Privacy Policy

This policy explains what personal data we collect through bilkarium.bg, why we collect it and what rights you have over it.

The Bulgarian version of this policy is the legally authoritative one. This translation is provided for convenience.

Who processes your data

The data controller is Pro Level Solutions Ltd., UIC 208616747, registered office and address of management: Sofia 1784, Mladost district, Mladost 1, Block 79V, Ent. A, floor 6, apt. 11.

For any question about this policy or about exercising your rights, write to [email protected].

What we collect and on what basis

Messages sent through the contact form

When you write to us through the form, we receive what you filled in yourself:

• name
• email address
• phone - optional, the field is not required
• the text of your message

Legal basis: Art. 6(1)(b) GDPR - steps taken at your request before entering into a contract, where the enquiry concerns a booking or an event; Art. 6(1)(f) - our legitimate interest in answering questions put to us, for everything else.

Retention: 12 months from the last correspondence on the matter, after which the message is deleted.

Visit statistics

We use Google Analytics 4 and PostHog to understand which pages are read and where visitors come from. It collects pages visited, approximate location down to city level, device and browser type, and the source of the visit. We do not collect your name, email or anything else that identifies you personally.

Legal basis: Art. 6(1)(f) GDPR - our legitimate interest in knowing how the site is used. You may object at any time (Art. 21 GDPR) on the Cookies page; opting out stops the trackers and deletes the cookies already set.

Retention: 14 months in Google Analytics.

Advertising on social networks

The Meta Pixel shows us how many people reached the site from Facebook or Instagram and which page they opened. This lets us show our events to people with similar interests. The fact that you submitted a form is also recorded, together with the kind of enquiry, as is a click on the phone number, the e-mail or a ticket link. We receive no names and we do not link this data to the content of the messages you send us through the form.

Basis: Art. 6(1)(f) GDPR - our legitimate interest in showing our events to a fitting audience. Google's advertising signals (ad_storage, ad_user_data, ad_personalization) are granted as well. You may object at any time from the cookies page; opting out stops all three.

Retention: up to 3 months in the cookies on your device; the periods inside Meta's own systems are described in its policy.

Who we share data with

Your data reaches only the providers without which the site would not run, and only to do the job we have assigned them:

• Supabase - database and file storage, where contact form messages are kept.
• Our server provider - hosting of the site.
• Google Ireland Limited / Google LLC - Google Analytics, only where consent has been given.
• Google Ireland Limited / Google LLC - the map embedded on the contacts page, which loads on every visit.
• Meta Platforms Ireland Limited - advertising counter for Facebook and Instagram, only if you have given consent.

We do not sell personal data and do not pass it to third parties for their own purposes.

Transfers outside the European Union

Google Analytics and the Meta Pixel may process data outside the EU, including in the USA. The transfer relies on standard contractual clauses and on the EU–US Data Privacy Framework, under which both companies are certified.

Your rights

The Regulation gives you the following rights over your personal data:

• Access - to learn whether we process your data and to receive a copy.
• Rectification - to have inaccurate data corrected.
• Erasure - to have it deleted where there is no longer a basis to keep it.
• Restriction - to have processing paused while a dispute is resolved.
• Portability - to receive it in a machine-readable format.
• Objection - to processing based on legitimate interest.
• Withdrawal of consent - at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these, write to [email protected]. We reply within one month.

Right to lodge a complaint

If you believe we process your data unlawfully, you may lodge a complaint with the supervisory authority: Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., tel. +359 2 915 3519, [email protected], www.cpdp.bg.

Is providing data mandatory

No. There is no statutory or contractual obligation to send us data. Without an email or phone number, however, we cannot answer your enquiry.

Automated decision-making

We do not make automated decisions and do not carry out profiling that produces legal effects for you.

Changes to this policy

If the policy changes, we publish the new version on this page. Last updated: 24 September 2026