Privacy Policy

1. Data Controller

The data controller is ABILITY Language School, 32 Mihail Bubotinov St., Block 5, Entrance V, Ivan Vazov District, 1408 Sofia, Bulgaria.

Contact: email asenova.a@abilityschool.eu, phone +359 878 46 74 29.

2. What Data We Collect

The site requires no registration and has no user accounts. We process personal data only in the following cases:

• Contact form: your name, email address, phone number (optional) and the text of your message. The data is sent directly to us by email and is not stored in any website database.
• Server logs: our hosting provider automatically records the IP address, date and time of access, and the page requested, for security and service stability.
• Browser local storage: we store only your consent choice (key "ability-consent-v1"). The site uses no tracking, analytics or advertising cookies.

3. Purposes and Legal Bases

• Responding to your enquiries and providing course information — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) (legitimate interest in answering correspondence).
• Loading external content (Google Maps) — solely on the basis of your explicit consent, Art. 6(1)(a) GDPR. You may withdraw consent at any time.
• Security and technical maintenance of the site — Art. 6(1)(f) GDPR.
• Providing personal data via the form is not a statutory or contractual obligation — it is needed solely so that we can answer your enquiry.
• We use no automated decision-making and carry out no profiling.

4. Google Maps

The map on the contact page loads only after your explicit consent. When loaded, your browser connects to servers of Google Ireland Ltd. and Google LLC (USA), transmitting your IP address and technical browser data. Transfers to the USA are based on the EU–U.S. Data Privacy Framework.

More information: Google's privacy policy — https://policies.google.com/privacy.

5. Recipients

Your data may be accessed only by our hosting provider (as a data processor) and our email service provider. We never sell personal data or share it with third parties for marketing purposes.

6. Retention

Contact-form messages are kept in our mailbox only as long as needed to handle your enquiry and any follow-up, and no longer than 12 months unless a contractual relationship arises. Your consent choice remains in your browser until you delete or change it.

7. Your Rights

Under the GDPR you have the right to:

• access your personal data and information about its processing;
• rectification of inaccurate data;
• erasure ("right to be forgotten");
• restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw any consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

8. Complaints to the Supervisory Authority

If you believe your rights have been violated, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, email kzld@cpdp.bg, website www.cpdp.bg.

9. Cookies and Local Storage

• "ability-consent-v1" (localStorage) — stores your consent choice; remains until you delete it; strictly necessary.
• Google Maps may set its own cookies only after you consent to loading the map.
• The site uses no analytics, advertising or tracking cookies.

10. Changes to This Policy

This policy may be updated when the site or legislation changes. The current version is always published on this page with the date of the last update.