Data Controller and Owner
"KUULSAUND" OOD (UIC 205613968), operating as "Club CODE" — Address: boulevard "Knyaginya Maria Luiza" 1,
4000 Tsentar, Plovdiv, email: info@clubcode.bg
Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, are Cookies, Browsing and usage Data, Email, and Password. Other Personal Data collected may be described in other sections of this privacy policy or in dedicated explanation text contextually related to the Data collection. The Personal Data may be freely provided by the User or collected automatically when using this Application.
Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application, unless stated otherwise, serves to identify Users and remember their preferences for the sole purpose of providing the service required by the User.
Failure to provide certain Personal Data may make it impossible for this Application to provide its services. The User assumes responsibility for the Personal Data of third parties published or shared through this Application and declares to have the right to communicate or broadcast them, thus relieving the Data Controller of all responsibility.
Additional information about Data collection and processing
Legal Action
The User's Personal Data may be used for legal purposes by the Data Controller, in Court, or the stages leading to possible legal action arising from improper use of this Application or the related services.
Additional Information about User's Personal Data
In addition to the information in this privacy policy, this Application may provide the User with contextual information concerning particular services or the collection and processing of Personal Data.
System Logs and Maintenance
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System Logs) or use for this purpose other Personal Data (such as IP Address).
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time at its contact information.
The rights of Users
Users have the right, at any time, to know whether their Personal Data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy, or to ask for them to be supplemented, canceled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.
Changes to this privacy policy
The Data Controller reserves the right to change this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended that you check this page often, referring to the date of the last modification listed at the bottom. If a User objects to any of the changes to the Policy, the User must cease using this Application and can request the Data Controller to erase the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Data Controller has about Users.
Information about this privacy policy
The Data Controller is responsible for this privacy policy, prepared from the modules provided by Club Code and hosted on the Club Code servers.
Ambassador Program & member accounts (added 2026-07-25)
We process: points balance and history, completed missions and submitted proofs (links), referral relations (who invited whom), vouchers and their use, dashboard notifications. Basis: performance of contract (Art. 6(1)(b) GDPR). Retention: while the account is active, +5 years where a monetary value is involved.
Personal QR checks
When your personal QR is scanned we process the time, type (door/bar), the scanning staff member and ticket/guest status. Basis: contract and legitimate interest (security, abuse prevention). Retention: 12 months unless disputed.
Phone reservations
We process name, phone number, date and party size. If the number matches an account, the reservation is linked to it and earns Program points. Calls with the automated assistant may be recorded for quality; you are notified at the start of the call. Retention: 12 months.
Invited guests ("Guest +1")
When a member provides a friend's email for a personal invitation, we process it solely to send the invite and activate the free entry. Basis: legitimate interest, with an objection option in every email. If the invite is not accepted, the email is deleted automatically after 30 days; the invitee may request immediate deletion at info@clubcode.bg.
Payments & subscriptions
Card payments are processed by Stripe Payments Europe Ltd. (Ireland); we never store full card data. For subscriptions (e.g. "Gold Member") we keep status, period and payment history. Basis: contract; accounting law (up to 10 years).
Program cookies
code_ref_* — referral cookie (30 days, records who invited you); gi_* — guest-invite cookie (30 days, HttpOnly). Functional only, set after clicking an ambassador link/invite.
Your rights
Access, rectification, erasure, restriction, portability, objection — at info@clubcode.bg (reply within 1 month). Complaints: Bulgarian CPDP, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, cpdp.bg.