Privacy policy

1. Who is responsible for your data

The controller of your personal data is “Shooting.bg” SLLC (UIC/ЕИК 207863399), registered office: 76 Vitosha Blvd, floor 6, apt. 12, Triaditsa, Sofia 1000, Bulgaria. Privacy contact: [email protected], +359 88 458 2970.

2. What we collect

• Booking data: name, email, phone, group size, chosen date and time, notes, preferred language.
• Messages: whatever you send us through the contact form.
• Payment data: transaction reference, amount and status. Your full card details are processed solely by our payment provider and never reach our servers.
• Technical data: standard server logs (IP address, browser) for security and troubleshooting.

3. Why we use it and on what legal basis

• Performing our contract (Art. 6(1)(b) GDPR): handling your booking, payment, confirmations and contacting you about your visit.
• Legal obligations (Art. 6(1)(c)): tax and accounting records, and obligations under firearms legislation where applicable.
• Legitimate interest (Art. 6(1)(f)): answering enquiries, keeping the site secure, and establishing or defending legal claims.

We do not send marketing emails unless you ask for them, we never sell your data, and we do no profiling or automated decision-making.

4. Who we share it with

Only providers needed to run the service: our payment provider, hosting provider and email delivery service, and only the minimum they need. Some providers may process data outside the EEA under GDPR safeguards (standard contractual clauses). We disclose data to authorities only where the law requires it.

5. How long we keep it

• Bookings and payment records: for the periods required by Bulgarian tax and accounting law.
• Contact form messages: up to 12 months.
• Server logs: short-term, for security purposes.

6. Your rights

You can request access, correction, deletion, restriction, portability, or object to processing. Email [email protected] and we will reply within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg).

7. Cookies

We use only strictly necessary cookies: the session cookie, CSRF protection and your language choice. No analytics, advertising or third-party tracking cookies, which is why this site has no cookie banner.

8. Security

The site runs over an encrypted connection (TLS) and access to your data is limited to the people who need it.

9. Changes

If this policy changes, the current version is published on this page with a new date.