Last updated: 02 October 2026
Cineland Ltd. (“Cineland”, “we”, “us” or “our”) respects the right to privacy and the protection of the personal data of its customers, visitors and users.
This Privacy and Personal Data Protection Policy (the “Policy”) explains how we collect, use, store and protect your personal data when you:
• visit or use www.cineland.bg (the “Website”);
• use Cineland’s mobile applications (the “Mobile Applications”);
• create and use a user account;
• use our loyalty programme;
• purchase or reserve tickets, vouchers, products or other services;
• visit our cinema complexes;
• participate in events, premieres, special screenings, games, competitions or other initiatives organised by us;
• communicate with us;
• receive our marketing communications;
• interact with our advertisements and social media profiles; or
• use other services provided by Cineland.
This Policy also contains information about your rights and how you can exercise them.
The controller of personal data processed in connection with the Website, the Mobile Applications, the loyalty programme, our cinema complexes and Cineland’s other services is:
Cineland Ltd.
UIC: 203209199
Registered office and management address: 37 Pozitano St., Floor 3, Office 3, Vazrazhdane District, Sofia 1303, Bulgaria
In this Policy, we use the terms “Cineland”, “we”, “us” and “our”.
For questions regarding this Policy, the processing of your personal data or the exercise of your rights, you may contact us at:
Email: [email protected]
Correspondence address:
Cineland Ltd.
37 Pozitano St., Floor 3, Office 3
Vazrazhdane District
Sofia 1303, Bulgaria
We may obtain personal data:
• directly from you when you create an account, purchase a ticket or another service, participate in the loyalty programme, contact us or participate in one of our initiatives;
• through the Website and Mobile Applications;
• through our ticket sales, customer management and loyalty programme systems;
• through automated technologies such as cookies, pixels, SDKs, logs and similar technologies;
• through CCTV systems in our cinema complexes;
• from service providers that process information on our behalf;
• from payment service providers in connection with payments made;
• from social networks and advertising platforms such as Google, Facebook, Instagram, YouTube, TikTok and LinkedIn when you interact with our profiles, content or advertisements;
• from a person who provides your data in connection with a purchase or service for you;
• from our partners in connection with jointly organised events or initiatives, where an applicable legal basis exists.
Depending on how you use our services, we may process the following categories of personal data:
For example:
• first and last name and telephone number;
• date of birth or age information, where necessary;
• user identifier;
• customer account identifier.
For example:
• email address;
• telephone number;
• delivery address, where applicable.
For example:
• purchase history;
• points, bonuses or other benefits accrued and redeemed;
• offers used;
• preferences;
• information about account activity.
For example:
• tickets purchased;
• selected cinema complex;
• film, screening date and time;
• selected seats;
• products or vouchers purchased;
• transaction amount and status;
• cancellation or refund information.
Bank card payments are processed through a payment service provider.
As a rule, Cineland does not store your full bank card details. We may receive limited information relating to the transaction, such as the payment status, transaction identifier and other information necessary to process the purchase, issue refunds and comply with accounting requirements.
For example:
• IP address;
• device identifiers;
• device and browser type;
• operating system;
• approximate location information derived from technical data, where applicable;
• session information;
• pages visited;
• interactions with the Website or Mobile Applications;
• interactions with our electronic communications or social media advertisements;
• identifiers associated with cookies and advertising technologies, where applicable.
At certain events, we may process photographs, video recordings and, where applicable, audio recordings.
Separately, CCTV may be used in our cinema complexes for security purposes.
These activities serve different purposes and are described separately below.
When you purchase or reserve a ticket, voucher, product or other service, we may process your:
• name;
• email address;
• telephone number;
• order information;
• payment information and payment status;
• other information necessary to fulfil the order.
We use this data to:
• process the order;
• provide the purchased service;
• send you the ticket, confirmation or other information concerning the order;
• process a cancellation or refund;
• resolve a problem relating to the purchase.
What is our legal basis?
The processing is necessary for entering into and performing the contract between you and Cineland.
Certain information may also be stored and processed in order to comply with our legal obligations, including accounting and tax obligations.
When you create an account, you automatically participate in Cineland’s loyalty programme, and we may process the data necessary to:
• create and manage your account;
• identify the customer;
• accrue, redeem, add and adjust points, bonuses or other benefits;
• record the history of transactions involving points and rewards;
• provide offers and functionalities related to the programme;
• provide a gift, bonus, discount, voucher, additional points or another special offer in connection with your birthday, where such functionality is active;
• protect the account and programme against abuse and fraud.
When we provide a birthday-related offer, we may use the date of birth specified in your account to determine when you are eligible for the relevant offer.
What is our legal basis?
Where the processing is necessary to provide the programme or functionality you have requested, the legal basis is the performance of the contract between you and Cineland.
For certain activities related to security, fraud prevention and service improvement, we may rely on our legitimate interests.
When you contact us by email, telephone, social media, through the Website or in person at one of our cinema complexes, we may process:
• your contact details;
• the content of your enquiry;
• purchase or reservation information;
• other information that you voluntarily provide to us.
We use this information to respond to your enquiry and resolve the relevant question or issue.
What is our legal basis?
Depending on the nature of the enquiry, processing may be necessary for the performance of a contract with you or may be based on our legitimate interest in providing high-quality customer service and resolving issues that arise.
From time to time, we organise premieres, special screenings, events, games, competitions, promotions and other initiatives independently or jointly with our partners.
For the purpose of organising them, we may process:
• name;
• email address;
• telephone number;
• social media profile or username;
• participation information (ticket number);
• other information voluntarily provided in connection with the initiative.
What is our legal basis?
Depending on the particular initiative, processing may be necessary for the performance of the terms and conditions of participation, may be based on our legitimate interests or on your consent.
The specific terms and conditions of an individual game, competition or promotion may contain additional information regarding the processing of personal data.
At certain Cineland premieres, special screenings, public, corporate or promotional events, photography and/or video recording may take place.
The recorded materials may be used for:
• documenting the event;
• informing the public about Cineland’s activities;
• promoting our events and initiatives;
• publication on the Website;
• publication on Cineland’s official profiles on social networks and online platforms, including Facebook, Instagram, TikTok, YouTube and LinkedIn;
• other Cineland corporate and communication channels.
Where organised photography or video recording takes place, we will inform visitors in advance or at the venue by means of appropriate signage or another appropriate form of notice.
General event footage
Where recording constitutes general coverage of an event and a particular visitor has not been specifically selected or made the principal subject of the material, processing may be based on Cineland’s legitimate interest in documenting and promoting its events and activities, following an assessment of the interests and rights of the individuals concerned.
Individual and targeted recording
Where an individual is specifically and intentionally recorded as the principal subject of the content — for example, in an interview, portrait photograph, advertising photoshoot or another similar format — we may request prior consent where consent is the applicable legal basis.
Photography of children when distributing promotional materials and gifts
In certain promotional initiatives related to films, Cineland may provide children with promotional materials or gifts supplied by the relevant film distributor/advertiser — for example, stickers, booklets, posters or other similar materials.
In such cases, it may be necessary for us to document the implementation of the promotional activity for reporting purposes to the relevant distributor.
Where a photograph is taken by a Cineland employee for this purpose, the photograph must be limited to what is necessary to demonstrate the distribution of the promotional materials.
The photograph should show only the child’s hands and the relevant promotional material or gift, without showing the child’s face.
Such photographs should not include the child’s name, ticket, badge or other elements that would unnecessarily enable the child to be identified.
These photographs are used solely for reporting purposes in connection with the relevant promotional initiative and may be provided to the relevant film distributor as evidence that the activity took place and that the promotional materials provided were distributed.
They are not used for advertising posts on social media or for other marketing purposes.
If a photograph unnecessarily allows the child to be identified, it should not be used for this reporting purpose and, where necessary, a new photograph complying with the above requirements should be taken.
Promotional photography and filming of children
Where we wish to photograph or film a specific child in a way that makes the child’s face visible and allows the child to be identified, for the purpose of using the photograph or video for advertising, marketing, publication on social media or other Cineland promotional communications, the recording will take place only after the necessary prior written consent has been obtained from the child’s parent or legal guardian.
Before the recording takes place, the parent or legal guardian will be clearly informed, at a minimum, about:
• the purpose of the recording;
• the type of content that will be created;
• where it may be published or used;
• the possibility of withdrawing consent in accordance with the applicable rules;
• how to contact Cineland with questions regarding the image.
Where the child’s age and level of understanding allow, we will also endeavour to explain the recording to the child in a manner that they can understand and will respect any wish expressed by the child not to be photographed or filmed.
Consent to promotional photography or filming is not a condition for the child to visit the cinema, watch the relevant film or use another Cineland service, unless participation in the specific initiative inherently involves the creation of such content and this has been clearly communicated in advance.
Your rights in relation to photography and filming
If you do not wish to be photographed or filmed during an event, or do not wish a child accompanying you to be photographed or filmed, you may inform a Cineland representative at the venue.
If you discover that material in which you or your child can be identified has been published and you wish to object to its use or withdraw applicable consent, you may contact us at [email protected].
We will consider the request in accordance with applicable law and the specific circumstances.
We may use your email address and, where applicable, other contact details to send you information about:
• new films;
• premieres;
• special screenings;
• events;
• promotions;
• offers;
• the loyalty programme;
• other Cineland products and services.
We will send electronic marketing communications where we have obtained the necessary consent or where another applicable legal basis is available.
You may stop receiving marketing communications at any time by using the unsubscribe link in the relevant communication or by contacting us.
Unsubscribing from marketing communications does not affect service communications that are necessary to provide a service you have purchased — for example, a ticket, reservation confirmation or information about a change to a screening.
Push notifications
When you use the Mobile Application and have enabled push notifications, we may send you notifications related to Cineland’s services and functionalities.
Depending on your choices, push notifications may contain information about new films, premieres, promotions, special offers, the loyalty programme, points, rewards, birthday offers, events and other Cineland offers.
For the purpose of providing push notifications, technical identifiers relating to the device or application and information concerning your notification settings may be processed.
Where push notifications are marketing in nature, they are sent where an applicable legal basis exists.
You may manage or disable push notifications through your mobile device settings and/or the settings available in the Mobile Application.
Where you have made the relevant choice regarding the use of optional technologies, we may use Google Analytics and other analytics tools to understand how users use the Website and Mobile Applications.
Depending on the configuration used, information processed may include:
• interactions with the Website;
• pages visited;
• duration of visits;
• technical information about the browser and device;
• approximate geographical information;
• identifiers associated with the technologies used.
We use this information for statistical analysis, usage measurement and improvement of the Website, Mobile Applications, products and services.
For more information, please see our Cookie Policy and the privacy settings on the Website.
Where you have made the relevant choice regarding the use of advertising and other optional technologies, we may use technologies, tools and services provided by:
• Meta Platforms, including Facebook, Instagram and Meta Pixel;
• Google, including Google Ads and YouTube;
• TikTok;
• LinkedIn;
• other advertising or social media platforms described in our current Cookie Policy.
These technologies may allow us to:
• measure the effectiveness of our advertising campaigns;
• understand whether a user has performed a particular action after interacting with an advertisement;
• display more relevant advertising content;
• create audiences for advertising campaigns;
• reach users whose interests are similar to those of our existing audiences, where permitted;
• limit the display of irrelevant or excessively repetitive advertisements;
• analyse interactions with our content and advertising on the relevant platforms.
For certain advertising services, we may provide platforms with identifiers in protected or hashed form, such as an email address, where we have an applicable legal basis for doing so.
Use of individual platforms may also be subject to their own privacy policies.
The necessary details regarding the advertising technologies used, providers and options for managing your choices are set out in our Cookie Policy and in the Website’s consent management platform.
We may analyse information about your interactions with Cineland, for example:
• purchase history;
• preferred cinema complexes;
• offers used;
• preferred films and genres;
• favourite actor;
• interactions with the Website and Mobile Applications;
• activity in the loyalty programme;
• interactions with marketing communications,
in order to better understand our customers’ interests, improve our services and, where we have the necessary legal basis, personalise content and offers.
CCTV systems are used in certain common areas of Cineland cinema complexes.
CCTV is used for the purposes of:
• ensuring the safety and security of visitors and employees;
• protecting property;
• preventing and detecting violations, abuse and incidents;
• establishing, exercising or defending legal claims, where applicable.
Areas under CCTV surveillance are appropriately marked.
Recordings are accessible only to persons who have a business need and the corresponding right of access.
Where there is a legal basis, recordings may be provided to competent public authorities, including the police, courts or other authorities, as well as to other persons where necessary for the establishment, exercise or defence of legal claims.
What is our legal basis?
CCTV may be based on Cineland’s legitimate interest in protecting visitors, employees and its property, where, following an assessment, this interest is not overridden by the rights and freedoms of the individuals concerned.
In certain cases, processing may also be necessary for compliance with a legal obligation.
How long do we retain recordings?
CCTV recordings are retained for up to 40 days, after which they are automatically deleted or overwritten, unless a specific recording is required for the investigation of an incident, a legal dispute, the establishment, exercise or defence of legal claims or another lawful purpose requiring longer retention.
In the event of an accident, incident or other health and safety-related occurrence at one of our cinema complexes, we may process:
• identification data;
• contact details;
• information about the incident;
• witness statements;
• images or recordings, where applicable;
• information concerning health, where necessary.
Health data constitutes a special category of personal data and is processed only where an applicable legal basis exists under the law.
The information may be used to comply with legal obligations and for the establishment, exercise or defence of legal claims.
We may process certain information for the purposes of:
• preventing fraud;
• preventing abuse of accounts, tickets, vouchers and the loyalty programme;
• protecting our information systems;
• investigating incidents;
• protecting the rights and property of Cineland, our customers, employees and partners.
What is our legal basis?
Processing may be based on our legitimate interest in protecting our business, systems, customers and services, or on a legal obligation where applicable.
Where processing is based on your consent, providing consent is voluntary.
Consent must constitute a freely given, specific, informed and unambiguous indication of your wishes.
You may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Where the relevant processing may be carried out on another applicable legal basis, we will inform you accordingly.
The Website and Mobile Applications may use cookies, pixels, SDKs, local storage and other similar technologies.
We use strictly necessary technologies where they are required for the operation or security of the service or for the provision of a service explicitly requested by you, and where their use is permitted without consent.
Analytics, advertising and other optional technologies are used only where the necessary legal basis exists and, where required by law, after you have made the relevant choice through our consent management mechanism.
You may change your choices regarding optional technologies through the privacy settings on the Website.
Detailed and up-to-date information about the categories of technologies, specific providers, purposes and retention periods is available in our Cookie Policy.
Depending on the service, we may share personal data with:
• providers of ticket sales and CRM systems;
• providers of loyalty programme systems;
• hosting, cloud and IT infrastructure providers;
• providers of the Mobile Applications and related services;
• email and marketing system providers;
• customer service system providers;
• payment service providers;
• Google and YouTube;
• Meta Platforms, including Facebook and Instagram;
• TikTok;
• LinkedIn;
• providers of analytics and advertising technologies;
• security and CCTV service providers, where applicable;
• courier and delivery companies, where necessary;
• photographers, videographers and agencies involved in organising events;
• film distributors and other partners in connection with organised promotional campaigns, where the provision of information is necessary for reporting on the relevant initiative and an applicable legal basis exists;
• our professional advisers, including lawyers, accountants, auditors and insurers;
• competent public authorities where required or permitted by law;
• our contractual partners in joint initiatives, where necessary and where an applicable legal basis exists.
Where a service provider processes personal data on our behalf, we take the necessary measures to ensure that our relationship is governed in accordance with applicable data protection legislation.
Certain service providers and online platforms may also act as independent controllers in respect of certain information. In such cases, their own privacy policies may also apply to the relevant processing.
Some of the service providers we use may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred to a country outside the EEA, we take the necessary measures to ensure that the transfer is carried out in accordance with applicable law.
Depending on the specific circumstances, this may include:
• a European Commission adequacy decision;
• an applicable transfer mechanism for certified organisations in the United States, where the legal requirements are met;
• Standard Contractual Clauses approved by the European Commission;
• Binding Corporate Rules;
• another transfer mechanism permitted by law.
Where necessary, we also implement supplementary measures to protect the data.
We do not retain personal data for longer than necessary for the purposes for which it was collected, unless the law requires or permits a longer retention period.
When determining the retention period, we take into account:
• the purpose of the processing;
• the type and sensitivity of the data;
• our legal obligations;
• applicable limitation periods;
• the need to protect against legal claims;
• the need to protect systems and prevent fraud.
We apply different retention periods to different categories of data.
User account and loyalty programme: for the period during which the account is active and for an applicable period after its termination where necessary.
Purchases and transactions: for the periods necessary to fulfil contractual, accounting, tax and other legal obligations.
Marketing: for as long as an applicable basis for sending communications exists or until you unsubscribe or withdraw your consent where processing is based on consent. We may retain minimal information concerning your unsubscribe request to ensure that your preference is respected.
Customer service: for the necessary period following the end of the communication, depending on the nature of the enquiry and any potential need to defend legal claims.
Events and promotions: according to the purpose and terms of the relevant initiative and applicable periods for the defence of legal claims.
Reporting materials provided to film distributors: only for the period necessary to report on and complete the relevant promotional initiative, unless a contractual or legal obligation requires a different retention period.
CCTV: up to 40 days, unless a particular recording needs to be retained for a longer period in connection with an incident, proceeding, investigation or legal claim.
After the applicable retention period expires, personal data is deleted or anonymised unless another legal basis for its retention exists.
Where the functionality of the service allows, you may request or perform the deletion of your user account.
When an account is deleted, the data associated with it will be deleted or anonymised, except where:
• the law requires us to retain certain information;
• the information is necessary for the establishment, exercise or defence of legal claims;
• it is necessary to prevent fraud or abuse;
• another applicable legal basis exists for its temporary retention.
Deleting the account may result in the loss of accrued points, bonuses, rewards, personalised offers and other benefits associated with the account, in accordance with the terms and conditions of the loyalty programme.
|
We implement appropriate technical and organisational measures to protect personal data against:
• unauthorised access;
• unlawful use;
• accidental or unlawful destruction;
• loss;
• alteration;
• unlawful disclosure.
Access to personal data is granted only to employees and service providers for whom such access is necessary in connection with the performance of their duties.
Persons who process personal data on our behalf are subject to appropriate confidentiality and information protection obligations.
Cineland’s services are also used by children and families, and we therefore pay particular attention to the protection of children’s personal data.
When processing children’s data, we apply the principle of data minimisation and endeavour to process only information that is genuinely necessary for the specific purpose.
For promotional initiatives in which children are provided with promotional materials or gifts from a film distributor and evidence of the implementation of the initiative is required, photographs for reporting purposes are taken in a manner that does not show the child’s face. The photograph should show only the child’s hands and the relevant promotional material or gift and should not contain unnecessary identifying elements.
Such reporting photographs are not used by Cineland for social media posts or advertising purposes.
Where a child is specifically photographed or filmed with their face visible for Cineland advertising, marketing or another promotional purpose, the necessary written consent of the child’s parent or legal guardian will be obtained before the recording takes place.
The relevant consent form will provide information about the purpose of the recording, the intended use and publication of the material, the applicable channels and how rights relating to the photograph or video may be exercised.
Where the child’s age and level of understanding allow, we will also endeavour to explain to the child, in an appropriate and understandable manner, why the recording is taking place.
We will respect a child’s expressed wish not to participate in promotional photography or filming.
We do not knowingly use children’s personal data for marketing profiling in a manner that does not comply with applicable law.
Depending on the specific circumstances, you have the following rights in relation to your personal data:
Right of access
You have the right to obtain confirmation as to whether we process your personal data and, where we do, to obtain access to it and the information required by law.
Right to rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete data.
Right to erasure
Under the conditions provided for by law, you may request the deletion of your personal data.
The right to erasure is not absolute and, in certain cases, we may be required or entitled to retain certain information.
Right to restriction of processing
Under certain conditions, you may request the temporary restriction of the manner in which we process your data.
Right to data portability
Where the legal requirements are met, you have the right to receive certain personal data provided by you in a structured, commonly used and machine-readable format or to request that it be transferred to another controller where technically feasible.
Right to object
Where we process personal data on the basis of legitimate interests, you have the right to object to the processing on grounds relating to your particular situation.
Where we process personal data for direct marketing purposes, you may object at any time. Following such an objection, we will no longer process the data for that purpose.
Right to withdraw your consent
Where processing is based on your consent, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Rights relating to automated decision-making
Where applicable, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in the cases provided for by law.
You may send your request to:
or to:
Cineland Ltd.
37 Pozitano St., Floor 3, Office 3
Vazrazhdane District
Sofia 1303, Bulgaria
In order to protect your personal data, where necessary we may request additional information to confirm your identity.
We will consider your request within the time limits prescribed by applicable law.
The exercise of your rights is generally free of charge. In the case of manifestly unfounded or excessive requests, the rules provided for by law may apply.
If you believe that your personal data is being processed in breach of applicable law, you have the right to lodge a complaint with:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
Sofia 1592, Bulgaria
Up-to-date contact details and information on how to lodge a complaint are available on the CPDP’s official website:
Your right to lodge a complaint does not restrict your ability to contact us first at [email protected] so that we can attempt to resolve the matter.
The Website and Mobile Applications may contain links to third-party websites, applications and services.
When you access a third-party service, the processing of your personal data by that third party is carried out in accordance with its own terms and privacy policy.
Cineland does not control and is not responsible for the privacy practices of independent third parties.
We recommend that you review their privacy policies.
We may update this Policy periodically when:
• we change the way we process personal data;
• we introduce new services or technologies;
• we change the service providers we use;
• applicable legislation or regulatory requirements change.
The current version of the Policy will always be published at:
The date of the latest update will be stated at the beginning of the Policy.
Where a change is material and this is necessary in view of the nature of the processing, we will take appropriate measures to inform you.
Detailed information regarding the cookies, pixels, SDKs and other similar technologies used by Cineland, their purposes, providers and duration is available in our Cookie Policy.
Through the privacy management tool available on the Website, you can make and subsequently change your choices regarding the use of optional technologies.
Strictly necessary technologies that are required for the operation or security of the service or for the provision of functionality explicitly requested by you cannot be disabled through this tool where their use does not require consent.
LAST UPDATED: 02 OCTOBER 2026