We collect only what a transfer cannot be carried out without, use it only to carry out that transfer, and give it to nobody who is not part of it. Separately, if you agree to it, we use Google Analytics to see which pages people read.
Who is responsible
The data controller is Progres 2018 EOOD, company number 204905003, trading as GS Travel. Address for correspondence: Okolovrasten pat 935, Sofia, Bulgaria. Email: office@gstravel-bg.com. Phone: +359 893 676 132.
What the booking form collects
Your name, telephone number and email; the route, date and time; the pick-up and drop-off addresses; your flight number if you gave one; the number of passengers and child seats; any extras you chose; your preferred way of paying; and whatever you wrote in the notes.
Alongside the request we also record the moment you gave consent, the language you booked in, and the price you were shown, so that both sides can refer to the same thing later.
None of this is collected until you send the form.
Why we need it
The legal basis is performance of the contract between you and us — the journey itself. Without an address we have nowhere to come, without a telephone number we cannot reach you if something changes at the last minute, and the flight number is what lets us track the landing and wait.
Records of paid services are also kept because accounting and tax law requires it.
Google Analytics
The basis here is different: your consent. Nothing loads and nothing is sent before you give it, and you can withdraw it at any time using the link at the foot of every page. What is collected is set out in the cookie notice.
Where you consent, Google Ireland Limited processes that data as our processor, and part of the processing takes place in the United States. The transfer relies on the European Commission’s adequacy decision under the EU-US Data Privacy Framework. That decision is in force at the time of writing and was upheld by the EU General Court in September 2025; it is under appeal to the Court of Justice, and if it were annulled we would reconsider whether to keep using the tool.
The analytics data does not contain your name, telephone number or email, and it is not linked to a transfer request.
Who sees the booking data
The people at GS Travel who handle bookings, and the driver doing your journey — he gets your name, address, time and telephone number, because he cannot do the job without them.
The data also physically sits with our hosting provider and passes through our email provider. They process it on our instructions and do not use it for their own purposes.
We do not sell or rent data to anyone for marketing. We hand data to a public authority only where the law obliges us to.
How long we keep it
Requests are kept for as long as they are needed to carry out the journey and to deal with any dispute or complaint afterwards. Documents relating to payment and invoicing are kept for the period accounting and tax law requires. After that they are deleted.
Your rights
Under the General Data Protection Regulation you may ask for access to your data, correction of anything inaccurate, erasure, restriction of processing, portability, and you may object to processing. Where the basis is consent, you may withdraw it at any time.
Write to office@gstravel-bg.com and we will answer within one month. If you think we have got it wrong, you can complain to the Bulgarian Commission for Personal Data Protection.
Children
Bookings are made by adults. When children travel we need only how many and what ages, so that the right seats are fitted — we collect no names or other details about them.
If this notice changes, the updated version is published on this page.