With this policy, we want to inform you about the personal data we collect, what we use it for and how we keep it.

“AST Service” EOOD is a company registered in Bulgaria under number 203873346, with its headquarters and management address BULGARIA, Sofia, Lozenets district, 15 “Srebarna” street, entrance B (hereinafter in this Policy, referred to as “AST Service” for short).

We are the controller of your personal data and as such we are responsible for processing and storing your data in a fair, transparent and secure manner, acting in your best interests.

The Commission for the Protection of Personal Data (CPDP) controls how we handle your personal data. CPDP is an independent state body that monitors the legality of data processing activities. All data subjects have the right to file a complaint with the CPDP regarding the processing of their personal data – contact details and more about the procedure can be found at the internet address: https://www.cpdp.bg/.

You can direct any questions related to your personal data to our team by email:tickets.icepark@gmail.com.

This version of the Private Policy of AST Service has been expanded and modified in accordance with the requirements of the General Data Protection Regulation- GDPR.

When you buy a ticket from us, you provide us with the following personal data:

Email address

Payment details – when the proffered payment option is card payment/bank payment

We need this information to be able to make a sale and deliver the ordered ricker to you, i.e. personal data are necessary for the conclusion and execution of the contract for the sale of tickets between you and AST Service.

Along with all the data listed above, we store in your personal profile the following information about your purchases:

Information about purchased tickets: number of tickets, date, time of paid service, price of tickets.

All information listed may be used for statistical purposes.

By ordering a ticket through www.icepark.bg, we conclude a contract for the sale of tickets with you. The main purpose for which we collect and use the above personal data is to enable the performance of this contract – including sending the tickets to you.

Your email address may be used by our team in case of changes or cancellation of purchased services. Your data in connection with the payment, in addition to making it, may be used by AST Service also in cases of price refunds

Your personal data may also be processed if a government authority needs AST Service’s cooperation in connection with various official proceedings, including pre-trial, judicial and administrative proceedings related to consumer claims and disputes, ticket fraud, etc.

The personal data specified in Section 1 above are stored in the reservation system of AST Service for an indefinite period of time. You can request deletion of your personal data at any time by contacting our team at tickets.icepark@gmail.com.

After deletion, your personal data will only be stored in the company’s achieve for possible legal claims or administrative procedures within a period of 5 years from the date of the event for which you last purchased a ticket.

We collect your data on grounds permitted by European and Bulgarian law (in particular regulation 2016/679, also known as the General Data Protection regulation or GDPR, adopted and amended by the Bulgarian National Assembly). We collect your data on the following grounds:

1. Performance of a contract

We collect your personal data to enable us to deliver or transfer your tickets to you, to inform you of any changes to upcoming events, cancellations or claims based on our return policy.

We also process your payment information so that we can confirm that you have made a payment that allows you to receive your ticket.

For the purposes of fulfilling our obligations to you, we may transfer our personal data to financial institutions/payment processing institutions (such as banks, payment service providers, etc.)

2. Legitimate interest

We retain the information your enter into your account in the context of purchasing tickets as we believe it is in your and our legitimate interest to do so.

In addition, we will store the data related to your payments and purchases to ensure that this information is available in the event of official proceedings such as civil cases ( for example, if we are sued for damages), administrative and criminal investigations ( for example, inspection or audit by the Revenue agency), consumer claims and disputes, ticket fraud, etc.

Video surveillance of our facilities is done to ensure our security against theft and other potential crimes.

1. Payments

In order to process your payment, your payment details are shared with our payment service providers.

2. Official bodies and legal advice

Your personal data may be transferred or accessed by various government authorities/ investigative and administrative authorities, tax authorities, courts/ in connection with official proceedings, including pre-trial and judicial proceedings and administrative proceedings related to consumer claims and disputes, ticket fraud etc.

If necessary, in such or similar cases, your data may be provided to individuals of legal entities who provide relevant legal services and advice to AST Service during the proceedings.

Except for the cases under point 2 above, in the event of disputes or claims for the purposes of recovery or to provide you with assistance in resolving other problematic matters, your personal data may be communicated to other entities within the AST Service group or subcontractors.

If necessary, in such or similar cases, your data may be provided to individuals or legal entities who provide relevant legal services and advice to AST Service in the course of the relevant proceedings.

Other persons in the AST Service group may also receive your data for the purposes of reporting the progress of legal cases or in connection with refunds or other compensatory payments.

4. Video surveillance

Video surveillance footage from our offices may be collected or shared with a licensed private security company in strict compliance with Bulgaria’s video surveillance legislation.

According to the General Data Protection Regulation /GDPR/ you have the following rights:

Right of access;

Right to rectification;

Right to erasure (right to be forgotten);

Right to restriction of processing;

Right to data portability;

Right to object to processing;

Right to withdraw consent at any time.

Right of access;

At your request you have the right to access the personal data stored about you; you also have the right to request a copy of the personal data that is being processed.

Right to rectification;

You have the right to request that incorrect, inaccurate or incomplete personal data be corrected;

Depending on the purposes of the processing, you may have the right to complete incomplete personal data, including b providing an additional declaration.

Right to erasure (right to be forgotten);

You have the right to request that personal data be deleted when it is no longer necessary or if its processing is unlawful.

Please note that Art. 17 of the GDPR outlines the cases in which we are obliged to delete your data. In some cases, it will be necessary for us to retain your data, even if deletion is requested/for example, to comply with a legal obligation that requires processing under Union Law or Bulgarian legislation/.

Right to restriction of processing;

In certain circumstances, you may have the right to request from us the restriction of the processing of your personal data. For example, you can exercise this right when we no longer need your personal data for the purposes of processing, but at the same time we need to store it in our systems so that we can used it in situations such as the exercise of rights of the defence of legal claims.

Right to data portability;

In certain circumstances, you may have the right to receive your personal data that you have provided to us in a structured, widely used and machine-readable format (i.e. in digital form) and you may have the right to request the transmission of that data to another person without hindrance from us if such transmission is technically feasible.

Right to object to processing;

In certain circumstances, you may have the right to object to the processing of your personal data and we may be obliged not to process it in the future.

Right to withdraw consent at any time.

Where the processing of your personal data is based on your consent, you may withdraw your consent at any time without giving us reasons. Withdraw of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

How to exercise your rights

To exercise your rights, you can contact us with a written request at tickets.icepark@gmail.com. We will respond to your requests without undue delay and within 1 month at the latest.

Your written request under this Section may be submitted electronically and should include:

The email address with which you made the purchase;

Description of the request;

Date of the request;

Address for correspondence;

Power of attorney – if the request is submitted on behalf of someone else.

You may be asked to provide information to verify your identity ( e.g. by clicking a verification link or providing a verification code) in order to exercise your rights.

We will notify you by email of any changes to this Privacy Policy, and you will have the opportunity to object to such changes. changes may also be communicated to you when you visit our website.

We will notify you by email of any changes to this Privacy Policy, and you will have the opportunity to object to such changes. changes may also be communicated to you when you visit our website.