GDPR & Privacy Policy
How we protect and handle your personal information
How we protect and handle your personal information
GDPR & Privacy PolicyLast updated: 8 August 2026
At 1st Choice, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you contact us, request travel services, make a booking or use our website.
1. Who We Are – Data Controller
1st Choice is responsible for the processing of personal data described in this Privacy Policy.
1st Choice
ul. "Tsveti Ivanov", Block 026
zh.k. Lyulin 1
1343 Sofia
Bulgaria
Email: [email protected]
Telephone: +359 884488039
If you have any questions about how we process your personal data, please contact us.
2. Personal Data We May Collect
Depending on the services you request, we may collect and process information such as:
• Name and contact details, including email address and telephone number
• Address and billing information
• Date of birth, nationality and gender where required for a booking
• Passport or other travel document information where necessary
• Travel preferences and booking details
• Flight, hotel, transfer, car rental, cruise, activity and other travel arrangements
• Loyalty programme or frequent traveller information where provided by you
• Information about fellow travellers included in your booking
• Special requests relevant to your journey
• Payment and transaction information
• Communications between you and 1st Choice
• Technical information generated when you use our website, where applicable
We only request information that is reasonably necessary to provide the service you have asked us to arrange.
3. Why We Process Your Personal Data
We may process your personal data in order to:
• Respond to enquiries and travel requests
• Prepare quotations and travel proposals
• Make and manage travel reservations
• Issue tickets and travel documents
• Arrange flights, accommodation, transfers, car rental, cruises, activities and other travel services
• Communicate with airlines, hotels, tour operators and other travel providers
• Process payments, invoices and accounting records
• Provide customer service before, during and after your journey
• Handle changes, cancellations, refunds or other booking-related matters
• Comply with legal, regulatory, accounting and security obligations
• Protect our legitimate business interests and prevent fraud or misuse
• Send marketing information where you have agreed to receive it or where otherwise permitted by law
4. Legal Basis for Processing
Depending on the circumstances, we process personal data on one or more of the following legal grounds:
Contract – when processing is necessary to provide travel services you have requested or to take steps before entering into an agreement.
Legal obligation – when we are required to process or retain information under applicable law.
Legitimate interests – where processing is reasonably necessary for the operation, administration, security and improvement of our business and services, provided that your rights and interests do not override those interests.
Consent – where you have specifically agreed to certain processing. You may withdraw your consent at any time where consent is the legal basis for processing.
5. Sharing Your Personal Data
To arrange and manage your journey, we may need to share relevant personal data with third parties involved in providing your travel services, including:
• Airlines and other transport providers
• Hotels and other accommodation providers
• Tour operators and destination management companies
• Transfer and car rental companies
• Cruise companies
• Activity, excursion and experience providers
• Reservation and booking systems
• Payment and financial service providers
• Technology and communication service providers
• Professional advisers and authorities where required by law
We only share information that is reasonably necessary for the relevant service or where we are legally required to do so.
Travel providers receiving your information may process your personal data under their own privacy policies and legal obligations.
6. International Transfers
Travel is international by nature. To arrange or provide your journey, we may need to transfer personal data to airlines, hotels, tour operators and other travel providers located outside the European Economic Area (EEA).
The data protection laws in some destination countries may differ from those within the EEA.
Where applicable law requires additional safeguards for an international transfer, we use appropriate legally recognised mechanisms or rely on another lawful basis permitted under applicable data protection legislation.
Only information reasonably necessary to arrange or provide the requested travel service will be transferred.
7. How Long We Keep Your Personal Data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and regulatory requirements.
Booking, transaction and invoice information may be retained for the period required under applicable accounting and tax legislation.
Information relating to enquiries that do not result in a booking will normally be retained only for as long as reasonably necessary to respond to the enquiry and manage our business records.
When personal data is no longer required, it will be deleted, anonymised or securely disposed of where reasonably possible.
8. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal information is limited to those who reasonably need it in order to provide services, administer bookings or fulfil legal and business obligations.
Please remember that no method of electronic communication or data storage can be guaranteed to be completely secure.
9. Your Data Protection Rights
Subject to applicable data protection legislation, you may have the right to:
• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data where legally applicable
• Request restriction of processing in certain circumstances
• Object to certain processing based on legitimate interests
• Request data portability where applicable
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a competent Data Protection Authority
To exercise your rights, please contact:
[email protected]
We may need to verify your identity before processing certain requests.
10. Marketing Communications
We may send you information about travel inspiration, offers or services where you have consented to receive such communications or where this is otherwise permitted by applicable law.
You may ask us to stop sending marketing communications at any time by contacting us or using an unsubscribe option where one is provided.
Stopping marketing communications will not prevent us from sending information necessary to manage an existing enquiry or booking.
11. Children
When a booking includes children, we may process the personal data necessary to arrange their travel.
Such information should normally be provided by a parent, legal guardian or another person authorised to make the booking.
We only process children's personal data to the extent reasonably necessary to arrange and provide the requested travel services or to comply with applicable legal requirements.
12. Information About Other Travellers
If you provide personal information about another person, for example a family member, colleague or other traveller included in a booking, you should ensure that you are authorised to provide that information.
Where appropriate, you should also make the other traveller aware that their personal data may be processed in accordance with this Privacy Policy.
13. Cookies and Website Data
Our website may use cookies or similar technologies that are necessary for website functionality or used for analytics and other permitted purposes.
Where required by law, non-essential cookies will only be used after the appropriate consent has been obtained.
Further information may be provided in our Cookie Policy or cookie settings, where available.
14. Third-Party Websites
Our website may contain links to websites operated by airlines, hotels, travel providers, activity providers or other third parties.
1st Choice is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the relevant provider's privacy policy when visiting an external website or providing personal information directly to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices or applicable legislation.
The latest version will always be published on this website together with the date of the most recent update.
16. Contact Us
If you have questions about this Privacy Policy, how we process your personal data or wish to exercise your data protection rights, please contact:
1st Choice
Email: [email protected]
Telephone: +359 884488039
You also have the right to lodge a complaint with the competent data protection authority if you believe that your personal data has been processed in breach of applicable data protection legislation.
At 1st Choice, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you contact us, request travel services, make a booking or use our website.
1. Who We Are – Data Controller
1st Choice is responsible for the processing of personal data described in this Privacy Policy.
1st Choice
ul. "Tsveti Ivanov", Block 026
zh.k. Lyulin 1
1343 Sofia
Bulgaria
Email: [email protected]
Telephone: +359 884488039
If you have any questions about how we process your personal data, please contact us.
2. Personal Data We May Collect
Depending on the services you request, we may collect and process information such as:
• Name and contact details, including email address and telephone number
• Address and billing information
• Date of birth, nationality and gender where required for a booking
• Passport or other travel document information where necessary
• Travel preferences and booking details
• Flight, hotel, transfer, car rental, cruise, activity and other travel arrangements
• Loyalty programme or frequent traveller information where provided by you
• Information about fellow travellers included in your booking
• Special requests relevant to your journey
• Payment and transaction information
• Communications between you and 1st Choice
• Technical information generated when you use our website, where applicable
We only request information that is reasonably necessary to provide the service you have asked us to arrange.
3. Why We Process Your Personal Data
We may process your personal data in order to:
• Respond to enquiries and travel requests
• Prepare quotations and travel proposals
• Make and manage travel reservations
• Issue tickets and travel documents
• Arrange flights, accommodation, transfers, car rental, cruises, activities and other travel services
• Communicate with airlines, hotels, tour operators and other travel providers
• Process payments, invoices and accounting records
• Provide customer service before, during and after your journey
• Handle changes, cancellations, refunds or other booking-related matters
• Comply with legal, regulatory, accounting and security obligations
• Protect our legitimate business interests and prevent fraud or misuse
• Send marketing information where you have agreed to receive it or where otherwise permitted by law
4. Legal Basis for Processing
Depending on the circumstances, we process personal data on one or more of the following legal grounds:
Contract – when processing is necessary to provide travel services you have requested or to take steps before entering into an agreement.
Legal obligation – when we are required to process or retain information under applicable law.
Legitimate interests – where processing is reasonably necessary for the operation, administration, security and improvement of our business and services, provided that your rights and interests do not override those interests.
Consent – where you have specifically agreed to certain processing. You may withdraw your consent at any time where consent is the legal basis for processing.
5. Sharing Your Personal Data
To arrange and manage your journey, we may need to share relevant personal data with third parties involved in providing your travel services, including:
• Airlines and other transport providers
• Hotels and other accommodation providers
• Tour operators and destination management companies
• Transfer and car rental companies
• Cruise companies
• Activity, excursion and experience providers
• Reservation and booking systems
• Payment and financial service providers
• Technology and communication service providers
• Professional advisers and authorities where required by law
We only share information that is reasonably necessary for the relevant service or where we are legally required to do so.
Travel providers receiving your information may process your personal data under their own privacy policies and legal obligations.
6. International Transfers
Travel is international by nature. To arrange or provide your journey, we may need to transfer personal data to airlines, hotels, tour operators and other travel providers located outside the European Economic Area (EEA).
The data protection laws in some destination countries may differ from those within the EEA.
Where applicable law requires additional safeguards for an international transfer, we use appropriate legally recognised mechanisms or rely on another lawful basis permitted under applicable data protection legislation.
Only information reasonably necessary to arrange or provide the requested travel service will be transferred.
7. How Long We Keep Your Personal Data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and regulatory requirements.
Booking, transaction and invoice information may be retained for the period required under applicable accounting and tax legislation.
Information relating to enquiries that do not result in a booking will normally be retained only for as long as reasonably necessary to respond to the enquiry and manage our business records.
When personal data is no longer required, it will be deleted, anonymised or securely disposed of where reasonably possible.
8. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal information is limited to those who reasonably need it in order to provide services, administer bookings or fulfil legal and business obligations.
Please remember that no method of electronic communication or data storage can be guaranteed to be completely secure.
9. Your Data Protection Rights
Subject to applicable data protection legislation, you may have the right to:
• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data where legally applicable
• Request restriction of processing in certain circumstances
• Object to certain processing based on legitimate interests
• Request data portability where applicable
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a competent Data Protection Authority
To exercise your rights, please contact:
[email protected]
We may need to verify your identity before processing certain requests.
10. Marketing Communications
We may send you information about travel inspiration, offers or services where you have consented to receive such communications or where this is otherwise permitted by applicable law.
You may ask us to stop sending marketing communications at any time by contacting us or using an unsubscribe option where one is provided.
Stopping marketing communications will not prevent us from sending information necessary to manage an existing enquiry or booking.
11. Children
When a booking includes children, we may process the personal data necessary to arrange their travel.
Such information should normally be provided by a parent, legal guardian or another person authorised to make the booking.
We only process children's personal data to the extent reasonably necessary to arrange and provide the requested travel services or to comply with applicable legal requirements.
12. Information About Other Travellers
If you provide personal information about another person, for example a family member, colleague or other traveller included in a booking, you should ensure that you are authorised to provide that information.
Where appropriate, you should also make the other traveller aware that their personal data may be processed in accordance with this Privacy Policy.
13. Cookies and Website Data
Our website may use cookies or similar technologies that are necessary for website functionality or used for analytics and other permitted purposes.
Where required by law, non-essential cookies will only be used after the appropriate consent has been obtained.
Further information may be provided in our Cookie Policy or cookie settings, where available.
14. Third-Party Websites
Our website may contain links to websites operated by airlines, hotels, travel providers, activity providers or other third parties.
1st Choice is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the relevant provider's privacy policy when visiting an external website or providing personal information directly to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices or applicable legislation.
The latest version will always be published on this website together with the date of the most recent update.
16. Contact Us
If you have questions about this Privacy Policy, how we process your personal data or wish to exercise your data protection rights, please contact:
1st Choice
Email: [email protected]
Telephone: +359 884488039
You also have the right to lodge a complaint with the competent data protection authority if you believe that your personal data has been processed in breach of applicable data protection legislation.