Privacy policy

This is a translation for convenience. If it differs from the Bulgarian version, the Bulgarian version applies.

01Who processes your data

The controller of your personal data is Curtain for Cause Association, UIC 000000000, address Sofia. For any questions about this policy: valtop88@icloud.com.

02What data we collect

• When you buy a ticket: name, email, phone number (optional), the seats you chose, the amount and time of the order, the order and ticket numbers.
• When you donate: name, email, amount and your message, if you left one.
• At the entrance: that a ticket has been scanned, when, and by which team member.
• When you send a message through the form: name, email and the text of the message.
• Visit statistics: only if you have chosen “Accept” in the cookie banner — through Google Analytics, with an anonymised IP address.

03Why we process it

• To fulfil your order — issuing, sending and checking your ticket (performance of a contract).
• For the accounting and tax reporting of payments and donations (legal obligation).
• For secure sales and entry control — preventing duplicate and fake tickets (legitimate interest).
• To reply to your message (legitimate interest).
• For anonymous visit statistics — only with your consent, which you can withdraw at any time.

04Payments

Card payments are processed by Stripe, a licensed payment service provider. Your card details are entered on its secure page and do not reach us — we only receive the result of the payment and a receipt.

05Who else sees the data

Access is limited to team members who have a role in the system and to the following providers acting on our instructions: the website’s hosting, an email delivery service, Stripe for payments, an accountant and — only if you have accepted the statistics cookies — Google Analytics. We do not sell your data or provide it for advertising.

06How long we keep it

• Order and donation data — 5 years, as required by accounting legislation.
• Entrance scan records — up to 6 months after the event.
• Messages from the contact form — up to 12 months.
• Statistics in Google Analytics — up to 14 months.

07Your rights

You have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability and to object, as well as to withdraw your consent to the statistics cookies at any time.

If you believe we are processing your data unlawfully, you can lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia.

08Cookies

The website uses a minimal set of cookies. The details are described on a separate page — Cookies.

09Changes

When we change this policy, we publish the new version on this page and update the date above. For significant changes, we will post a notice on the website.