Last updated:
1. Controller and Contact Details
The personal data controller is „Иновативен Къмпинг“ ЕООД (Inovativen Kamping EOOD) , Unified Identification Code (UIC): 204190240, with its registered office and business address at 46 Neofit Rilski Street, Sredets District, Sofia, Bulgaria, referred to below as the “Company” or “we”.
Enquiries about personal data and cookies should be sent to info@adventure-shop.bg or to the address above.
2. Relationship with the Privacy Policy and Terms and Conditions
This policy explains the use of cookies and similar technologies on Adventure-shop.bg. Detailed information about personal data processing is provided in the store's separate Privacy Policy, which forms an integral part of the Terms and Conditions. This document supplements, but does not replace, the Privacy Policy.
Reading these documents or accepting the Terms and Conditions does not constitute consent to optional cookies or marketing communications.
3. What Are Cookies?
Cookies are small text files stored by your browser on your device. They can remember information between pages or visits, such as your language, currency, or wishlist.
Similar purposes can be achieved through pixels, browser local storage, and other technologies. The applicable rules depend on what a technology actually does and its purpose, rather than its name alone.
Cookies and related information may constitute personal data, including online identifiers and information about website activity. The absence of a name does not necessarily mean that information is anonymous.
4. Main Processing Purposes and Legal Bases
The following table summarises the main purposes of personal data processing in connection with the store, including the purposes listed in the “Personal Data and Cookies” section of the Terms and Conditions.
| Purpose | Legal Basis | Relevant Provision of the General Data Protection Regulation (GDPR) |
|---|---|---|
| Order fulfilment and delivery | Performance of a contract | Article 6(1)(b) GDPR |
| Issuing invoices and accounting | Legal obligation | Article 6(1)(c) GDPR |
| Handling product complaints and returns | Performance of a contract / legal obligation |
Article 6(1)(b) GDPR Article 6(1)(c) GDPR |
| Managing a customer account | Performance of a contract | Article 6(1)(b) GDPR |
| Sending newsletters and marketing | Consent | Article 6(1)(a) GDPR |
| Analytics and advertising cookies | Consent | Article 6(1)(a) GDPR |
| Defending legal claims | Legitimate interests | Article 6(1)(f) GDPR |
The contractual basis applies insofar as processing is necessary for a requested service or a contract with the individual. For legal claims, the legitimate interest is establishing, exercising, or defending the Company's legal rights while taking the rights of affected individuals into account.
The GDPR legal basis for processing personal data is separate from the requirements for storing or accessing information on a device. The legal exemption for strictly necessary technologies applies only insofar as they are necessary to transmit a communication or provide an explicitly requested service. Legitimate interests do not replace consent where it is required for optional cookies.
5. Categories of Cookies and Tracking Technologies
5.1. Strictly Necessary
These technologies provide functions necessary for the service you request, such as maintaining a session. They are not used for optional advertising tracking. A cookie is not automatically necessary simply because it is set by the store.
5.2. Functional
These support preferences and conveniences when using the store, including saved products and browsing history. Where a particular function does not qualify for the legal exemption for an explicitly requested service, it is activated after consent.
5.3. Analytics — Google Analytics
The website uses Google Analytics to analyse visits and interactions with the store. Depending on the configuration, online identifiers, visited pages, events, and browser and device information may be processed. The service is activated only after prior express consent for analytics purposes.
5.4. Marketing — Meta Pixel
The website uses Meta Pixel to measure advertising results and for marketing purposes, including reaching audiences based on their interactions with the store. This may involve linking events to online identifiers and profiling for advertising. The service is activated only after prior express consent for marketing purposes.
6. Observed Cookies and Lifetimes
The following entries were observed on the test website 4021.website on 23 September 2026 in a new browser session, including after viewing a product and adding it to the wishlist. Lifetimes were inferred from the displayed expiry dates; the exact renewal mechanism was not established by this check.
| Cookie | Purpose Inferred from Observed Behaviour and the Name | Observed Lifetime |
|---|---|---|
OCSESSID |
Maintaining the user session | Session cookie; no fixed expiry date |
currency |
Remembering the currency used to display prices | Approximately 30 days |
language |
Remembering the store language | Approximately 30 days |
cookieWishlist |
Saving products to the wishlist | Approximately 1 year |
universal_recently_viewed
|
Remembering recently viewed products | Approximately 30 days |
The language cookie was observed
in two domain scopes with the same visible expiry date.
Domains and settings must be checked again
after migration to Adventure-shop.bg.
Deleting cookies may remove saved preferences and lists.
Session cookies have no fixed expiry date; their behaviour when a session is restored depends on the browser. A cookie's lifetime does not automatically determine how long data is retained in the store's or external providers' systems.
[Before publication: add the specific cookies and similar technologies used by Google Analytics and Meta Pixel, their providers, domains, purposes, and actual configured lifetimes. These were not identified in the supplied screenshots. Also check for additional entries during sign-in, checkout, payment, and cookie banner choices.]
7. Consent, Refusal, and Changing Your Choice
Analytics and marketing cookies and technologies, including Google Analytics and Meta Pixel, are activated only after prior express consent given through the cookie management banner. Without such consent, only strictly necessary technologies are used.
The banner allows you to accept optional categories, reject them, or choose individual categories. Refusal is as easy as acceptance. Optional categories are not enabled in advance. Scrolling, continuing to browse, or closing the banner does not constitute consent.
You can change or withdraw consent at any time through “Cookie Settings” on the website. Following withdrawal, the corresponding consent-based processing stops. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Your choice normally applies to a particular browser and device. You may need to make it again when using another browser or deleting the saved choice.
[Before publication: verify the banner behaviour described above and specify how long the choice and consent records are retained.]
8. Data Recipients
For the relevant activities, personal data is disclosed only to recipients where there is a need and an applicable legal basis, including:
- Courier companies for delivery.
- Payment service providers for payments and refunds.
- Technical partners providing website maintenance and hosting.
- Legal, accounting, and auditing service providers.
- Competent authorities where required by law.
- The providers of Google Analytics and Meta Pixel for the analytics and marketing purposes described, after the required consent.
Using external analytics and advertising tools may involve disclosing data to their providers. Recipients, their roles, and any other services are described in detail in the Privacy Policy.
Transfers outside the European Economic Area are subject to Chapter V GDPR. The specific countries, recipients, transfer mechanism, and safeguards are identified according to the actual services used. Cookie consent is not automatic blanket authorisation for international transfers.
9. Newsletter and Marketing Consent
The Company processes personal data for marketing only on the basis of prior, freely given, specific, informed, express, and unambiguous consent. Newsletter consent is requested separately from acceptance of the Terms and Conditions and the choice concerning cookies.
Consent can be withdrawn at any time, free of charge, by emailing info@adventure-shop.bg or using the unsubscribe mechanism in the relevant marketing message. For analytics and advertising technologies, you can also use the website's cookie settings.
Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. Unsubscribing from marketing does not stop messages necessary to fulfil an order or comply with a legal obligation.
10. Browser Controls
You can view, block, and delete cookies through your browser settings. Blocking necessary cookies may interfere with the session and the store's core functions.
To withdraw consent, also use the website settings. Deleting files alone does not guarantee that your choice has changed in all connected systems or that previously collected data has been erased.
11. Your Rights and Complaints
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing, and data portability; the right to object to processing based on legitimate interests; the right to withdraw consent; and the right to lodge a complaint.
You can object to direct marketing at any time, including associated profiling.
To exercise your rights or make an enquiry, email info@adventure-shop.bg. You do not have to contact us first before lodging a complaint with a supervisory authority.
Bulgarian Commission for Personal Data Protection (CPDP)
- Address: 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, Bulgaria
- Telephone: +359 2 915 3518
- Website: www.cpdp.bg
Methods and requirements for submitting complaints are published on the CPDP website.
12. Data Protection Officer
According to the Company's stated assessment of its activities, it is not required to appoint a Data Protection Officer under Article 37 GDPR: the Company is not a public authority, and its core activities do not involve regular and systematic monitoring of individuals on a large scale or large-scale processing of special categories of personal data or data relating to criminal convictions and offences.
This assessment is reviewed when activities or applicable requirements change. The absence of an appointment obligation does not exempt the Company from its other data protection obligations. The contact for these matters is info@adventure-shop.bg.
13. Changes to This Policy
We update the policy when technologies, providers, purposes, retention periods, or legal requirements change. Each new version is published with a date.
Where new consent is required, we request it before the relevant processing. Publication of a new version alone does not constitute consent.