1. Data controller
Kilian Fit EOOD, Bulgarian company number 208815610, at block 910A, entrance A, floor 5, apartment 15, Lyulin residential district, Lyulin administrative district, Sofia 1324, Bulgaria, determines the purposes and means of processing data needed for Coco Pilates classes and bookings. Contact the company about personal data at krasteva.nikoleta7@gmail.com or at its registered address.
NEBIX OOD supplies the Slotify platform and processes booking data on the studio's instructions. NEBIX OOD may be a separate controller for its own accounts, security and technical operation under the Slotify Privacy Policy.
2. Data processed
A booking may involve your name, email or phone number, selected class, location, specialist, date and time, booking status and notes you provide. Package records may include the type, validity and remaining visits. For payments made outside the platform, the studio processes the payment and accounting details needed for the chosen payment method.
The platform processes technical data needed for access, security and diagnostics. Health data is not required for a standard booking. Please do not enter sensitive information in free-text fields unless the studio has separately explained why it is needed and how it will be processed.
3. Purposes and legal bases
The studio uses data to accept and fulfil bookings, organize classes, manage packages and send related operational messages. The basis is performance of a contract or steps you request before entering one. Data needed for accounting and other statutory duties is processed to comply with a legal obligation.
Limited technical data may be used to prevent abuse and keep the service reliable on the basis of legitimate interests. Promotional messages or optional tracking require a separate applicable basis, including consent where the law requires it.
4. Recipients and transfers
Authorized studio staff can access bookings where needed to serve you. Slotify uses hosting and database providers (Render and Neon), web content delivery and protection (Cloudflare), and operational email delivery (Resend). Data may be disclosed to authorities where required by law.
If a provider transfers data outside the European Economic Area, the appropriate legal transfer mechanism applies. You may request details of a particular transfer from the studio at krasteva.nikoleta7@gmail.com.
5. Retention
Booking and package data is kept while needed to provide and account for the service and protect related rights, as well as for applicable statutory periods. Accounting records are kept for legally required periods. Technical records are kept as needed for security and diagnostics.
For a specific retention period or deletion request, email krasteva.nikoleta7@gmail.com. Some data may need to remain where the law requires it or to defend legal claims.
6. Your rights
Where the legal conditions are met, you may request access, correction, erasure, restriction and portability of your data and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
You may send requests to Kilian Fit EOOD at krasteva.nikoleta7@gmail.com or at its registered address. You may also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or another competent supervisory authority.
7. Cookies, local storage and changes
The booking site uses a language-preference cookie for up to one year. When you sign in, the customer account token is stored in browser local storage. These support the functions you request; removing them may sign you out or reset the language preference.
If this policy changes, a new version will be published with an effective date. Previously published versions will remain available.