Data Protection
The protection of your personal data is of the utmost importance, and we strictly adhere to the provisions of the General Data Protection Regulation (GDPR) as well as the country-specific data protection regulations that apply to us. The following explanation provides an overview of the type, scope, and purpose of data processing. We use technical and organizational security measures to protect our websites and the data we manage from intentional or accidental manipulation, loss, destruction, alteration, and access by unauthorized persons. To protect the security of your data during transmission, we use the latest encryption methods. Backup and recovery procedures, as well as role and authorization concepts, are important issues for us. Existing security measures are continuously improved in line with technological developments.
Name and contact information of the person responsible for data processing
This privacy notice applies to the processing of data by groom-academy.com, owned by “ACADEMY FOR PROFESSIONAL TRAINING” Ltd., UIC: 204928742, 39A Evlogi Georgiev St., Varna, Email: [email protected], Phone: +359 (0) 88 888 6058.
Personal data
According to Article 4(1) of the GDPR, personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable when they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data includes names, addresses, phone numbers, or email addresses.
Data collection and storage when you visit our website
When you visit our website, the data transmitted by your browser is collected by the web server and stored in part in logs, known as log files. This includes information about the operating system used, the browser type and version, the country of access, the provider with a pseudonymized IP address, the time of access, the so-called referring pages (previously visited page), the time of the server request, the amount of data transferred, and the download of files, which can only be displayed in aggregate form. In this way, the data cannot be linked to the specific person who submitted it, because their IP address is pseudonymized. This data will not be merged with other data sources. The collection and storage of data serve to ensure a smooth connection and convenient use of our website, to assess the security and stability of the system, and for other administrative purposes. The legal basis for data processing is Article 6(1)(f) of the GDPR.
Transfer of data abroad
When we store or process personal data ourselves, this is done exclusively in Bulgaria. The integration of third-party content listed below (in particular social media plugins and analytics tools) regularly results in the transfer of data to third parties. This may result in data being transferred abroad. Details are provided in the content of the respective third party.
Data collection and storage via our contact form
We provide you with the opportunity to contact us via the contact form available on our website. To submit an inquiry, you must enter the required information. Additional information may be provided voluntarily. The processing of contact data is based on Article 6(1)(a) of the GDPR, based on your voluntary consent. The personal data we collect through the use of the contact form will be deleted after your inquiry has been processed.
Social media
The integration of social media content is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of the legitimate interests of the social media providers in displaying personalized advertising, to inform other users of the social network about your activities on our website, and to customize the service.
Facebook
Some of our websites include plugins from the social network Facebook, Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (www.facebook.com). You can recognize Facebook plugins by the Facebook logo or the “Like” button on our pages. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/ When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server, which informs Facebook that you have visited our site with your IP address. As long as you are logged into your Facebook account, you can link the content of our pages to your Facebook profile, which allows Facebook to associate your visit to the pages with your user account. As the service provider, we do not know whether you wish for Facebook to link your visit to our Facebook profile; you can do so by logging out of your Facebook account. For more information, see Facebook’s Privacy Policy at www.facebook.com and https://www.facebook.com/privacy/explanation.
Using the Facebook plugin may result in data being transmitted to Facebook. Facebook, headquartered in the U.S., is certified under the “Privacy Shield,” which ensures compliance with EU data protection standards.
YouTube
Our website includes, but is not limited to, plugins from the YouTube video portal, owned by Google LLC, 600 Amphitheater Parkway, Mountain View, CA 94043, USA (www.youtube.com). When you visit a webpage with a YouTube widget, a connection is established with YouTube’s servers. During this process, the YouTube server is informed which page you have visited. If you are logged into your YouTube account, it is possible for your user behavior to be linked directly to your personal profile. You can prevent this data transfer by logging out of your account. For more information on the collection and use of data by YouTube, please read the privacy policy at www.youtube.com and https://policies.google.com/privacy?hl=bg&gl=bg
The use of content on YouTube may result in data being transmitted to Google. Google, headquartered in the United States, is certified under the Privacy Shield, which ensures compliance with the EU’s data protection standards.
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google LLC, represented by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (www.google.com). This use is based on Article 6(1)(f) of the GDPR. Google Analytics uses so-called “cookies,” text files that are stored on your computer and enable an analysis of your use of the website. Information generated by the cookie regarding your use of the website includes:
⦁ browser type/version,
⦁ operating system used,
⦁ the URL of the referring page (the page that was previously visited),
⦁ the hostname of the accessing computer (IP address),
⦁ the time of the server request

are usually transmitted to a Google server in the United States and stored there. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. We have also implemented the “anonymizeIP” code on this website in Google Analytics. This ensures that your IP address is masked so that data is collected anonymously. Only in exceptional cases will the full IP address be sent to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, compile reports on website activity, and provide the website operator with other services related to website and internet usage. You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the features of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=bg . As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent data collection by Google Analytics by clicking this link. An opt-out cookie will be set, which prevents the future collection of your data when you visit this website. The opt-out cookie is valid only in this browser and only for our website, and is stored on your device. The use of Google Analytics may cause Google to transmit data.
The U.S. company Google LLC is certified under the “Privacy Shield,” which guarantees compliance with the EU’s data protection standards.
Yandex Metrica
Our website uses Yandex Metrica, a web analytics service provided by Yandex LLC, 16 Lvova Tolstoy St., Moscow, 119021, Russia (www.yandex.com). With the help of Yandex Metrica, based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6(1)(f) of the GDPR, pseudonymized information about visitors is collected, evaluated, and stored. From this data, pseudonymized user profiles may be created and evaluated for the same purpose. Yandex Metrica uses so-called “cookies,” i.e., small text files that are stored locally in the cache of the website visitor’s internet browser. These “cookies” are used, among other things, to recognize the browser, which allows for more accurate statistical data. The user’s IP address is part of the information collected, but it is pseudonymized immediately after collection and before storage to exclude personal identification. The information generated by the cookie (including the pseudonymized IP address) is transmitted to and stored on a Yandex server in the Russian Federation for the purpose of protecting the aforementioned interests. The data collected using Yandex technologies will never be used to personally identify a visitor to this website without the explicit consent of the person concerned and will not be combined with personal data regarding the holder of the pseudonym.
If you wish to disable the tracking of user behavior via cookies, you can configure your browser to notify you of cookie settings and decide on a case-by-case basis whether to accept them or to disable cookies for specific cases or in general. Another option is to opt out of data collection by Yandex, which allows you to install an opt-out add-on available on the following website: https://yandex.com/support/metrica/general/opt-out.xml.
Facebook Pixel
We currently have a Facebook pixel integrated into our website, provided by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (www.facebook.com). The Facebook Pixel is a short JavaScript code that the administrator of a Facebook advertising account can use to optimize ads or receive reports on cross-device conversions. Conversions are a process that transforms a person’s status into a new state. An example of this is the conversion of a website visitor into a customer. When a web page loads, the Facebook Pixel sends general session information from the browser to Facebook. The Facebook Pixel records three types of data each time it loads:
(i) HTTP headers: HTTP headers contain a set of information that is sent via a standard web protocol between a browser request and a server on the Internet. HTTP headers contain information such as IP addresses, web browser information, page location, document, URL, and web browser user agent.
(ii) Pixel-specific data: This includes pixel data and data from Facebook cookies used to associate events with a specific promotional account on Facebook and to link them to a person known to Facebook.
(iii) Custom Data Events: Developers and marketers may optionally send additional information about the visit via standard and custom data events. For example, typical custom data events include information about whether a purchase was made on a specific page. You can find more information about custom data events here: https://developers.facebook.com/docs/facebook-pixel .
The legal basis for collecting personal data via the Facebook pixel is our legitimate interest in the statistical analysis of user behavior for the purposes of optimization and marketing, in accordance with Article 6(1)(f) of the GDPR. If you do not wish to use the Facebook pixel, you can click on this link. An opt-out cookie will be set, which prevents the future collection of your data when you visit this website. The opt-out cookie is valid only in this browser and only for our website and is stored on your device. When you visit a webpage that uses Facebook advertising products, your browser sends certain data to Facebook, such as the website’s URL and Facebook cookies. The data will be sent to Facebook. Facebook, headquartered in the U.S., is certified under the “Privacy Shield,” which ensures compliance with EU data protection standards.
Tawk.to
Our website includes, but is not limited to, chat plugins via the Tawk.to web platform, owned by Search Marketing Services SIA, Bebru iela 43-19, LV-1067, Riga, Latvia (www.tawk.to). The chat is integrated into our website via JavaScript code. When you visit the website, a direct connection is established with Tawk.to’s servers, even if you do not have a Tawk.to account or are not logged in. When you interact with the module, for example by using the chat, the relevant information is sent to Tawk.to’s servers and stored there. The data collected includes the following: chat history, display name, IP address during the chat (based on IP), and country of origin. This data will not be shared with third parties and is used solely to improve our services and for internal statistical purposes. By using the chat, you accept these terms. Please also review tawk.to’s privacy policy: https://www.tawk.to/privacy-policy , as well as the additional information. You can also completely block the tawk.to module using browser extensions, e.g., the script blocker “NoScript” (noscript.net).
Cookies
This website uses “cookies” to improve usability and provide certain features. “Cookies” are small text files that are temporarily stored by your browser on your computer. They are harmless and do not contain viruses. These are usually so-called session cookies, which are automatically deleted at the end of your visit. Cookies that remain stored on the user’s computer and serve to recognize returning users may also be used. Browsers can be configured to inform the user about cookie settings. Additionally, you can specify in which cases storage is permitted, whether cookies should be deleted immediately after closing the browser, and which cookies should generally be blocked. With cookies disabled, the full functionality of the website cannot be guaranteed.
Transfer of data to third parties
We transfer your personal data to third parties only:
– if, in accordance with Article 6(1)(a) of the GDPR, you have given your explicit consent;
– if the disclosure pursuant to Article 6(1)(f) of the GDPR is necessary to assert, exercise, or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data in the event that the disclosure pursuant to Article 6, (1), sentence 1, point (c) of the GDPR is legally required and to the extent that, pursuant to Article 6(1), sentence 1, point (b) of the GDPR, it is necessary for the performance of a contractual relationship with you.
In the latter case, your personal data is transferred to third parties exclusively to service partners involved in the performance of the contract, such as: the logistics company responsible for delivery and the bank responsible for payments. However, in the event that your personal data is disclosed to third parties, the scope of the data transferred is limited to the necessary minimum.
Your rights as a victim
As a data subject whose personal data is being processed, applicable law grants you full rights, which we will outline below:
If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided that there are grounds for doing so arising from your particular situation, or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will honor without you having to specify a particular situation. If you wish to exercise your right to withdraw consent or to object, please send an email to the email address provided above.
Right to information (Article 15 of the GDPR)
You have the right to information regarding the personal data we process, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data is disclosed, the planned retention period or the criteria for determining the retention period, the rights of the data subject, the source of your data if it was not collected by us, and your right to information guaranteed under Article 46 of the GDPR when your data is transferred to third countries.
Right to rectification (Article 16 of the GDPR)
You have the right to have your personal data stored by us corrected and/or supplemented immediately.
Right to erasure (Article 17 of the GDPR)
You have the right to request the erasure of your personal data if the requirements of Article 17(1) of the GDPR are met. This right may be restricted when processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to restriction of processing (Article 18 of the GDPR)
You have the right to request that your personal data be restricted:
– while the accuracy of your information is being contested;
– if you refuse to have your data erased due to improper processing and instead request that your data be restricted;
– when we process your data to establish, exercise, or defend legal claims, after we no longer require such data for that purpose, or if you have objected based on a specific situation, to the extent that we know our legitimate grounds prevail.

Right to information (Article 19 of the GDPR)
If you have the right to correct, delete, or restrict processing with us, we are required to notify all recipients to whom we disclose your personal data of such correction, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
Right to data portability (Article 20 of the GDPR)
You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller, where technically feasible.
Right to withdraw consent (Article 7(3) of the GDPR)
You have the right to withdraw your consent to data processing at any time with future effect. In the event of withdrawal, we will immediately delete the relevant data, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal.
Right to appeal (Article 77 of the GDPR)
If you suspect any violations of applicable data protection regulations, please notify us. We will review your report immediately and take the necessary action. You also have the option to file a complaint with the relevant data protection authorities.