Privacy Policy

This website is run by Tourist Society "Krepostta - Mogilitsa" ("we"), a tourist society based at Mogilitsa, ul. Ilinden 21, Bulgaria. We are the data controller for the personal information described below. For any question about your data, or to make a request, call us on +359 87 858 84 92 or write to us at the address above.

We only collect personal information that you choose to send us. If you use the enquiry form, we receive the details you fill in: your name and email address (required), and, if you add them, your group size, rough travel dates, the kind of trip you are interested in, and your message. Nothing else is collected automatically.

If you contact us by phone, email, Facebook or Instagram instead, we receive whatever you choose to share through those channels.

This site sets no cookies and uses no analytics, advertising or visitor tracking of any kind. We do not build profiles of visitors, and there is nothing for you to consent to. The fonts and photographs load without any third-party tracking.

We use the details you send only to reply to you and to help plan and arrange your visit: answering your questions, suggesting routes or tours, arranging a guide or an airport pickup, and pointing you towards somewhere to stay. We do not use your information for marketing, and we never sell or rent it to anyone.

Our legal basis is that we are taking steps at your request before a possible booking, together with your consent in choosing to send us the enquiry.

To run the website and receive your enquiry we rely on a small number of service providers who process data on our behalf, namely a website host and an email delivery service. Some of these providers are based outside the European Union, including in the United States, so your information may be processed there under appropriate safeguards. They may only use your data to provide their service to us.

We keep your enquiry only for as long as we need it: to answer you, and to arrange and follow up on any trip that results. After that we delete it. If an enquiry does not lead anywhere, we remove it once it is clearly no longer needed.

Under the GDPR you can ask us to show you the personal data we hold about you, to correct it, or to delete it, and you can object to or ask us to restrict how we use it. Where we rely on consent, you can withdraw it at any time. To do any of these, contact us using the details above and we will respond.

If you believe we have handled your data wrongly, you have the right to complain to the Bulgarian Commission for Personal Data Protection (CPDP), the national supervisory authority.

We may update this policy if the way we handle enquiries changes. The date below shows when it was last reviewed.