Privacy Policy
Last updated: 2025.
This Privacy Policy describes how Bez Poveche Vushchitsi (referred to below as “We”, “Our center”, or “the Site”) processes the personal data of clients and visitors under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
1. Data controller and contact
The controller of personal data is:
Bez Poveche Vushchitsi
Address: 40 Evlogi i Hristo Georgievi Blvd, Sofia
E-mail: info@bezpovechevushchitsi.com
Website: https://bezpovechevushchitsi.com
2. What data we collect and why
We collect and process only the data necessary for specific, clear, and lawful purposes. The sections below describe the types of processing and their legal basis.
2.1. When you make an inquiry through the contact form, phone, or email
Data collected:
– Name
– Phone
– Email
– Information about the desired center/service
– Content of the inquiry
Purpose of processing:
Processing and responding to your inquiry; forwarding it to a franchise center (if needed).
Legal basis:
Art. 6(1)(a) GDPR – consent.
Consent is given by submitting the form.
Retention period:
Up to 12 months from the last interaction, or until consent is withdrawn.
2.2. When you book an appointment or purchase a service
Data collected:
– First and last name
– Phone
– Email
– Child’s data, if the service requires it
– Information about the chosen center/service
Purpose of processing:
Managing bookings and services, communicating with you, forwarding data to the chosen franchise center if the service is carried out there.
Legal basis:
Art. 6(1)(b) GDPR – performance of a contract.
Recipients:
– The franchise center that will perform the service
– Email and SMS notification platforms
Retention period:
For the duration of the contractual relationship, plus up to 5 years for accounting purposes (under the Bulgarian Accountancy Act).
2.3. Marketing emails and newsletter
Data collected:
– Name
– Email
Purpose:
Sending promotions, service information, and news.
Legal basis:
Art. 6(1)(a) GDPR – consent.
Period:
Until consent is withdrawn, or 12 months after the last activity.
You can unsubscribe via the link at the end of every email.
2.4. Participation in giveaways, games, and promotions
Purpose:
Managing participation in games, surveys, and contests.
Legal basis:
Art. 6(1)(b) GDPR – contractual relationship (even for free participation).
Period:
Until the specific campaign ends.
2.5. Complaints, requests, and exercising your rights
Purpose:
Processing complaints and requests under GDPR.
Legal basis:
Art. 6(1)(c) GDPR – legal obligation.
Period:
Until the case is fully resolved.
3. Disclosure of data to third parties (recipients)
We share your personal data only when necessary, namely:
- Franchise centers where you wish to receive the service
- Hosting provider
- Email/SMS service providers
- Accountant (only for financial transactions on record)
- Government authorities – only when legally required (NRA, police, etc.)
We never sell, never distribute, and never share personal data with third parties without a legal basis.
4. International transfers
As a rule, we do not transfer data outside the EU.
If we use a service whose servers are located outside the EU (e.g. an email platform), the transfer is carried out only where there is:
– Standard Contractual Clauses (SCCs), or
– An adequacy decision
in accordance with GDPR.
5. Data subject rights
Every user has the right to exercise the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with:
Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd, Sofia
Web: www.cpdp.bg
6. Minors
The site’s services are not intended for persons under 18 without permission from a parent or guardian.
Parents are responsible for any data submitted by minors.
7. Data security
We use technical and organizational measures to protect against:
- unauthorized access
- data loss
- unlawful disclosure
However, transmitting data online is never 100% secure – so information is sent at your own risk. We nonetheless apply high security standards.
8. Updates to this policy
This policy may be updated periodically.
The current version is always available on the site.
For material changes, we will notify users by email or a notice on the site.