Privacy & Personal Data Policy

This is a convenience translation. The Bulgarian version is authoritative.

At Bankata 1925, protecting the privacy of the personal data you provide is a top priority. This policy explains, as transparently as possible, how we use your data, what categories of personal information we collect, for what purposes, and with whom we share it when you use our services or visit our website.

1. Who is the controller of your personal data?

• Trade name: Bankata 1925
• Legal entity: „АВ Фотография“ EOOD, UIC: 204848463
• E-mail: bankata1925@gmail.com
• Phone: +359 876 97 55 44

2. What categories of personal data do we collect?

2.1. Identification & contact data

• name;
• email address;
• phone number;
• billing address (if needed).

2.2. Corporate identity data (for corporate clients)

• company/organisation;
• position;
• UIC and invoicing details (when an accounting document is required).

2.3. Event/request data

• event type, date, time, guest count, equipment and layout requirements;
• catering/bar preferences (if requested);
• correspondence and communication history (emails, messages).

2.4. Technical data when visiting the website

• IP address;
• browser and device data (standard server logs for security and stability).

3. How and where do we collect your data?

• you provide it directly — via the contact form, email, phone, social media, a meeting/viewing;
• collected automatically — standard server logs on visit (no tracking cookies);
• generated during the service — correspondence, contractual relations, invoicing.

4. Purposes and legal grounds

4.1. Inquiries, quotes, viewings and communication

Purpose: answering an inquiry, preparing a quote, scheduling a viewing, clarifying details.
Ground: steps at the data subject's request prior to a contract and/or legitimate interest.

4.2. Contract and service delivery (organising an event)

Purpose: preparing and running an event, coordination, logistics, catering/bar, technical setup.
Ground: performance of a contract or pre-contract steps at the client's request.

4.3. Invoicing and accounting

Purpose: issuing invoices and accounting/tax reporting.
Ground: legal obligation.

4.4. Security and protection of property (if CCTV is present)

Purpose: protecting guests, staff and property.
Ground: legitimate interest, with data minimisation and signage.

4.5. Marketing communication (only with consent or where legally permitted)

Purpose: sending news/invitations/offers.
Ground: consent or limited legitimate interest, respecting your right to object.

5. How and with whom do we share your data?

We do not sell your personal data. We share it only when necessary for the service or by law, e.g. with:

• service providers (hosting, email service, IT support);
• accounting/auditor/legal advisers — when needed;
• event subcontractors (catering, technical) — only when needed and with minimal data;
• state authorities, when legally required.

6. Transfers outside the EU/EEA

Some services we use (e.g. email, cloud) may process data on servers outside the EU/EEA. In such cases we take reasonable measures (e.g. standard contractual clauses) to ensure adequate protection.

7. Your rights

As a data subject you have the right to: access; rectification; erasure ("right to be forgotten"); restriction; portability (where applicable); objection to processing based on legitimate interest, including direct marketing; and to withdraw consent at any time.

To exercise your rights, write to bankata1925@gmail.com.

Right to complain: you may lodge a complaint with the Commission for Personal Data Protection (CPDP) — Sofia 1592, 2 "Prof. Tsvetan Lazarov" Blvd; e-mail: kzld@cpdp.bg; website: cpdp.bg.

8. Cookies

This site does not use analytics or marketing cookies and does not track your behaviour (no Google Analytics, Meta Pixel or similar). For that reason we do not show a consent banner — we set no cookies that would require one. The hosting platform may set only strictly necessary technical cookies for security and correct loading. Your preview theme/font choice is stored locally in your browser, not via cookies.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or unlawful processing.

10. Retention periods

We keep personal data for as long as necessary for the stated purposes and/or under statutory periods: inquiry and quote data — until the communication ends or you object; contracts/invoices/accounting documents — per the statutory retention periods under accounting and tax law.

11. Links to other websites

The site may contain links to external pages. We are not responsible for third-party policies — we recommend reviewing their privacy policies.

12. Changes to this policy

We may update this Policy following changes to our services or legislation. The current version is always published on this page.
Last updated: 03.02.2026.

13. How to contact us

Bankata 1925
2 Gabrovo St, Varna 9000, Bulgaria
Phone: +359 876 97 55 44
E-mail: bankata1925@gmail.com