BG | EN

Privacy policy

This Privacy Policy aims to inform the clients of "DAK Flow" Ltd. regarding the manner in which their personal data is collected, used, and stored in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.

1. Data Controller

  • Name: "DAK Flow" Ltd.

  • UIC (EIK): 208550440

  • Registered Office and Address: 68 Narodno Horo St., Sofia, Bulgaria

  • Manager: Atina Kostadinova

  • Phone: 0890228005

  • Email: info@flowhavenpilates.com

2. Data We Collect

  • First and last name

  • Phone number and email address

  • Contact or billing address

  • Payment data (processed through secure payment systems – the company does not have access to your full bank card details)

  • IP address, cookies, and analytical data regarding the use of the website and the booking platform

3. Legal Basis for Processing

  • Performance of a contract (Art. 6, para. 1, b. "b" of the GDPR) – for managing your bookings and memberships.

  • Legal obligation – for compliance with accounting and tax requirements.

  • Legitimate interest – for improving the services at the studio and the online platform.

  • Consent – when subscribing to marketing communications and newsletters.

4. Data Retention Period

  • Order and payment data: Up to 10 years (pursuant to statutory accounting requirements).

  • Marketing data: Until you withdraw your consent.

  • Cookies: According to their type (session or persistent).

5. Data Sharing

"DAK Flow" Ltd. provides personal data to third parties only when necessary for the performance of a contract or due to a legal requirement, including:

  • Schedule management and online booking platforms (used for book.flowhavenpilates.com)

  • Payment operators for online payments (e.g., myPOS)

  • Accounting and government authorities (NRA, CCP, etc.)

6. Client Rights

Every client has the following rights under Regulation (EU) 2016/679:

  • Right of access to data

  • Right to rectification

  • Right to erasure ("right to be forgotten")

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

  • Right to lodge a complaint with the Commission for Personal Data Protection (CPDP)

7. Cookies

The website uses cookies to improve performance and user experience. Users can manage or disable cookies through their browser settings.

8. Data Security

"DAK Flow" Ltd. applies technical and organizational measures for data protection, including SSL certificates, connection encryption, and restricted database access limited to authorized personnel only.

9. Contacts

For questions related to the processing of personal data:

  • Email: info@flowhavenpilates.com

  • Phone: 0890228005

Complaints may also be filed with the Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592; Website: https://www.cpdp.bg/