Privacy Notice.
This notice explains how personal data submitted through romanblazhkiv.com is collected, used, and protected — in line with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
Who is responsible for your data
The data controller for this website is:
Arms Wide Open Association
Registered office: 1B Emiliyan Stanev str., 1407 Sofia, Bulgaria
BULSTAT / EIK: 206919286
Represented by: Anna Hakman
Contact for privacy matters: info@armswideopen.bg
Data Controller · Art. 4(7) GDPRAny reference to "we", "us", or "the Association" on this site refers to Arms Wide Open Association. Roman Blazhkiv delivers the artistic practice and private classes under the Association's umbrella.
What data we collect
We only collect what you actively give us through the booking form:
- Name — so we know who to greet
- Email address — so we can reply
- Phone / WhatsApp number (optional) — if you prefer to be contacted there
- Preferred date and time — to schedule your class
- Number of sessions — single class or 5-class package
- Your intention for the class (optional) — what you'd like to explore
No account, no login, no tracking cookies, no analytics scripts, no advertising pixels, and no third-party embeds that read your identity. Video previews from YouTube and Vimeo load only when you click a thumbnail, and they operate under their own privacy notices.
How the form works
The booking form does not send data to any server owned by us. When you press Send request, the form composes a message and opens either:
- your email client with a pre-filled email to info@armswideopen.bg, or
- a WhatsApp chat pre-filled with the same text.
In both cases, you press Send — nothing is transmitted until you do. Once we receive your message, your data lives in our email inbox (Google Workspace) or WhatsApp Business, subject to those providers' own terms.
Why we process it (legal basis)
- Art. 6(1)(b) GDPR — performance of a contract: to arrange, confirm, and deliver the private class you requested.
- Art. 6(1)(f) GDPR — legitimate interest: to respond to your enquiry and keep a light record of correspondence.
- Art. 6(1)(c) GDPR — legal obligation: if a class is invoiced, we keep the accounting record as long as Bulgarian tax law requires.
Who sees your data
Only Roman Blazhkiv and the administrative team of Arms Wide Open Association. We do not sell, rent, or share your data with third parties for marketing. The technical services that carry your message (your email provider, WhatsApp, our email host) act as processors under their own agreements.
How long we keep it
- Booking correspondence — up to 12 months after your last class, then deleted or anonymised.
- Accounting records (invoices/receipts) — 5 years from the end of the tax year, per Bulgarian Accountancy Act.
- Anything you asked us to delete sooner — deleted on request, unless we're legally required to keep it.
Your rights
Under GDPR you have the right to:
- Ask what data we hold about you (access, Art. 15)
- Ask us to correct wrong data (rectification, Art. 16)
- Ask us to delete your data (erasure, Art. 17)
- Ask us to pause processing (restriction, Art. 18)
- Receive your data in a portable format (portability, Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, write to info@armswideopen.bg. We reply within 30 days.
You also have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), cpdp.bg.
International transfers
Our email provider and WhatsApp process data on infrastructure located inside and outside the EU. These providers rely on the European Commission's Standard Contractual Clauses (SCCs) for any transfers outside the EEA, in line with Chapter V GDPR.
Cookies & tracking
This website does not use cookies, analytics, or advertising trackers. Your browser stores one small preference locally (localStorage) to remember your booking selection between refreshes — it never leaves your device and identifies no one.
When you click a video thumbnail, the YouTube or Vimeo player loads and may set its own cookies at that moment, under Google's or Vimeo's terms respectively.
Changes to this notice
If we change how we handle data, we update this page and refresh the date at the top. Substantial changes will be announced by email to anyone currently in active correspondence with us.