account at any time by following these steps:

1. Open the HomeBox app and log in to your account
2. Go to Settings
3. Tap Delete Account
4. Enter your password to confirm
5. Your account and all associated data will be permanently deleted

When you delete your account, the following data is permanently removed: your profile information (name, email, phone, address), property listings, service requests, saved properties, messages, portfolio images, and certificates. Request data that has been shared with other users (e.g., service requests sent to craftsmen) may be retained in anonymized form for up to 3 years. You can also request account deletion by contacting us at: [email protected]

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We use SSL encryption, secure servers, and restricted data access.

11. Right to Complaint

If you believe that the processing of your personal data violates applicable legislation, you have the right to file a complaint with the Commission for Personal Data Protection (CPDP):

Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. In case of significant changes, we will notify users through the website or by email. We recommend periodically reviewing this page.