Privacy Policy
Website: Glovations (glovacations.com) Last Updated: August 5, 2026
1. Introduction
Glovations ("Glovations," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit glovacations.com (the "Website") or use our travel booking and content services, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Bulgarian data protection law.
By using the Website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
Glovations Email: admin@glovacations.com Phone: +359 88 211 4745
For any questions or requests regarding your personal data, please contact us using the details above.
3. What Personal Data We Collect
Depending on how you interact with the Website, we may collect the following categories of personal data:
a) Information you provide directly
- Name, email address, phone number
- Billing and payment information (e.g., card details, processed via our payment provider)
- Travel details (destinations, dates, passenger names, passport/ID information where required for bookings)
- Account login credentials (if you create an account)
- Communications you send us (support requests, comments, reviews)
b) Information collected automatically
- IP address, browser type, device type, operating system
- Pages visited, time spent on pages, referring website
- Cookies and similar tracking technologies (see Section 8)
c) Information from third parties
- Booking confirmations or updates from Third-Party Providers (hotels, airlines, tour operators)
- Payment confirmation data from payment processors
4. How We Use Your Personal Data
We process your personal data for the following purposes:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Processing and managing your bookings | Performance of a contract |
| Processing payments | Performance of a contract |
| Creating and managing your account | Performance of a contract |
| Responding to enquiries and customer support | Performance of a contract / Legitimate interest |
| Sending booking confirmations and essential service updates | Performance of a contract |
| Sending marketing communications (newsletters, offers) | Consent |
| Improving the Website and analyzing usage | Legitimate interest |
| Preventing fraud and ensuring security | Legitimate interest / Legal obligation |
| Complying with legal and tax obligations | Legal obligation |
Where processing is based on consent (e.g., marketing emails), you may withdraw your consent at any time (see Section 7).
5. Sharing Your Personal Data
We do not sell your personal data. We may share your data with:
- Third-Party Providers (hotels, airlines, tour operators, transport companies) as necessary to fulfill your booking;
- Payment processors to securely process transactions;
- Service providers who support our operations (e.g., hosting, email delivery, analytics, customer support tools), acting as data processors under our instructions;
- Legal and regulatory authorities, where required by law or to protect our legal rights;
- Professional advisors (e.g., accountants, lawyers) where necessary.
All third parties are required to protect your data in accordance with applicable data protection laws and only process it for the purposes we specify.
6. International Data Transfers
If your personal data is transferred outside the European Economic Area (EEA) — for example, to a Third-Party Provider or service provider located outside the EEA — we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, an adequacy decision, or another lawful transfer mechanism recognized under GDPR.
7. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of access – request a copy of the personal data we hold about you;
- Right to rectification – request correction of inaccurate or incomplete data;
- Right to erasure ("right to be forgotten") – request deletion of your data, subject to legal exceptions;
- Right to restrict processing – request that we limit how we use your data;
- Right to data portability – receive your data in a structured, machine-readable format;
- Right to object – object to processing based on legitimate interest or for direct marketing;
- Right to withdraw consent – withdraw consent at any time where processing is based on consent;
- Right to lodge a complaint – file a complaint with your local data protection authority, or with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg.
To exercise any of these rights, please contact us at admin@glovacations.com. We will respond within one month, as required by GDPR.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Website, remember your preferences, and analyze usage. These may include:
- Essential cookies – necessary for the Website and booking functionality to work;
- Performance/analytics cookies – help us understand how visitors use the Website;
- Functional cookies – remember your preferences (e.g., language, currency);
- Marketing/advertising cookies – used to deliver relevant advertising (only with your consent).
You can manage or withdraw your cookie consent at any time through our cookie consent banner/settings, or through your browser settings. Disabling certain cookies may affect Website functionality.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including:
- Booking and transaction records: for the duration required by Bulgarian tax and accounting law (generally up to 10 years);
- Account data: for as long as your account remains active, plus a reasonable period afterward;
- Marketing data: until you withdraw consent or unsubscribe;
- Customer support communications: for a reasonable period to resolve and document your enquiry.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, including encryption of payment data, access controls, and secure hosting. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Third-Party Links
The Website may contain links to third-party websites, including those of Third-Party Providers. This Privacy Policy does not apply to those websites, and we encourage you to review their privacy policies separately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Glovations Email: admin@glovacations.com Phone: +359 88 211 4745
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), the supervisory authority in Bulgaria, at www.cpdp.bg.