Privacy Policy

1. Who we are (data controller)

The controller responsible for your personal data is Georgi Georgiev Vasilev, trading as EPIC Ski & Snowboard School, with registered address 19 Struma St., Samokov, Bulgaria. You can reach us at epicskisnowboard@gmail.com.

2. What data we collect and why

When you submit an enquiry, book a consultation, or otherwise contact us, we collect:

• Identification and contact data: your name, email address, and phone number.
• Enquiry details: the lesson type, group size, dates, experience level, equipment needs, and any free-text message you choose to send.
• Technical data: standard request logs (IP address, user-agent, timestamp) generated by our hosting provider for security and abuse-prevention purposes.

We use this data solely to respond to your enquiry, prepare a quote, schedule your lesson, and follow up on the service you requested. We do not use it for marketing, profiling, or automated decision-making.

3. Legal basis for processing

We rely on the following legal bases under Article 6(1) of the GDPR:

• Article 6(1)(b) — taking steps at your request prior to entering a contract: processing your enquiry, preparing a quote, and arranging your lesson.
• Article 6(1)(f) — legitimate interests: securing our website, preventing fraudulent or abusive submissions, and keeping basic records of past correspondence.
• Article 6(1)(c) — legal obligation: where Bulgarian tax or accounting law requires us to keep records of completed transactions.
• Article 6(1)(a) — consent: for setting advertising and analytics cookies via Google Ads. You can accept or decline cookies when you first visit the site, and change your preference at any time by clearing your browser's stored data for this site.

4. How long we keep your data

We keep your enquiry data for as long as is necessary to handle your request and for any follow-up correspondence. You may ask us to delete your data at any time and we will do so, except where we are required by law to retain it (for example, Bulgarian accounting and tax legislation requires records of completed transactions to be kept for the statutory retention period).

Server logs created by our hosting provider are retained for short operational periods set by that provider and are not used to identify you personally.

5. Who we share your data with

We do not sell your personal data and we do not share it with third parties for marketing. We do use a small number of trusted service providers (processors) who handle data on our behalf, strictly under written data-processing terms:

We may also disclose your data to competent public authorities where we are required to do so by law.

6. International transfers

Some of the providers listed above are established outside the European Economic Area, primarily in the United States. Where this is the case, transfers are protected by the European Commission's Standard Contractual Clauses (Decision 2021/914) together with supplementary technical and organisational measures, in line with Chapter V of the GDPR. A copy of these safeguards is available on request.

7. Cookies and similar technologies

This website uses a small number of cookies to measure how well our advertising works and to improve your experience:

• Google Ads: when you accept cookies via the banner shown on your first visit, Google sets cookies to measure ad performance, build remarketing audiences, and attribute conversions. These cookies are only placed after you give consent.
• Google Maps: the interactive map on the Contact page may set its own cookies when it loads. The map only loads when it scrolls into view; if you do not visit that page, no Google Maps cookies are set.

If you decline cookies, the Google Ads tag still loads — this is needed for basic, cookieless measurement — but no personal data is stored on your device. You can withdraw consent at any time by clearing your browser's stored data for this site.

8. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access (Article 15) — to obtain a copy of the data we hold about you.
• Right to rectification (Article 16) — to correct inaccurate or incomplete data.
• Right to erasure (Article 17) — to have your data deleted, subject to legal retention obligations.
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20) — to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21) — including objection to processing based on legitimate interests.
• Right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email us at epicskisnowboard@gmail.com. We will respond within one month, as required by Article 12(3) of the GDPR. We do not charge a fee for exercising your rights, unless a request is manifestly unfounded or excessive.

9. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Bulgarian supervisory authority:

You may also lodge a complaint with the supervisory authority of the EU/EEA Member State where you live or work.

10. Is providing your data required?

Providing the data requested in our enquiry and consultation forms is not a statutory or contractual requirement, but it is necessary for us to answer your enquiry and arrange a lesson. If you do not provide it, we will not be able to contact you back.

11. Automated decisions and profiling

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on you within the meaning of Article 22 of the GDPR.

12. Changes to this policy

We may update this notice from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated where appropriate.

13. Contact

For any question about this policy or how we handle your data, email epicskisnowboard@gmail.com or use the contact form.