Privacy Policy & Cookie Policy
Last Updated: 01.06.2026
At Dream Boats Ltd. (referred to as "we", "us", or "our"), we are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, process, and protect your personal data when you visit our website: https://dreamboats.bg.
1. Who we are
Data Controller:
Dream Boats Ltd.
Company Registration Number - BG206173655
Sofia, Bulgaria
Contact Email: office@dreamboats.bg
2. Our Legal Bases for Processing Personal Data
Under the GDPR, we only process your personal data if we have a valid legal basis to do so. Depending on how you interact with our website, we rely on the following bases:
Consent: You have given clear, explicit consent for us to process your personal data for a specific purpose (e.g., opting into marketing cookies, leaving a comment). You can withdraw this consent at any time.
Contractual Necessity: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legitimate Interests: The processing is necessary for our legitimate interests (or those of a third party), provided those interests do not override your fundamental rights and freedoms (e.g., detecting spam, ensuring website security).
Legal Obligation: The processing is necessary for us to comply with the law (e.g., tax regulations or administrative requirements).
3. Comments
When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist with spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to verify if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture becomes visible to the public in the context of your comment.
Legal Basis: Consent (by submitting the comment form) and Legitimate Interest (for spam prevention).
4. Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
5. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to improve performance, analyze traffic, and personalize your experience.
What are cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. Under GDPR, any non-essential cookies (such as analytics, functional, or marketing cookies) require your active, opt-in consent before they can be set.
How we categorize our cookies:
Strictly Necessary Cookies: These cookies are essential for the basic operation of our website, such as managing user logins or security features. These do not require your consent and cannot be turned off.
Example: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
Preferences / Functional Cookies: These cookies allow our website to remember choices you make to provide enhanced personal features.
Example: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
Example: When you log in, we will set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Example: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Analytics Cookies (Optional): We use these cookies to understand how visitors interact with our website (e.g., which pages are visited most often). We only deploy these if you explicitly consent via our cookie banner.
Marketing / Targeting Cookies (Optional): These cookies are used to deliver advertisements more relevant to you and your interests. We only deploy these if you explicitly consent.
How to Manage Your Cookie Consent
When you first visit our website, you will be presented with a Cookie Consent Banner that allows you to accept or reject optional cookies. You can update or withdraw your cookie preferences at any time by clicking on [Insert link/mechanism, e.g., "Manage Cookies" button at the bottom of the page].
You can also adjust your browser settings to block or delete cookies, though this may limit your ability to use certain features of the website.
6. Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. We do not control these third-party websites and recommend reading their respective privacy policies.
7. Who we share your data with
We do not sell, rent, or trade your personal data. We only share your data in the following limited circumstances:
Password Resets: If you request a password reset, your IP address will be included in the reset email.
Third-Party Service Providers (Data Processors): We may share your data with trusted third parties who perform services on our behalf (such as hosting, email delivery, or automated spam detection), under strict data processing agreements that guarantee GDPR compliance.
Legal Obligations: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
8. International Data Transfers
When we transfer personal data outside of the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:
Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Utilizing specific Standard Contractual Clauses (SCCs) approved by the European Commission which give personal data the same protection it has in Europe.
9. How long we retain your data
We only retain personal data for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.
Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
Registered Users: For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
10. Your Rights Under GDPR
As a data subject residing in the EU/EEA, you hold the following statutory rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data, provided we are not obliged to keep it for administrative, legal, or security purposes.
Right to Restrict Processing: You can request that we limit the processing of your data under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, machine-readable format.
Right to Object: You have the right to object to our processing of your personal data, including for direct marketing purposes.
Right to Withdraw Consent: Where our processing is based on your consent, you can withdraw that consent at any time.
To exercise any of these rights, please contact us at [Insert Email Address]. We will respond to your request within 30 days.
11. Where your data is sent
Visitor comments may be checked through an automated spam detection service.
12. Right to Lodge a Complaint with a Supervisory Authority
If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection authority.
The primary supervisory authority for our website is the Bulgarian Commission for Personal Data Protection (CPDP):
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Email: kzld@cpdp.bg
Website: www.cpdp.bg
You may also lodge a complaint with your local supervisory authority in the EU Member State of your habitual residence or place of work.