Last updated: 24 September 2026
This policy explains what personal data Avantgarde Ski collects on avantgarde-ski.com, on our booking platform platform.avantgarde-ski.com and in our shop, why we collect it, and what rights you have.
1. Who we are
The controller of your personal data is START 2020 Ltd (СТАРТ 2020 ООД), UIC 205769645, registered office: 12 Hristo Smirnenski St, 2770 Bansko, Bulgaria, trading as Avantgarde Ski, Stragite 2, Bansko.
Contact for anything about your data: contact@avantgarde-ski.com, tel. +359 888 766 736, or in person at the shop.
2. What we collect and why
2.1 Contact forms and lesson booking on this website
When you send us a message we receive your name, email address and your message. When you book a lesson or service on the reservation page we receive your name, email address, phone number, the service, date and time you chose, and any note you add; you receive a confirmation email. We use this only to answer you and to provide what you booked.
Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
We keep messages for up to 12 months after our last contact, and bookings for as long as accounting law requires.
2.2 Online booking and the rental form (platform.avantgarde-ski.com and the shop tablet)
To book and rent equipment we collect the responsible person’s name, email address and phone number, and for each person in the group their name, age, weight, height, skier level and shoe size. We need these to set the ski bindings safely (ISO 11088) and to carry out the rental. When you accept the rental agreement we record the time, the version you accepted, the name you typed and the IP address, as proof of acceptance. If you came through a partner (a hotel, host or agency) or an advert, we record which one, to know how guests find us.
Legal basis: performance of the rental contract (Art. 6(1)(b) GDPR) and our legal obligations, for example accounting (Art. 6(1)(c) GDPR).
If you booked online and email is enabled, we send you a booking confirmation and one reminder before arrival. These are part of the service, not marketing.
2.3 “Remember our details for next time”
Only if you tick this box, we keep the group’s names, sizes and the equipment settings we used, so your next visit starts pre-filled. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time at the desk or by email. We delete these details after five seasons without a visit, or earlier when you ask. Without this consent, the group’s details are removed when the rental is closed, apart from what the law requires us to keep.
2.4 Payments
We do not take card or bank details online. You pay at the shop, and we keep the accounting records that Bulgarian tax and accounting law requires, for the period it requires.
2.5 Cookies, analytics and advertising on this website
The website uses cookies that are strictly necessary for it to work. With your consent only, it also uses:
- Google Analytics / Google Tag Manager / Google Ads (Google Ireland Ltd): to count visits, see which pages are useful, and measure our adverts;
- Meta Pixel (Meta Platforms Ireland Ltd): to measure and show our adverts on Facebook and Instagram.
The booking page loads Google’s tag only after you accept, and reports a completed booking to Google Ads (the booking value, not your name or contact details). You can refuse or withdraw consent at any time in the cookie settings, and the site works the same without it.
Legal basis: your consent (Art. 6(1)(a) GDPR).
2.6 Spam protection
Our forms use Google reCAPTCHA to tell people from bots. Google receives technical data about your browser and your interaction with the page. Legal basis: our legitimate interest in keeping the forms free of spam (Art. 6(1)(f) GDPR). Google’s privacy policy applies: policies.google.com/privacy.
2.7 Links to Instagram and WhatsApp
Our pages link to Instagram and WhatsApp. Nothing is sent to them until you click. After that, their own privacy policies apply.
3. Children
Details of children are given to us by their parent or guardian, or by an adult the parent has authorised, only for fitting and setting their equipment. We do not use children’s data for anything else.
4. Who else sees your data
We never sell your data. We share it only with the services that run our systems for us, under a data processing agreement:
- SuperHosting.bg (Bulgaria): hosting of this website, its lesson booking and our email;
- NitroPack (Bulgaria): speeds up this website and delivers its pages, and in doing so handles visitors’ IP addresses;
- DigitalOcean: the server of our booking platform, located in Frankfurt, Germany (EU);
- Google and Meta: as described in 2.5 and 2.6, only with your consent where consent is required.
Google and Meta may transfer data to the United States. They do so under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. The partner hotel or agency that referred you learns the amount of your rental, to calculate their commission. They do not receive your personal details from us.
5. How we protect it
The booking platform runs over an encrypted connection (HTTPS). Only our staff can see rentals, each with a personal login, and prices and payments are visible to the shop’s administrators only. We back up the database every day.
6. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent at any time without affecting what was done before. Write to contact@avantgarde-ski.com or ask at the shop. We answer within one month.
You can also complain to the Bulgarian data protection authority: Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, www.cpdp.bg.
7. Changes
If we change this policy, we publish the new version on this page with a new date.
