Merchant Details
The website is operated by KALPACITE EOOD, UIC 204422620, VAT number BG204422620, registered address: Bulgaria, Gotse Delchev 2900, 1 Hristo Silyanov St., entrance A. Manager: Vasil Dimitrov Orakov.
Legal information
Cookie Policy
Last updated: 08/10/2026What Cookies Are
Cookies are small files, while localStorage, sessionStorage, pixels, tags, iframes and similar technologies may store or read information from a device. Some online identifiers may be personal data under the GDPR. First-party technologies are created by kalpacite.com, while third-party technologies from Google, Meta and Microsoft are loaded only after the relevant consent unless strictly necessary use is allowed by law.
Necessary Technologies
Necessary technologies are required for basic website operation, security, language preferences, storing the cookie choice, admin sessions and the booking process. They include `kalpacite-cookie-consent` in localStorage, sessionStorage for current booking steps, technical admin-session cookies and server-side records needed for security and request handling. They cannot be disabled from our banner because the website or protected areas may not work correctly without them.
Analytics Technologies
Used only with analytics consent. Possible providers and names: Google Analytics 4 / Google Tag Manager (`_ga`, `_ga_*`, `_gid`, `_gat`, `gtag`, `dataLayer`, page_view, contact_click, booking events); Microsoft Clarity if configured directly or through GTM (`_clck`, `_clsk`, `CLID`, session recordings and heatmaps with masking enabled); first-party booking analytics (`kalpacite_booking_analytics_session_id`, `kalpacite_booking_analytics_visitor_id`, endpoint `/external/booking-analytics.php`, UTM, referrer, device category and funnel events); social proof (`kalpacite_anonymous_visitor_id`, `kalpacite_social_session_id`); abandonment feedback (`kalpacite_feedback_visitor_id`, `kalpacite_feedback_session_id`, `kalpacite_feedback_snapshot`). Embedded Google Maps is also loaded only after analytics consent or through an external link because Google may process IP address, browser data and cookies.
Marketing Technologies
Used only with marketing consent. Possible providers and names: Meta Pixel (`fbq`, `_fbp`, `_fbc`, PageView, ViewContent, Search, AddToCart, InitiateCheckout, Lead, Purchase); Meta Conversions API through `/external/pms.php?action=track-capi`, sending event_id, value, currency, content data, IP address, user agent and Meta identifiers to Meta only with marketing_consent; Google Ads conversion tracking (`_gcl_au`, `_gcl_aw`, `_gcl_dc`, conversion events, ad_storage, ad_user_data, ad_personalization). We do not send names, phone numbers, emails, free-text notes or children's details to these providers.
Consent Storage And Control
The choice is stored in localStorage under `kalpacite-cookie-consent` with schema version, timestamp and `necessary`, `analytics` and `marketing` flags. Use the footer Cookie settings link at any time to change or withdraw consent. On rejection or withdrawal the website stops new analytics/marketing events and attempts to delete known first-party optional cookies and storage identifiers (`_ga`, `_gid`, `_gat`, `_clck`, `_clsk`, `_fbp`, `_fbc`, `_gcl*`, `kalpacite_*` tracking keys) where the browser permits. Cookies set as third-party cookies by a provider are managed through browser settings or that provider.
Booking Flow
Availability checks, room selection and booking requests continue to work when analytics and marketing are declined. Names, phone numbers, emails, child details, voucher information and notes are sent only to the booking backend for the request and not to GA4, Meta, Clarity or Google Ads.
Retention
The consent record is kept until the choice changes, browser storage is cleared or the policy version changes. SessionStorage identifiers are usually kept until the end of the browser session. First-party analytics visitor identifiers are kept until consent withdrawal, browser deletion or technical rotation. Google, Meta and Microsoft determine the retention periods for their cookies and identifiers according to their active configuration and policies.