Privacy notice
This site has one enquiry form and nothing more. Here we set out what we collect through it, why, where it is kept and how to ask for it to be deleted. No small print.
1. Who handles your data
Your data is handled by Miki and Charli — two clowns from Sofia, working as private individuals. You can reach them by phone on 088 544 1418 or by email at rogdenidni@yahoo.com. The website is mikicharli.com. There is no appointed data protection officer — write or call us directly.
2. What we collect
When you send an enquiry through the form, we receive what you have filled in: your name, your email, the date of the event (which may also be "not decided yet"), a preferred time (which may be "flexible" or left empty), the location, the type of event (optional) and your message. Along with that, the page records a few technical values: which language the site was in when you sent the form (en or bg), when the enquiry was sent, the address of the page it was sent from, and your browser details (the so-called user agent). These help us know which language to reply in and work out what happened if something goes wrong. We collect nothing else. The form is for adults arranging an event — we do not knowingly collect data from children. Children do appear in some of the photographs, taken during real performances. No child's face is identifiable: every one is blurred before the photograph goes on the site.
3. Why we collect it
For one thing only: to answer your enquiry and arrange a performance. Nothing beyond that. There is no newsletter, no advertising, no profiling, and no automated decisions made about you.
4. On what legal basis
On two bases under the General Data Protection Regulation (GDPR). First, your consent, which you give with the tick box beside the form (Art. 6(1)(a)). Second, the steps taken before entering into a contract — that is, arranging the performance itself, which we do at your request (Art. 6(1)(b)).
5. How long we keep it
We keep your enquiry for 24 months, counted from the day we received it. After that period we delete it. The reason for that length is that people often get back in touch for the next birthday, and it helps to remember what we did for you last time. If you would like it deleted sooner, write to us and we will do it.
6. Where it is stored
Enquiries are stored in Google Cloud Firestore — a database that is part of Firebase — in a European region. Google acts as a processor on our behalf and is not permitted to use the data for its own purposes. The standard data processing agreement with Google applies.
7. Who we share it with
Nobody. Your data is not sold, is not passed to advertising networks and is not used for advertising. Apart from Google, which holds the database for us, no one else has access to your enquiry.
8. Cookies and local storage
The site sets no tracking or advertising cookies. There are no visitor analytics, no pixels, and no third-party scripts following you around. The only thing we leave in your browser is the language you chose — an entry called "mc-lang" in local storage. It is there simply so you do not have to switch the language every time you open the site. You can delete it at any time from your browser settings.
9. Fonts from Google
The page loads its typefaces from Google Fonts. That means that when you open the site, your browser makes a request to a Google server, and in doing so your IP address becomes known to Google. We do not receive that information and we do not record it, but we would rather tell you than leave it unsaid.
10. Your rights
In relation to your data you have the right to: access — to find out what we hold about you; correction — to have anything inaccurate put right; erasure; restriction of processing; portability — to receive your data in a readable form; objection to the processing; and withdrawal of your consent at any time, without affecting the lawfulness of the processing carried out before you withdrew it. For any of these, it is enough to write to us at rogdenidni@yahoo.com. We reply as quickly as we can, and we do not ask you to explain why.
11. Complaint to a supervisory authority
If you believe we have not handled your data properly, you can lodge a complaint with the Commission for Personal Data Protection (CPDP) — the supervisory authority in Bulgaria. You will find information on how to submit one on its website, cpdp.bg. We would be glad if you wrote to us first, so that we can try to put it right.
This notice was written for Miki and Charli and describes the site as it is today; it is worth having a lawyer read it over before the site goes live.