Български
Book a lesson
Book a lesson
Български

Last updated: October 24, 2026

This policy describes personal data processing when using magiballet.com under Regulation (EU) 2016/679 (GDPR) and Bulgarian data protection law.

1. Controller and contact

The data controller is Margarita Georgieva, Sofia, Bulgaria. For questions and to exercise your rights: margarita.ballet.teacher@gmail.com, phone +359 88 953 64 94.

2. Data and purposes

  • Enquiries: your name, email, phone number and correspondence, to respond and clarify the requested service.
  • Lessons and workshops: contact and participant details, selected event and time, needed for booking and participation. Online bookings use Cal.com; workshop registration may use Google Forms and Google Sheets. Google Calendar may be used to organise appointments.
  • New workshop notifications: your email address and the page language when subscribing. Your address is added to Brevo; the language selects the list when a separate English list is configured.
  • Orders requiring delivery, where applicable: your name, phone number, delivery address or Econt/Speedy office, and order details.
  • Website operation and security: technical data accompanying internet requests, such as IP address, date and time, requested resource and browser information, processed by hosting and external services.
  • Usage analysis: visits, traffic sources, browser and device information, and page interactions through Umami, described in section 5.

Providing data for an enquiry, booking or subscription is voluntary. Without the necessary data, we may be unable to fulfil your request. Subscribing to notifications is not a condition of attending a lesson or workshop.

  • Article 6(1)(b) GDPR — a contract or steps at your request before entering into one: service enquiries, bookings, participation and orders.
  • Article 6(1)(a) GDPR — consent: voluntary subscription to notifications. You can withdraw it at any time without affecting the lawfulness of earlier processing.
  • Article 6(1)(c) GDPR — legal obligation: documents and information whose retention or disclosure is required by law.
  • Article 6(1)(f) GDPR — legitimate interests: security, protecting legal claims and analysing usage to improve the website, taking visitors’ rights into account. This basis does not replace consent where the law requires it for the technology used.

4. Email notifications through Brevo

Submitting the notification form requests emails about new workshops. The request passes through Netlify, and your email address is sent to Brevo to manage the list and send messages.

You can unsubscribe using the unsubscribe link in a received message or by contacting margarita.ballet.teacher@gmail.com. After withdrawal, your address should no longer be used for new notifications. Minimal information about the withdrawal may be retained to ensure it is respected.

5. Umami: analytics, session recordings and heatmaps

The website uses Umami at statistika.magiballet.com for statistics, interaction analysis and identifying problems. Scripts load automatically on the public website. As of the date of this policy, there is no mechanism for obtaining a prior consent choice for this analytics.

In addition to visited pages, the referring page, language and technical information, session recordings and heatmaps are enabled. They may capture visible content, pointer movements, clicks and scrolling. This is a replay of webpage interactions, not a camera or microphone recording.

Current settings specify 15% sampling for recordings and heatmaps and up to 5 minutes per recording. The recording script is configured to mask values in input fields. This does not mean all visible text is hidden or all technical data is anonymous.

For questions and objections, use the contact email above. Browser settings or extensions can block requests to statistika.magiballet.com.

6. Cookies and local storage

When you manually switch languages, the website saves your choice (bg or en) under the name magi-language:

  • in a cookie for 1 year from your selection;
  • in localStorage, with no expiry set by the website — until the data is cleared or your choice changes.

These entries remember your preferred language. You can delete them through your browser settings; the website then uses your browser’s language again.

External services may use their own cookies and similar technologies. Blocking cookies does not necessarily block analytics requests or other types of local storage.

7. Providers and external content

Depending on the feature used, data may be received by:

Embedded content may transmit your IP address and technical information to the provider as soon as the page loads, depending on the embedding method. Links to social networks and other websites lead to services with their own policies.

Data is not sold. It may be provided to competent authorities where required by law. Some providers may process data outside the European Economic Area. The GDPR requires an applicable mechanism for such transfers, such as an adequacy decision or standard contractual clauses. You can ask the controller for information about specific recipients and safeguards.

8. Retention and protection

Data is stored in the services used and working records. Access should be limited to what is needed for the relevant activity.

  • Enquiries and bookings are retained to handle the request, provide the service and resolve related questions or claims.
  • Subscription data is used until you unsubscribe or notifications stop, with possible retention of minimal data to respect and document withdrawal.
  • Documents subject to statutory retention periods are kept for those periods, including when deletion is requested.
  • Technical logs, statistics and session recordings depend on service settings. You can ask the controller for the specific retention period. The five minutes is a recording’s duration, not its retention period.

Data should not be kept longer than necessary. Deletion requests are also assessed against legal obligations and the protection of legal claims.

9. Children’s data

When registering a child, provide only the details needed for participation and a parent’s or legal representative’s contact details. Do not send health or other sensitive information through general contact or subscription forms.

10. Your rights

Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interests and, at any time, to direct marketing. You can withdraw consent where it is the basis for processing.

Send a request to margarita.ballet.teacher@gmail.com. Where necessary, minimal information may be requested to verify your identity. The usual response period is one month; if a legally permitted extension is needed, you will be informed within that period of the reasons.

You may complain to the Bulgarian Commission for Personal Data Protection (CPDP) at cpdp.bg, or another competent EU supervisory authority.

11. Changes

When services or processing change, we update this page and the date at the top. Publication of a new version does not itself constitute consent to processing that requires it.