Privacy and cookie policy

1. Who is responsible for your data

The controller of personal data collected through www.vsskursove.com is Filip Silov, who builds and maintains the site as a volunteer to support the Water Rescue department of the Bulgarian Red Cross Regional Council, Varna.

For any question about personal data: fsilov@gmail.com.

The courses themselves are organised and run by the BRC Regional Council, Varna. Data the BRC processes while running a course (documents, exams, issuing certificates) is handled by the BRC under its own rules.

2. What we collect and why

Course registration form and contact form

When you fill in either form, we collect what you enter: name, phone, email, the course you are applying for, and your message.

• Purpose: to answer your enquiry and place you in a course group.
• Legal basis: taking steps at your request before enrolling in a course (Art. 6(1)(b) GDPR).
• Recipients: on submission the form is emailed to the Water Rescue department of the BRC Regional Council, Varna (waterrescue.varna@redcross.bg), where the specialists form the groups and contact applicants, with a copy to the site's administrator mailbox (vssvarna@abv.bg).
• Storage: the site does not save submissions in a database — they exist only as emails in those two mailboxes. They are kept for up to 12 months after sending, then deleted.

For the Young Lifeguard course (ages 12–17), the form should be completed by, or with the knowledge and consent of, a parent or guardian.

Visitor statistics (Google Analytics 4)

Only if you click “Accept” in the cookie banner do we use Google Analytics 4 to understand how many people visit the site and which pages are useful. Before you agree, the Google Analytics code is not loaded at all.

• What is collected: pages visited, where you came from (e.g. a search engine), device and browser type, approximate location (country/city). Google Analytics 4 does not store IP addresses.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings” at the bottom of every page.
• Recipient: Google Ireland Ltd. Data may be transferred to Google LLC in the USA; Google participates in the EU–US Data Privacy Framework.
• Retention: no longer than 14 months.

Hosting server logs

Like any website, the hosting provider's server automatically records technical request data (IP address, date and time, page requested, browser). It is used only for security and troubleshooting (legitimate interest, Art. 6(1)(f) GDPR) and kept for a short period according to the host's settings.

3. Cookies and local storage

The map on the Contact page (Google Maps) and the videos on the Demonstrations page (YouTube, reduced-cookie mode youtube-nocookie.com) do not load automatically. Your browser only connects to Google's servers when you click “Show the map” or “Play video”. Links to external sites (Bulgarian Red Cross, Lifeguard Shop) lead to sites with their own privacy policies.

4. Your rights

You may at any time request access to your data, its correction or deletion, restriction of processing, or data portability, and you may object to processing or withdraw your consent. Write to fsilov@gmail.com — we will reply within one month.

If you believe your rights have been infringed, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

5. Changes

If the way we handle data changes, we will update this page and the date at the top.