Privacy Policy
Last updated: 27 May 2026
This Privacy Policy explains what personal data we collect, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR). The data controller is Magic Gathering Golden Cat, Gabrovo, Bulgaria — contact [email protected].
1. Data we collect
Mailing list: email address (provided by you on goldencat.eu/2027-edition). Registration: name, email, phone, country, and the answers you give in the festival registration form (pack selection, hotel choice, dietary notes, etc.). Server logs: IP address, browser user-agent, and timestamp, retained briefly for security and abuse prevention.
2. Why we use it (lawful basis)
Performance of contract (Art. 6(1)(b) GDPR): processing your registration and providing the services you've paid for. Consent (Art. 6(1)(a) GDPR): sending marketing emails about the festival. You can withdraw this consent at any time using the unsubscribe link in every email. Legitimate interests (Art. 6(1)(f) GDPR): keeping the site secure and operating it reliably.
3. Third parties (processors)
We use a small set of service providers, each under a data-processing agreement: Resend (email delivery and mailing list — EU/US), Heroku and AWS (web hosting — EU region), Cloudflare (DNS and edge caching — global). We do not sell or share your data for advertising.
4. How long we keep it
Registration data: up to 24 months after the edition you registered for, to handle post-event communication and accounting obligations. Mailing list: until you unsubscribe. Server logs: 30 days.
5. Your rights
Under GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).
6. Cookies & local storage
We use a small number of strictly necessary cookies and browser storage entries: an authentication cookie for admin access (`gc_admin`, set only when an administrator logs in) and a language preference saved in localStorage (`goldencat:lang`). We do not use third-party analytics or advertising cookies.
7. Children
The festival is open to all ages, but accounts and registrations should be made by an adult guardian for participants under 16.
8. Changes to this Policy
We will keep this page up to date. Material changes will be highlighted at the top of the page and, where appropriate, communicated by email.