Privacy notice

What this notice covers

This notice explains how personal data is processed when you visit the SLS Hospitality website at slshospitality.com (including www.slshospitality.com).

SLS Hospitality Academy at academy.slshospitality.com is a separate application with sign-in for hotel administrators, employees and the SLS team, and it has its own privacy notice:

The Academy's privacy notice

What the website does not do

The website has no forms, registration or sign-in and does not collect data that you enter. It sets no cookies, uses no analytics, advertising or tracking tools, and loads no content, fonts or scripts from other websites. The language you choose is part of the page address (/en) and is not stored.

What data is processed when you visit

Each time a page loads, your browser sends technical data without which the page cannot be delivered: your IP address, the address of the requested page, date and time, information about the browser and device and, if your browser sends it, the address of the page you came from.

The website is delivered by Cloudflare, which uses this data to transmit the page over an encrypted connection (HTTPS) and to protect the website against attacks and abuse. Cloudflare keeps short-lived technical request logs. SLS has not enabled request logs (Workers Logs) for this website, and the website itself stores no data about its visitors.

Purpose and legal basis

Delivering the website and protecting it against unauthorised access and abuse: the legitimate interest of SLS in a secure and available website (Article 6(1)(f) of the General Data Protection Regulation, GDPR).

Contacting us by e-mail or telephone

The enquiry buttons open your own e-mail application with a prepared message to office@slsconsulting.eu; the telephone number starts a call from your device. Nothing is sent through the website. If you write to us or call, SLS is the controller of the data in your enquiry and uses it to reply to you.

Processor and transfers outside the EU

Cloudflare, Inc. (USA): hosting and delivery of the website (Cloudflare Workers) and the technical logs — under Cloudflare's Data Processing Addendum. The website runs on Cloudflare's global network, usually in a data centre close to the visitor, so requests may also be processed outside the EU. Transfers are safeguarded by the EU Standard Contractual Clauses (European Commission Decision 2021/914) included in Cloudflare's data processing addendum and by the EU-U.S. Data Privacy Framework.

Data is disclosed to public authorities only where the law requires it. We do not sell personal data or share it with third parties for marketing.

Cookies

This website sets no cookies, so it shows no consent banner. The Academy's cookies are described in its own notice.

Links to other websites

The website links to slsconsulting.eu, to the SLS Consulting page on Facebook and to the Academy. When you follow them, the privacy information of that website applies.

Your rights

You have the right of access to your personal data, to rectification, to erasure where the conditions for it are met, to restriction of processing and to object to processing based on legitimate interests.

Requests to SLS should be sent to office@slsconsulting.eu. We respond within one month of receipt; for complex or numerous requests this period may be extended by two further months, in which case we inform you of the extension and the reasons within the first month. We may ask for information to confirm your identity. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia; kzld@cpdp.bg; www.cpdp.bg, or with the supervisory authority in the EU member state where you live or work.

Changes

We may update this notice when the website, its providers or the law change. The date from which the current version applies is shown below.