Privacy policy

Last updated: 7 November 2026

Who we are

The data controller is the Sofia Bears Sports Club association (Сдружение „Спортен клуб Софийските мечки“), UIC 176239687, registered at bl. 2, entr. B, fl. 2, apt. 11, Boyanska Reka St., Boyana, Vitosha district, 1616 Sofia, Bulgaria ("Sofia Bears", "we"). For any question about your personal data, write to info@sofiabears.bg.

What data we collect and why

Shop orders

When you order, you give us your name, phone number, email, delivery address, city, postcode and, if you wish, a note. We use them to confirm the order, deliver it, collect the cash payment on delivery and handle any return or complaint. Legal basis: performing our contract with you (GDPR Art. 6(1)(b)) and our legal accounting obligations (Art. 6(1)(c)).

When you contact us

If you write to us by email, call us or message us on social media, we use your details only to answer you. Legal basis: our legitimate interest in answering questions (Art. 6(1)(f)).

Technical data

To protect the site from abuse, such as repeated fake orders or spam sent through the contact form, the server briefly uses your IP address to limit how many orders and messages can be sent. It is kept in memory for at most one hour and is not stored with your order or message. Legal basis: our legitimate interest in keeping the site secure.

Visit statistics

We measure visits to the site, for the club's own use, to know which pages are read and how the site can be improved: the pages seen, how long they stay on screen and how far they are scrolled, the site or campaign link you came from, buttons and links used (for example "Add to cart" or a link to Instagram), the language of the site and of your browser, your country (worked out from your IP address at the time of the visit; the address itself is not stored), the type of device, browser and system, the screen size, how fast pages load, and errors that occur on the page (the error message only). To recognise a returning visitor, your browser keeps a random code in its local storage for at most 13 months from your first visit; it is not extended by later visits and does not say who you are. If your browser blocks storage, the server instead derives a code from your IP address and browser with a random key deleted the next day. If your browser sends "Do Not Track" or "Global Privacy Control", your visits are counted without any code. We only look at these figures as totals; they are not shared, not used for advertising and never linked to your orders or messages. They are kept 13 months; after that only daily totals remain. No cookie is used. Legal basis: our legitimate interest in measuring and improving the site (audience measurement within the limits set by the French data protection authority, CNIL).

You can refuse: the button at the end of this page stops all counting in your browser.

We do not use your data for advertising, we do not sell it and we do not profile you.

Who receives the data

Club members who handle and deliver orders, or a courier: only the name, phone number and address needed for the delivery.
Our hosting provider (website, database and backups), with servers in the United Kingdom (London), a country recognised by the European Commission as protecting personal data adequately.
Our email delivery provider for confirmation emails, based in the United States; transfers rely on the European Commission's standard contractual clauses.
Public authorities, when the law requires it.

How long we keep data

Orders: your name, phone number, email, address and notes are erased automatically three years after delivery, or six months after an order is cancelled. We keep only the order number, items, amounts and dates, which no longer identify you, for our accounts.
Backups: erased data can remain in our database backups for about 60 more days, which are used only to restore the site after an incident.
Correspondence: until the question is settled, and no longer than 2 years.
Technical data: one hour at most.
Visit statistics: 13 months; after that, only the totals of each day.

Cookies and browser storage

The public website uses no advertising or analytics cookies. Your browser keeps two things in its local storage: your cart, until you order, and the random statistics code described above (13 months at most, removed by the button at the end of this page).

YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com), and the practice location map comes from Google Maps. When you play a video or use the map, YouTube and Google may set their own cookies under their own policies.

Your rights

You can ask to access your data, correct or erase it, restrict its use, receive it in a portable format, and object to processing based on legitimate interest. Write to info@sofiabears.bg; we will answer within one month.

You can also complain to the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, www.cpdp.bg.