Privacy Policy

Updated: March 2026

This Privacy Policy explains how BANSKO EXTREME (“we”, “our”, or “us”) collects, uses, and protects personal data when you use our website BANSKOEXTREME.COM (the “Site”) and our services, including booking and payment of tours.

By using our Site, you agree to the practices described in this Privacy Policy.

1. Data Controller

Company name: BANSKO EXTREME
Email: banskoextreme@gmail.com
Phone: +359886705568

If you have any questions regarding your data, please contact us at banskoextreme@gmail.com.

2. Data We Collect

We may collect the following personal data when you interact with us:

Contact details: name, email, phone number
Booking information: number of people, travel preferences, comments
Payment details: processed securely via PayPal (we do not store card details)
Technical data: IP address, browser type, cookies, and usage information

3. Purpose of Processing

We process your data for the following purposes:

To process tour bookings and payments
To issue invoices and comply with accounting/legal obligations
To communicate with you regarding your booking
To send marketing messages (only if you have given explicit consent)
To analyze website usage and improve our services

4. Legal Basis for Processing

We process your data under the following legal grounds:

Performance of a contract (to provide booked services)
Legal obligations (invoicing, accounting, tax compliance)
Your consent (for newsletters, cookies, or marketing)
Legitimate interest (to improve our services and ensure security)

5. Data Sharing

We may share your data with trusted third parties only when necessary:

Payment providers: PayPal
Tour partners (e.g., hotels, transportation providers)
IT and hosting service providers
Analytics and marketing platforms (only with your consent)

We do not sell or rent your personal data.

6. Data Retention

We store personal data only for as long as necessary:

Booking and contract data: 5 years (in accordance with accounting law)
Marketing data: until you withdraw consent
Technical logs: up to 12 months

7. Your Rights Under GDPR

As a data subject, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time
File a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP)

8. Cookies and Analytics

We use cookies and similar technologies for website functionality, analytics, and marketing.

Functional cookies: required for the Site to work
Analytics cookies: e.g., Google Analytics (policies.google.com/privacy)
Marketing cookies: e.g., Meta Pixel (facebook.com/privacy/policy)

You can manage cookies in your browser settings or via our cookie consent banner.

9. Payments

Payments on our Site are processed securely via PayPal. We do not store credit card details.

Refunds and cancellations are handled according to our [Refund & Cancellation Policy link].

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including SSL encryption, restricted access, and secure servers.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with the updated effective date.

12. Contact