Privacy information
Updated: 6 November 2026.
Controller and contact
The controller is Ef Dzhi Ivents OOD (Еф Джи Ивентс ООД), Bulgarian company registration number 208551790. Correspondence address: Sofia, GRAO-1, unit 21, Frityof Nansen Street, level -1.
For privacy questions or to exercise your rights, contact info@event-hall.eu.
Data and purposes
For event enquiries, we process your name, phone number, email address, preferred venue, occasion, date, guest count, selected services and any message you choose to add. We use these details to respond, prepare a proposal and discuss arrangements.
Catering requests also include the selected items and quantities, start time, payment method and, if you request an invoice, the necessary invoice details. We use them to check and handle your request and related correspondence. The forms do not collect payment-card numbers or process online payments.
Please provide general menu requirements without names or health information about individual guests. Do not send unnecessary identity documents or other sensitive information. Submitting a form does not subscribe you to marketing messages.
Legal grounds
Necessary information for proposals and services is processed to take steps at your request before entering into a contract and to perform a contract: GDPR Article 6(1)(b). Necessary correspondence with representatives of organisations is based on our legitimate interest in responding and arranging the service: Article 6(1)(f).
Where a specific legal duty applies, such as an accounting-record obligation, the basis is Article 6(1)(c). Website security and prevention of abuse are based on our legitimate interests. Optional website measurement is carried out only with your consent: Article 6(1)(a).
Recipients
Event enquiries are sent to the venue team at eventslivingroom@gmail.com. Catering requests are also sent to the supplier at attila.tradeltd@gmail.com for handling. We send a separate copy to the email address you provide.
Authorised staff and providers needed for hosting, security, email, accounting and legal matters may have access according to their roles and applicable obligations. Form contents are not sent to advertising platforms.
Retention periods
Copies of enquiries and requests in the website database are subject to automatic deletion after 12 months from submission, and detailed measurement records after six months. Expired records are deleted during periodic automated maintenance.
For long-term monitoring of overall activity, we retain only monthly totals by request kind or action. These contain no names, contact details, session identifiers, IP addresses, free text, exact dates of planned events, venue/service combinations or customer characteristics.
Email correspondence and documents relating to commissioned services are kept separately according to their purpose, the applicable legal periods for each document and the need to establish, exercise or defend legal claims. When those grounds no longer apply, data are deleted or their retention is restricted as required. Deleting a website copy does not automatically delete information in the venue team's, supplier's or recipient's email account.
Session, basket and measurement
The essential seh_session cookie is valid for up to eight hours and supports form security and your measurement choice. Technical identifiers and request-rate limits help prevent abuse. The hosting service may process IP addresses and technical connection information. Hosting security also uses Cloudflare’s __cf_bm cookie to help detect automated abuse. It expires after 30 minutes of continuous inactivity.
Browser storage remembers your measurement choice in seh_measurement_consent and your catering basket's items and quantities in seh-catering-cart. The basket does not store the names, contact details or messages entered in the form. These local records remain until you change the choice, clear the basket or clear browser storage.
Optional measurement is off by default. If you allow it, we record limited actions such as page views, venue choices or telephone-link clicks, linked to a pseudonymous session identifier. Form contents are not included. You can change your choice through “Measurement settings” in the footer without losing access to the forms or core services.
External services and international processing
The website uses hosting and security infrastructure through OpenAI Sites/Cloudflare and email through Google. Providers may also process information outside the European Economic Area. Google and Cloudflare publish information about the mechanisms they use for international transfers, including adequacy decisions and standard contractual clauses where applicable. Contact us for information about the applicable safeguards or a copy of them.
Maps are provided by Google Maps and load only after your action, not automatically when you open a page. Loading a map may share your IP address and technical connection information with Google. When you open an external website or application, that provider's own policies also apply.
Google — data transfer frameworks · Google — privacy policy · Cloudflare — privacy policy
Your rights
Subject to the GDPR's conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, contact info@event-hall.eu. We normally respond within one month and will notify you in time if a legally permitted extension is needed. We may request only information necessary to verify your identity.
You may complain to Bulgaria's Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, kzld@cpdp.bg, or another competent supervisory authority.
Required details and automated decisions
Fields marked as required are necessary to process the relevant enquiry or request. We cannot process the form if those details are missing. We do not make decisions with legal or similarly significant effects on you based solely on automated processing.
