Privacy Policy

The controller is Сдружение „Туристическо дружество „Крепостта-Могилица““, Bulgarian registration number (EIK) 177144780, registered office: Mogilitsa, ul. Ilinden 21, Bulgaria. For questions about your data or to exercise your rights, contact +359 87 858 84 92 or [email protected].

The form requires your name, email address and message. You may also provide group size, approximate dates and the route or programme you are interested in. The details are sent to the society's office mailbox. The form does not create a customer account or accept online payments. Providing this information is your choice; the form cannot send an enquiry without the required fields. You can contact us by telephone instead.

We use the information to answer your enquiry. For enquiries about a specific service, processing is for steps requested by you before entering into a contract. For general correspondence, the basis is our legitimate interest in answering questions addressed to the society.

Do not send diagnoses, medical documents or other sensitive information through this form. Contact the organiser beforehand if participation requirements need to be discussed.

When pages load or requests are sent, the infrastructure receives technical information including the IP address, requested page and browser information. We use this to operate and protect the website, based on our legitimate interest in providing an available and secure service. The form uses a temporary identifier derived from the IP address to limit excessive submissions. Messages are delivered by email; the website does not keep its own database of enquiry copies.

If you follow a link to Facebook, Instagram or another external website, its own privacy rules apply to your use of that service.

We use website hosting, security and email providers to operate and protect the website and to receive and send emails. They process the technical data and correspondence needed for their respective services.

Providers may process data outside the European Economic Area, including in the United States. Their published processing terms provide for international-transfer safeguards, including the European Commission’s standard contractual clauses where applicable. For information about recipients and applicable safeguards, or a copy of them, contact [email protected].

Enquiries that do not lead to an agreed service are kept for up to 12 months after the last correspondence. Messages are then deleted unless a specific part is needed to meet a legal obligation or deal with a dispute.

Correspondence about an agreed service is kept until that service is completed. If part of it is needed for an accounting obligation or dispute, that part is retained for the applicable statutory period or until the dispute and periods for defending legal claims have ended.

Temporary submission-limit identifiers are active for 10 minutes and removed at a subsequent check or when the application restarts. Provider technical records are retained according to the relevant service for delivery, troubleshooting and investigating abuse. You can request information about records connected with your enquiry at [email protected].

Subject to the conditions in applicable law, you may request access, correction, deletion or restriction of processing. You may object to processing based on legitimate interests and request portability where the legal conditions apply. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

To exercise your rights, contact [email protected]. You may also complain to Bulgaria’s Commission for Personal Data Protection through cpdp.bg. The website does not make automated decisions with legal or similarly significant effects on you.

We ask for separate, voluntary consent before publishing promotional photographs in which participants can be recognised. The request identifies the specific use: website, Facebook or Instagram. Refusing does not affect participation. For photographs of children, we contact a parent or legal guardian.

You can withdraw consent and request removal of a photograph at [email protected]. A published photograph is used for the stated purpose until consent is withdrawn or that purpose ends. Withdrawal does not affect the lawfulness of earlier use.