Privacy and data protection (GDPR)
Last updated 12 October 2026
This notice explains what personal data we collect through cocoagency.bg, why, and what your rights are under the General Data Protection Regulation (EU) 2016/679 and Bulgarian law.
1 · Who is responsible
The controller of your data is Coco Agency, Lavele 18A, 1000 Sofia, Bulgaria, registration number 202075523. For anything about your data, write to dan@cocoagency.bg.
2 · What we collect, and why
- If you send an enquiry: your name, company or venue, email address and what you tell us about your event. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in answering enquiries.
- If we work together: the contact, contract and invoice details needed to deliver the exhibition, event or service. Legal basis: carrying out a contract.
- Records we must keep: invoices and accounting records required by tax and accounting law. Legal basis: a legal obligation.
- When you visit: the company that hosts this website records technical data that every browser sends, such as your IP address, the time and the page requested, to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure website.
We ask only for what we need. We do not collect sensitive data, we do not build profiles, and no decision about you is made by automated means.
3 · Cookies and tracking
This website sets no cookies of its own and uses no analytics, advertising or tracking tools. Links to Facebook and YouTube are ordinary links: nothing is sent to those networks unless you choose to open them, and their own privacy rules then apply.
The typefaces on this site are loaded from Google Fonts. To deliver them, Google receives your IP address and basic browser details. Google states that it does not use this to build profiles; see Google’s privacy policy.
4 · Photos of events
Photos on this website show our exhibitions and events, and some show visitors. If you appear in a photo and would like it removed, write to us and we will take it down.
5 · Who receives your data
We do not sell your data and we do not pass it on for others’ marketing. It is handled on our behalf only by the services we need to run the site and our work: our web host, our email provider, our accountant and, for a booked project, the partners needed to deliver it, such as transport companies. Each is bound to protect it. Where any of them processes data outside the European Economic Area, this is done under the safeguards the Regulation requires, such as the European Commission’s standard contractual clauses.
6 · How long we keep it
- Enquiries: for as long as needed to answer you, and normally no more than two years after our last exchange.
- Contracts and invoices: for the period required by tax and accounting law.
- Technical logs: for a short period set by the web host.
7 · Your rights
You have the right to ask us for a copy of your data; to have it corrected; to have it erased; to have its use restricted; to receive it in a portable form; to object to its use; and to withdraw a consent you have given, without affecting what was done before. To use any of these rights, write to dan@cocoagency.bg. We reply within one month.
You also have the right to complain to a supervisory authority. In Bulgaria this is the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg. You may instead complain to the authority of the EU country where you live.
8 · Children
Our exhibitions are made for families, but this website does not knowingly collect personal data from children. The enquiry form is for adults.
9 · Changes
If we change how we handle personal data we will update this notice and its date.