Privacy Policy

The data controller in our relations under this Policy is The Pine OOD, with UIC 207465299, located in Levochevo village 4743, Bulgaria. Registered as a tour operator per Certificate №РК–01–8689 / 19.02.2026.

You may contact us by mail to the registered office, by email at info@thepine.world, or by phone at +359 876 489 772 (working days 10:00–18:00 local time).

We collect data you submit directly: names, contact information, addresses, payment details, participant information, and communication records.

We also collect technical data automatically: IP address, device used, operating system, browser type, location, and cookies data.

Data may also reach us from third parties such as banks, public registers, and employers. Provision of certain data is contractually necessary. You warrant that submitted information is accurate and that you have authority to share it.

Our website may contain third-party links and ads; The Pine is not responsible for external privacy practices. Users must be at least 18 years old.

The primary purpose of processing is to enter into and to perform a service agreement between us.

Additional purposes include service communication, administrative notices, marketing materials (with opt-out options), legal compliance, fraud prevention, rights protection, and service improvement through statistical analysis.

Processing is based on contract necessity for service delivery, or on alternative legal bases including: your consent for marketing communications, legal obligations we are subject to, or our legitimate organisational interests.

Data recipients may include: accommodation operators, airlines, insurance companies, instructors, accounting providers, software vendors, hosting services, payment processors, government authorities, and third parties involved in fraud investigations or business reorganisations.

Transfer of personal data to jurisdictions outside the European Union occurs only with adequate safeguards under GDPR Article 46 or 47, including Standard Contractual Clauses, or with your explicit consent.

You may: withdraw consent at any time via email, phone, or mail; access a copy of your data; correct inaccuracies; request deletion where legally permitted; restrict processing; obtain your data in a portable format; and object to processing.

You also have the right to lodge a complaint with a supervisory authority. For residents of Bulgaria, the relevant authority is the Commission for Personal Data Protection.

Data retention periods vary by category: contract-related data is retained generally for 5 years from the date of performance; accounting data is kept per statutory requirements; marketing data is retained until you withdraw consent. Aggregate statistical reports may be retained indefinitely.

The Pine does not use software for automated processing of personal data in decision-making without human review. You may object to decisions made solely by computer.

Policy updates are published on our website. Changes that affect how we use data collected under your consent will require your notification and new consent before taking effect.