Privacy Policy

This Privacy Policy (“Policy(s)”) informs you how we process your personal data, what your rights are and how the law protects you. In the event of legislative changes at a national or European level, including to the General Data Protection Regulation (the “Regulation”), we may make changes to this Policy, and we will notify you in a timely manner by posting the changes on this section of our website, and we may need to ask you to accept the changes or consent to our use of your personal data.

If you have any concerns or questions about this Policy or our data practices, you may contact us at the contact details provided below.  If there are any terms in this Policy with which you do not agree, please discontinue visiting and using the Site and Services.

Your personal information

The  Policy explains how we collect and process your personal data when you visit and use the bsnomady.com website (the “Site”) and any services presented on and/or provided on/through/ in connection with it, including marketing, information campaigns, promotions and other events (collectively, the “Service(s)”). Personal Data means any information or set of information that identifies or could be used to identify you (together with other information). This includes information you share with us, what we learn from you, and the choices you make about the marketing messages you want us to send to you.

Who processes your personal data?

The processing of personal data on the Site is carried out by its operator:

“BS COMPANY” LTD, UIC: 131061792
Registered office and address. Sofia, p.k. 1326, Vrabnitsa district, Obelya 2, bl. 277.
Phone: +359886013351
Email: info@bsnomady.com
(“we”, “us”, “our”, “us”)

We operate the Site and are therefore the personal data controller for the purposes of this Policy and applicable law.

How do we collect your personal data?

We only collect personal data that you have voluntarily provided to us depending on the purpose for which we are processing it:
​

  • Internet Protocol (IP) address required to establish a connection between your device and the Internet;
  • Information you give us when you submit a request to use our Services through the Site;
  • Cookies and tracking technologies – through Google Analytics, Google Ads and Facebook Pixel, we collect data on user behaviour to analyse and improve marketing campaigns.
  • Data you share with us when you make a booking to use our Services through other tools and platforms we provide you access to in connection with providing the Services;
  • Data you share with us when you talk to us on the phone;
  • Data you send us in emails or letters to us;
  • Data you send to us in the form of feedback.

Categories of data we collect about you:

We may collect, use, store and transfer different types of personal data about you, which we have grouped as follows:

  • Identity details – names and SSN (for billing purposes);
  • Contact details – billing address, email address or phone numbers;
  • Financial data – bank account and payment card details;
  • Transaction Data – details of payments made by you and other details of the Services you have received from us;
  • Marketing and communication data – names and email according to your settings to receive marketing and other communications from us.

For what purpose do we process your personal data?

Your personal data is protected by law.
​
We are only allowed to process your personal data for legitimate purposes. The purposes set out in this Policy are:

  • To process requests for and provide Services;
  • For answering queries;
  • To keep statistics on the Site’s traffic and usability;
  • To ensure the smooth and error-free operation of the Site;
  • To improve the user experience of using the Site and Services;
  • To provide assistance in using the Site/Services;
  • To perform our administrative duties.
  • To analyze traffic and user behavior through Google Analytics.
  • For personalized advertising through Google Ads and Facebook.

On what basis do we process your personal data?

Depending on the purposes for which we process your personal data, we have different legal grounds for processing and we only process your personal data to the extent that such a ground exists:

  1. The data we collect to process your requests and to provide the requested Services is processed on the basis of a contract entered into with you when you use the Site and Services. You can learn more about this contract from our Terms and Conditions.  
  2. If you send us enquiries via the contact form on the Site or contact us by phone or email, the details you provide in the enquiry form and other contact details you share with us when contacting us will be stored for the purposes of processing your enquiry and follow-up questions. If your enquiry relates to the performance of a contract with us or to a pre-contractual relationship, the processing of such data will be based on that contractual/pre-contractual relationship. In all other cases, the processing is based on our legitimate interest in processing enquiries to us efficiently or on your consent if necessary.
  3. The data we collect through cookies is processed on the basis of our legitimate interest in ensuring the proper functioning of the Site. If we use cookies for purposes other than providing the functionality of the Site, we will ask you to explicitly consent to our use of the relevant cookies and the processing of the information we obtain through them. In this case, you will have the right to refuse your consent to access your personal data through cookies other than the so-called “necessary cookies” as described below in this Policy, without prejudice to the conclusion and/or performance of a contract with us; however, refusal to consent to the application of certain types of cookies may result in the loss and/or unavailability of certain functionalities of the Site implemented through the relevant cookies.
  4. The data we collect and share through third-party services and tools is processed based on either our legitimate interest in making the Site more attractive to users or your explicit prior consent. The different cases are described below in this Policy.
  5. In addition, we may process and store your personal data to protect our legitimate interests in the performance of our administrative and/or contractual obligations arising from applicable laws and regulations (such as accounting, statistics, taxation, responding to requests from public authorities, etc.).

Who do we share your personal data with?

Occasionally, in order to enable access and full functionality of the Site and/or to provide the Services, we may share your personal information with outside service providers.

We require all service providers with whom we share your data to respect the security of your personal data and to treat it in accordance with the law. We do not allow any of our service providers to use your personal data for their own purposes and we only allow them to process your personal data for certain purposes and in accordance with our instructions.

External hosting

The website is hosted by Worbee EOOD, UIC: 206543923, Bankya, Bulgaria (Worbee), as an external service provider.


The personal data collected through our website is stored on Worbee’s servers. Such data may include IP addresses, metadata and communication data, contact information, website access logs, and other data generated through the Site.

Worbee is used for the purpose of fulfilling our contract with potential and existing clients and in the interest of providing our Services safely, quickly, and efficiently through a professional provider. To ensure data processing that complies with data protection requirements, we have signed a data processing agreement with Hetzner Online.

Worbee will process your data only to the extent necessary to fulfill its service obligations to us and will follow our instructions regarding such data processing.

Social media plugins

Social media and networking plugins are implemented on the Site. Such plugins can be identified by the respective logo of the social media or network.

By clicking on a button with the logo of the relevant social network, you agree to a direct connection with the server of the operator of that social network, whereby that operator receives information about your visit to our Site. If at the same time you are logged into your account on the relevant social network, its operator will be able to link your visit to our Site to your profile on the social network.

Please note that we, as the operator of the Site, do not receive information about the data provided to social media and networks and their use. Information about this can be obtained from the privacy policy of the relevant social media or network.

Transfer of personal data to third countries

Personal data you share with us may be transferred to our subcontractors based in third countries (outside the EU). Such transfers are made on the basis of the data protection safeguards provided for in the Regulation and in particular:
Standard data protection clauses. Transfers are made in accordance with Article 46 of the Regulation to recipients who have entered into a European Commission approved contract for the transfer of personal data outside the European Economic Area;
Other means. Pursuant to Articles 45 and 46 of the Regulation, personal data may also be transferred to recipients located in a country for which an adequate level of data protection has been decided by the European Commission, pursuant to an approved certification mechanism or code of conduct, together with binding enforceable commitments by the recipient to implement appropriate safeguards, including with respect to the rights of data subjects or to processors who have committed to comply with binding corporate rules.

Failure to provide personal data

Where we need to process your personal data in connection with a legal requirement or under the terms of a contract we have with you and you are unable to provide that data on request, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with a service). In this case we may not be able to provide the service you want us to provide, but we will let you know if this is the case.

Data protection

We have appropriate security measures in place to prevent accidental loss, use or unauthorised access, alteration or disclosure of your personal data. In addition, we restrict access to your personal data to those employees, external service providers and other third parties who have a legitimate right to access it. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the operator of the Site, this Site uses SSL encryption. You can recognize an encrypted connection by the fact that the browser address line changes from “http: //” to “https: //” and by the lock symbol. When SSL-encryption is enabled, the data you send us cannot be read by third parties.

We have procedures in place to deal with any suspected personal data breach and will notify you and the competent authorities of a breach where we are legally obliged to do so.

How long will we keep your personal data?

Unless a specific retention period is specified in this Privacy Policy, we will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying legal, accounting or reporting requirements.

To determine the appropriate retention period, we consider the volume, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes by other means, and applicable legal requirements.

Data collected through cookies or third party services and/or tools as described in this Policy will be retained for the period specified in the relevant section of the Policy.

If you make a legitimate request for the deletion of your data, or withdraw your consent to the processing of your personal data, your data will be deleted unless we have other legal grounds for storing your data (e.g. retention periods for commercial or tax purposes, limitation periods); in the latter case, deletion takes place after the relevant retention ground no longer applies.

Marketing

We may use your personal information to inform you about our services and upcoming offers. We may only use your personal data to send you marketing communications if we have your consent or legitimate interest to do so.

IF YOU HAVE CONSENTED TO RECEIVE SUCH MARKETING COMMUNICATIONS, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH DIRECT MARKETING. IN EXERCISING THIS RIGHT, WE WILL NO LONGER USE YOUR PERSONAL DATA FOR MARKETING PURPOSES.  

To object to the processing of your personal data for direct marketing purposes, you can follow the link provided for this purpose in the relevant marketing message or email us at

Your rights

The Regulation guarantees you a set of rights that you can exercise in relation to your personal data processed by us. Specifically, you have:

  • Right of access: you have the right to access information about the categories of personal data processed, their source, recipients of your personal data, the purposes of the processing and other information related to the processing, where applicable. Such information will generally be provided free of charge, although we may charge a reasonable administrative fee upon request for additional copies;
  • Right to rectification: you have the right to question any information we hold about you that you believe is incorrect or incomplete;
  • Right to be forgotten: under certain conditions you can ask us to delete your personal data.
  • Right to object to processing: under certain conditions you have the right to object to the use of your personal data;
  • Right to restrict processing: under certain conditions you can ask us to restrict the processing of your personal data;
  • Right of portability: you have the right, under certain conditions, to ask us to transfer your personal data processed by us to another organisation or directly to you;
  • Right of complaint: you have the right to lodge a complaint with a supervisory authority, including in the country of your habitual residence, place of work or place of the alleged infringement. The competent supervisory authority for our personal data processing activities is the Data Protection Commission, at the place of your personal data protection. Prof. Tsvetan Lazarov 2, 1592 Sofia, Bulgaria, Tel. +359 2 915 3555, Fax +359 2 915 3525, Email: kzld@cpdp.bg, Website: https://cpdp.bg

If you wish to exercise any of the rights listed, please contact us by email at info@bsnomady.com.  We will respond to such request within one month.

Privacy policies of other websites

This Site contains links to other websites, including social media and networks. This Policy applies only to our Site. If you choose to follow a link to another website, please note that our Policy does not apply to your visit to and use of other websites, even if they are accessed through a link from our Site. You should therefore read the privacy policy of the website you are accessing via a link from this Site.  
​