**Privacy Policy for Zlaten Kukhar Culinary School**
This Privacy Policy describes how Zlaten Kukhar Culinary School, located at 12 Vasil Levski Boulevard, Floor 3, Sofia, Sofia, 1000, Bulgaria, collects, uses, and protects your personal data when you use our site. Zlaten Kukhar Culinary School provides culinary arts education, including cooking classes and workshops in basic cooking skills, pastry and dessert making, regional Bulgarian cuisine, international cuisine, and private cooking events. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
**What Information We Collect**
We collect personal data from you when you interact with our site. This may include:
* **Contact Information:** Your name, postal address, and phone number.
* **Payment Information:** Details necessary for processing payments for classes and events (e.g., credit card information). Please note that we utilize secure payment gateways and do not directly store your credit card details on our servers.
* **Course Registration Information:** Information provided when you register for a class or workshop, such as your dietary restrictions or skill level.
* **Communication Data:** Records of your communications with us, including email correspondence and phone calls.
* **Website Usage Data:** Information about how you use our site, such as the pages you visit, the links you click, and your IP address. This data is collected through cookies and similar technologies.
**How We Use Your Information**
We use your personal data for the following purposes:
* **Providing Services:** To process your registration for classes and workshops, manage your account, and provide you with the educational services you have requested.
* **Processing Payments:** To process your payments for classes and events.
* **Communication:** To communicate with you about your registration, class schedules, special events, and other relevant information.
* **Improving Our Services:** To analyze website usage data to improve the functionality and user experience of our site.
* **Marketing:** With your consent, to send you promotional materials about our classes, workshops, and special events. You can opt out of receiving these communications at any time.
* **Legal Compliance:** To comply with applicable laws and regulations.
**Legal Basis for Processing**
We process your personal data based on the following legal grounds:
* **Contractual Necessity:** Processing is necessary for the performance of a contract with you (e.g., providing cooking classes you have registered for).
* **Legitimate Interests:** Processing is necessary for our legitimate interests, such as improving our services and marketing our classes (provided that your interests and fundamental rights do not override those interests).
* **Consent:** We rely on your consent to send you marketing communications. You have the right to withdraw your consent at any time.
* **Legal Obligation:** Processing is necessary for compliance with a legal obligation.
**Sharing Your Information**
We may share your personal data with the following categories of recipients:
* **Payment Processors:** We share payment information with secure payment processors to process your payments.
* **Service Providers:** We may use third-party service providers to assist us with website hosting, data analytics, email marketing, and other services. These service providers are contractually obligated to protect your data.
* **Legal Authorities:** We may disclose your personal data to legal authorities if required by law.
**Data Security**
We take reasonable measures to protect your personal data from unauthorized access, use, or disclosure. These measures include:
* Using secure servers to store your data.
* Implementing firewalls and intrusion detection systems.
* Restricting access to your data to authorized personnel only.
* Using encryption to protect sensitive data, such as payment information.
**Data Retention**
We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
**Your Rights**
Under the GDPR, you have the following rights regarding your personal data:
* **Right to Access:** You have the right to request access to the personal data we hold about you.
* **Right to Rectification:** You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
* **Right to Erasure:** You have the right to request that we erase your personal data, subject to certain exceptions.
* **Right to Restriction of Processing:** You have the right to request that we restrict the processing of your personal data, subject to certain exceptions.
* **Right to Data Portability:** You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
* **Right to Object:** You have the right to object to the processing of your personal data for certain purposes, such as direct marketing.
* **Right to Withdraw Consent:** If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.
* **Right to Lodge a Complaint:** You have the right to lodge a complaint with a supervisory authority if you believe that we have violated your rights under the GDPR.
To exercise your rights, please contact us at 12 Vasil Levski Boulevard, Floor 3, Sofia, Sofia, 1000, Bulgaria.
**Cookies**
Our site uses cookies to collect information about your browsing activity. You can control cookies through your browser settings.
**Changes to This Privacy Policy**
We may update this Privacy Policy from time to time. We will post any changes on our site.
**Contact Us**
If you have any questions about this Privacy Policy, please contact us at 12 Vasil Levski Boulevard, Floor 3, Sofia, Sofia, 1000, Bulgaria.