Privacy Policy

1. Data controller

• GG AUDIO EOOD („ГГ АУДИО“ ЕООД), UIC 208225620
• Correspondence address: 15 Lyubata St., Lozenets, Sofia, Bulgaria
• Email: [email protected] · Phone: +359 888 069 448

2. What data we collect

• Contact data — name, email, phone, and the message you send via the form, email, phone or Viber.
• Enrollment data — chosen course or service, schedule, level and goals.
• Billing data — data required for invoices and payments (we do not store card details).
• Technical data — IP address and data from strictly necessary cookies, used for security and to keep the site working.

3. Purposes and legal bases

• Answering inquiries and free consultations — steps prior to entering a contract / legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Delivering courses, sessions and mentorship — performance of a contract (Art. 6(1)(b)).
• Accounting and tax obligations — legal obligation (Art. 6(1)(c)).
• Website security and protection against abuse — legitimate interest (Art. 6(1)(f)).
• Publishing photos, video, reviews or student work — only with your separate consent (Art. 6(1)(a)).

4. Photos and student work

We publish photos, video, testimonials or projects of students only with separate written consent. You can withdraw it at any time for future publications.

5. Retention

• Inquiries that did not lead to enrollment — up to 12 months.
• Contract data — for the duration of the training and up to 5 years after it ends (limitation periods).
• Accounting documents — for the periods required by the Bulgarian Accountancy Act.
• Consent-based data — until consent is withdrawn.

6. Recipients

We do not sell personal data. Data may be processed by our hosting provider, Cloudflare (security and performance), our accountant, banks and payment providers — only to the extent necessary. Where data is transferred outside the EEA, this is done under the EU–US Data Privacy Framework or standard contractual clauses.

7. Cookies

The site uses only strictly necessary cookies:

• pll_language — remembers the selected language;
• __cf_bm — Cloudflare bot protection;
• WordPress cookies — only for logged-in administrators.

We do not use advertising or analytics cookies, so no consent banner is required.

8. External links

The site contains links to external services (Google Maps, Viber, social networks). Their own privacy policies apply.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time. Write to [email protected] — we respond within one month.

You may lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia, cpdp.bg.

10. Minors

Students under 16 enroll with the consent of a parent or guardian, who also receives the information under this policy.

11. Security

We apply appropriate technical and organisational measures — encrypted HTTPS connection, restricted access, and regular updates.

12. Changes

We may update this policy. The current version is always published on this page with its effective date.