Privacy information Version 2026-11-07 · Prepared for sales activation. The portal currently accepts no orders.

The controller is Association Dancing Allstars Clique, Bulgarian UIC 177140398, 32 Golo Bardo Street, Pernik, Bulgaria. Privacy requests: privacy@allstars.events. Order support: contact.allstarsevents@gmail.com.

Orders require the buyer's name and email, event, zone and quantity. Individual holder names are optional. A national ID number, date of birth, identity-document image or child's account is not required. Only supply data you are entitled to provide. A parent/legal representative or authorized adult places child-ticket orders. Event-specific accompaniment rules are stated separately.

We process the request, payment confirmation, correspondence, ticket number, random QR identifier, entry status/time and staff-device identifier. The portal does not collect card payment data. Do not send complete bank statements containing unrelated transactions.

Purposes are order fulfilment, ticket delivery, admission, duplicate-use prevention, accounting and dispute handling. Legal bases are contract preparation/performance, applicable legal obligations and legitimate interests in security and defence of claims. Blanket data-processing consent is not required for these purposes. No automatic marketing enrolment, profiling or automated decisions with legal effects are used.

Access is restricted to organizer and gate staff as needed. Hosting, business email and encrypted-backup providers support fulfilment and security. Intended providers include SuperHosting and Google for email/Drive. Applicable processor arrangements and any international-transfer safeguards must be verified before sales. Banks/Revolut process transfer information under their own terms. Personal data are not sold.

Approved retention policy for activation: unpaid requests up to 30 days after the event; operational tickets and admission records up to 12 months after the event; technical logs up to 90 days; backup rotation up to 90 days. Accounting documents are retained separately for the applicable statutory period. Records necessary for a specific dispute or legal obligation are restricted and kept until that basis ends. Correction history follows the relevant retention period rather than being kept forever merely because it is append-only. These periods must be implemented in the operating procedure before opening; the current preparation deletes no records.

You may request access, rectification, erasure, restriction, portability or object where the relevant right applies. Erasure does not override mandatory accounting retention or a valid need to preserve evidence. GDPR response procedures and time limits apply, normally one month. You may complain to the Bulgarian Commission for Personal Data Protection: https://cpdp.bg/.

Only necessary organizer/scanner sessions are planned. This preparation page uses no advertising cookies, analytics or external fonts. Future optional technologies will not load before the applicable permission.