Privacy Policy

In accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we have developed our data protection policy in a transparent, understandable, and easily accessible format.
SP SAILING Ltd., as a merchant, guarantees the confidentiality of the personal data provided by its clients. When you share your personal data with us, we process it in accordance with this policy, and it will not be used, shared, or disclosed to third parties.
Please read this information carefully. If you have any questions, please contact us using the details below. Please note that we may require proof of your identity in order to process your specific request.

I. We are:
SP SAILING Ltd., UIC 204946320, with its registered office at: Sofia (capital), Stolichna Municipality, Sofia 1799, Mladost district, Mladost residential area, block 253, studio 1,
Phone: +359 883216916,
Email: info@spkayaks.com,
Website: www.spsailing.com
SP SAILING Ltd. is the data controller responsible for the protection of personal data you share with us and processes personal data in accordance with the applicable data protection legislation.

II. Competent supervisory authority for data protection:
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 3 518
Website: www.cpdp.bg
Email: kzld@cpdp.bg

III. Information about you and the legal grounds on which we collect and process this data:
The grounds on which SP SAILING Ltd. processes personal data are:
– When processing is necessary to comply with a legal obligation;
– When processing is necessary for the performance of a contract;
– Based on consent given by the data subject.
SP SAILING Ltd. commits to process the data it receives and/or collects from you in accordance with the applicable legislation and the principles established by the General Data Protection Regulation (EU) 2016/679 for the purposes described in this policy.
We will process the following categories of personal data:
– Name;
– Email address;
– Gender;
– Phone number;
– Date of birth;
– Inquiry information;
– Passport details (if provided).
We also automatically collect and record information from your browser such as: IP address; software and hardware characteristics; website pages accessed; and other system information.
If you have an account with SP SAILING Ltd. at www.spsailing.com, we will process the personal data associated with your account, such as: account number; browsing history.
Data we collect from you may be processed by staff working for SP SAILING Ltd. Such staff may, among other things, be engaged in maintaining this website, fulfilling your request, processing payment details, or providing customer support services.
We collect information through:
– Our website (via cookies);
– When you register an account;
– When you make an inquiry;
– When you make a reservation (online or offline);
– When you sign up for our newsletters;
– When you participate in surveys;
– When you participate in contests, promotions, and/or campaigns;
– When you submit user-generated content (reviews);
– From third parties authorized to make reservations on your behalf;
– From third parties via SP SAILING Ltd. profiles on social media platforms like Facebook, Twitter, Google+, LinkedIn, YouTube, or Instagram, or when you use those platforms to register on our website.
If you voluntarily publish your personal data or details about yourself in publicly accessible sections of the website, please note that such information is not covered by the Personal Data Protection Act and SP SAILING Ltd. is not responsible for it.

IV. Purposes for which we process your personal data:
The purposes and methods of processing your personal data are:
– To provide our services;
– To communicate with our users;
– To respond to your inquiries;
– To personalize content;
– To improve our services;
– To enhance the effectiveness of our website;
– For marketing purposes;
– For research and analysis;
– Other ways permitted or required by law.
By providing your personal data, you explicitly consent to the collection, use, processing, and disclosure of your information as outlined in this Policy, including its storage on servers owned or leased by SP SAILING Ltd.
We retain your data no longer than required by law.
We use cookies in accordance with our Cookie Policy.
If you later wish to opt out of data collection and analysis regarding your visit, you can opt out at any time.
To technically implement this opt-out in your browser, the corresponding marker is set to Off. This cookie serves solely to record your opt-out. Please note that, for technical reasons, the cookie can only be used for the browser from which it was set. If you delete cookies, or use another browser or device, you must set your preferences again.

V. Sharing your personal data with third parties:
SP SAILING Ltd. undertakes not to disclose any personal data about its customers to third parties—state authorities, commercial companies, individuals, or others—except where:
– We have the explicit consent of the client;
– The information is required by state authorities or officials who, by law, have the right to request and collect such information, and we are obliged to provide it by law;
– The information is necessary for third parties to fulfill a service under a contract between the client and SP SAILING Ltd., or for other service operators that represent a separate service delivery.
– Courier service providers;
– The hosting company providing services related to this website.
SP SAILING Ltd. may disclose and transfer your personal data to companies located outside the Republic of Bulgaria, provided there is a legitimate interest related to processing your data for internal administrative purposes. Such transfers will be carried out in strict compliance with confidentiality and data security requirements.
If there is no adequacy decision for the third country regarding the protection of personal data, we will only transfer data after informing you about the potential risks of the transfer due to the lack of an adequacy decision and appropriate safeguards from the respective third country, and after you have explicitly given your consent or when required for the performance of a contract between you and SP SAILING Ltd., or necessary for the conclusion or performance of a contract concluded in your interest between us and another legal or natural person.
We never sell or offer your data except as indicated above.
Your personal data may be processed on our behalf by our service providers in the cases described.

VI. Your rights:
Under the General Data Protection Regulation (EU) 2016/679, you have the following rights:
Right to information: At any time, you may obtain information about the personal data we hold about you, including:
– Our intention to transfer your data to third parties;
– The retention period for your data;
– The existence of automated decision-making;
– Information about your rights, including the right to lodge a complaint with the Supervisory Authority (the Commission for Personal Data Protection).
You have the right to request confirmation of whether and how your personal data is being processed. You can contact SP SAILING Ltd. at the contact details provided in this policy.
You have the right to receive a copy of your data in a structured, commonly used, and machine-readable format.
You have the right to request the transfer of your data to another data controller where feasible. These rights apply only to the personal data you have provided us.
You have the right to request the correction of your personal data if it is inaccurate, as well as to request the completion of your data.
You have the right to object to the processing of your personal data for direct marketing purposes by using the “unsubscribe” link provided in every marketing email you receive from us.
You have the right to withdraw your consent to the processing of your data at any time by emailing us at www.spsailing.com.

VII. How to exercise your rights:
You can always contact us by email at www.spsailing.com and at the addresses and phone numbers provided above.
If you find or believe that we are processing your data incorrectly, you may contact us.

VIII. Obligations of SP SAILING Ltd.:
We take all necessary technical and organizational security measures to protect the data we process against manipulation, loss, destruction, and unauthorized access.
Our security measures are continuously improved in line with technological developments.
We process data in accordance with all principles of the General Data Protection Regulation (EU) 2016/679.
We maintain a register of processing activities.
We will assist you in exercising your rights as data subjects as specified in this policy.
We manage data protection risks in compliance with the General Data Protection Regulation (EU) 2016/679.