What we process and why. Online booking: name, e-mail, phone, booking notes, chosen session, date and time — to confirm and run the session (contract, Art. 6(1)(b) GDPR). Voucher purchase: buyer's e-mail, the "from" and "to" names, language, voucher type and value, the myPOS payment reference — to issue the voucher and meet accounting obligations (Art. 6(1)(b) and (c)). Card payment: card details are entered only with the payment provider myPOS; we receive only a confirmation and a payment reference (myPOS is an independent controller for payment data). Site protection: IP address and technical request data to limit abuse (legitimate interest, Art. 6(1)(f)). Contact: e-mail, phone and message content, to answer you. We process no special categories of data and make no automated decisions with legal effect.
Recipients. Our staff and contracted providers: hosting (Hostinger International Ltd., EU servers), e-mail delivery (Hostinger SMTP), payment provider myPOS (myPOS Limited, Ireland / myPOS EAD). We do not sell or share data for marketing. No transfers outside the EU/EEA unless a provider offers GDPR-compliant safeguards.
Retention. Booking and voucher data are kept for as long as needed to provide the service and then for the period required by Bulgarian accounting and tax law (10 years for accounting records under the Bulgarian Accountancy Act). Vouchers, including voided ones, are kept for that whole period because they carry monetary value and their history is the evidence in a dispute. Technical security logs: up to 12 months.
Your rights. Access, rectification, erasure (where no legal ground for retention exists), restriction, portability and objection: info@artopolis.bg. You may complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592).
Cookies. The site uses only technically necessary cookies and browser local storage (language and display mode, staff login session). No analytics or advertising cookies are used.
Changes. The current version is published on the site. Last updated: 11 September 2026.
