Privacy and personal data

Last updated: 27.10.2026

“Na Bania” shows information about the public mineral baths in Bulgaria. You can use the site without giving us any personal data. This page explains what happens when you write a review, and what the statistics and the ads collect.

Who is responsible for the data

The data controller is the owner of the site nabania.com.

When you write a review

• Name — published next to the review. It can be just a first name or a nickname.
• E-mail — not published and not given to anyone. We use it to write to you about your review (received, published, rejected, deleted) and so that nobody rates the same bath more than once.
• Rating and text — published after a check, with the date the review was written.
• Internet address — we don't keep it. We keep only an irreversible fingerprint of it, to stop mass sending and abuse.

Legal basis: your consent, given with the tick box in the form, and our legitimate interest in protecting the site from abuse. We keep the review and the e-mail while the review is on the site or until you ask us to delete them.

You can delete your review yourself: open the bath's page on the device you wrote it from and press “Delete my review”. Otherwise write to us from the e-mail you used for it, or reply to any of our e-mails.

When you sign in with your e-mail (“My baths”)

If you sign in to keep your favourite baths on all your devices, we keep your e-mail, your list of favourite baths, when you signed in and whether you want e-mails. A cookie in your browser keeps you signed in (for up to a year or until you sign out). There is no password — you sign in with a one-time link sent to your e-mail.

Unless you have switched them off, we write to you at most once a day about what changed at your favourite baths (opening hours, prices, status, a new review). Every e-mail has a link to stop them. From “My baths” you can sign out of all devices and delete your profile together with the list.

If you turn on notifications on your device, your browser gives us an address to send them to (through the browser's notification service — Google, Mozilla or Apple) and a key we encrypt them with, so only your device can read them. Besides the changes at your favourite baths, we occasionally send short news about the site (for example new baths or features). We keep the address and the key with your profile and delete them when you turn notifications off, sign out on that device or delete your profile. You can also stop notifications in your browser's settings.

Legal basis: your consent, given when you ask for a sign-in link. We keep the data until you delete your profile.

When you upload a photo

We keep the photo, the name you wrote (shown next to it) and — if you give it — your e-mail, to let you know when it is published. Before saving it, the site redraws the photo: this removes the hidden data the phone stores in it (the place where it was taken, the phone model, the time). Everyone can see the photo once we have checked it. If you want it removed, write to us.

Legal basis: your consent, given with the tick box in the form.

When you report a mistake

We keep what is wrong, your explanation and — if you write it — your e-mail, so we can ask you something. Only we see the report and the e-mail; we delete them when they are no longer needed.

What stays only on your device

The site remembers in your browser (localStorage) the place or province you chose, your favourite baths, the key that lets you delete your own review, and whether the map legend is folded. This data is not sent to us — except your favourite baths, if you sign in with your e-mail. Your location is used only when you press “My location” — to sort the baths by distance in the browser itself; we don't store it on the server.

Statistics

To know which pages are used, we count visits with Matomo, installed on our own server. The data is not passed to third parties and is not used for advertising. Matomo may store a cookie in your browser to tell repeat visits apart.

Ads

The site shows ads from Google AdSense. Google and its partners may use cookies to show ads based on your earlier visits to this and other sites. On your first visit we ask for your consent; visitors who don't agree see ads that are not personalised. How Google uses the data: policies.google.com/technologies/partner-sites. Ad settings: adssettings.google.com.

Other services the site loads

The maps come from OpenStreetMap, the font from Google Fonts, the map library from cdnjs (Cloudflare). As with any site, these services see your browser's internet address when they load their files. The photos of the baths are from the Bulgarian Association for Thermal Heritage and are loaded from our own server.

Your rights

You have the right to ask for access to your data, correction or deletion, to withdraw your consent at any time and to object to the processing. If you think your rights have been violated, you can complain to the Bulgarian Commission for Personal Data Protection.