This Privacy Policy explains how Shokolina Travel EOOD, operating under the commercial brand DV Travel Bulgaria (“we”, “us”, “our”), collects, uses, and protects your personal data in accordance with Regulation (EU) 2016/679 (GDPR).

Last updated: [03.04.2026]

I. DATA CONTROLLER

Shokolina Travel EOOD
Operating as: D&V Travel Bulgaria
Email: office@dvtravelbulgaria.com

II. WHAT DATA WE COLLECT

We may collect the following categories of personal data:

• Identification data (name, surname)

• Contact details (email, phone number, address)

• Booking and transaction data

• Payment-related information (processed via secure third-party providers)

• Communication data (emails, inquiries, reviews)

• Technical data (IP address, device, browser, website usage)

III. PURPOSES OF PROCESSING

We process your data for the following purposes:

• To process bookings and provide travel services

• To communicate with you regarding your inquiries or reservations

• To comply with legal obligations

• To improve our website and services

• To send marketing communications (only with your consent or where legally permitted)

IV. LEGAL BASIS

We process your data based on:

• Your consent (Art. 6(1)(a) GDPR)

• Contract performance (Art. 6(1)(b))

• Legal obligations (Art. 6(1)(c))

• Legitimate interests (Art. 6(1)(f)), such as improving services and preventing fraud

V. COOKIES AND TRACKING

We use cookies and similar technologies to:

• Ensure website functionality

• Analyze traffic

• Support marketing activities

Non-essential cookies are used only with your consent. You can manage your preferences at any time via our cookie banner.

VI. MARKETING

We may send marketing communications:

• With your consent (e.g. newsletters)

• Or based on legitimate interest for existing customers (similar services)

You can unsubscribe at any time via email or link in the message.

VII. SHARING DATA WITH THIRD PARTIES

We do not sell your personal data.

We may share data with:

• Payment processors (PCI DSS compliant)

• IT service providers

• Booking systems and partners

• Marketing platforms (e.g. Google, Meta)

All partners process data under contractual obligations.

VIII. INTERNATIONAL TRANSFERS

Some service providers may be located outside the EU. In such cases, we ensure appropriate safeguards (e.g. Standard Contractual Clauses).

IX. DATA RETENTION

We retain personal data:

• For the duration of our contractual relationship

• As required by law (e.g. accounting obligations)

• Until consent is withdrawn (where applicable)

X. DATA SECURITY

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

XI. YOUR RIGHTS

You have the right to:

• Access your data

• Rectify incorrect data

• Request deletion

• Restrict processing

• Object to processing

• Withdraw consent

• Request data portability

You may file a complaint with the Bulgarian Commission for Personal Data Protection.

XII. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling with legal effects.

XIII. CONTACT

For any questions or requests:

Email: office@dvtravelbulgaria.com

XIV. CHANGES

We may update this Privacy Policy when necessary. Updates will be published on this page.

We encourage you to review it periodically.