Privacy Policy
Official Personal Data Processing Policy for www.bilet.bg
This Privacy Policy describes how Bilet BG Ltd. ("we", "our", or "us") collects, uses, discloses, and safeguards your personal data in compliance with the General Data Protection Regulation (GDPR) and Bulgarian data protection law. By using www.bilet.bg, you agree to these terms.
1. Data Controller and Data Processor Roles
Bilet BG Ltd. acts as either Data Controller or Data Processor depending on the specific circumstance:
- As Data Controller: We process your data (name, phone, email, address) to fulfill ticket orders.
- As Data Processor: We process data on behalf of Event Organizers for event attendance purposes. Event Organizers serve as ultimate Data Controllers.
2. Categories of Collected Data
- Registration: Name, phone, email address, password.
- Orders: Delivery address (for courier).
- Payments: Processed by external gateways (PayPal, Stripe, EasyPay) — NOT stored by us!
- Technical: IP address, browser type, cookies.
3. Order Processing
For Cash on Delivery orders (SPEEDY), delivery data is shared with Speedy AD. For online payments, users are redirected to secure third-party payment gateways.
4, 5 & 6. Purposes, Legal Basis, and Data Sharing
Data is processed based on **Contract Performance** (ticket delivery), **Legitimate Interest** (customer service), and **Consent** (marketing newsletters).
🤝 Data Sharing: Shared only with independent couriers (SPEEDY AD) and event organizers. Aggregated non-identifiable data may be shared for statistical analysis.
7. Cookies Policy
Cookies ensure platform functionality, traffic analytics, and targeted ads (consent required). Cookie settings can be managed in your browser.
8. Data Retention
Order and marketing data is stored only as long as necessary for business purposes or until consent is withdrawn.
9. Your GDPR Rights
You hold rights to access, rectification, erasure ("right to be forgotten"), restriction, portability, and objection.
🔒 Security: Transmitted via SSL encryption with restricted authorized access.
🌐 International Transfers: Transferred outside the EU/EEA under Standard Contractual Clauses (SCC).
👶 Children's Privacy: Services are not directed at persons under 16. Data collected without parental consent will be erased immediately.
14. Contact Details & Supervisory Authority
For privacy queries:
📧 Email: [email protected] | 📞 Phone: +359 887 333 112 (Mon–Fri, 09:00–19:00)
Commission for Personal Data Protection (CPDP)
🌐 Website: www.cpdp.bg | 📞 Phone: +359 2 91 53 518