1) Who we are

The operator of the website www.zoosofia.eu (hereinafter referred to as the “Website”) is the Municipal Enterprise “Sofia Zoo”, UIC 0006963270721, with registered office and management address: Sofia, Lozenets District, 1 Srebarna Street, PO Box 67, Sofia 1407, Bulgaria.
Contact phone: +359 878 640 375
Email: zoosofia@zoosofia.eu

The Municipal Enterprise “Sofia Zoo” is a municipal enterprise owned by Sofia Municipality and operates under its management and control.

2) What are cookies?

“Cookies” are small text files that your browser stores on your device (computer, tablet, phone). They enable the basic functionality of the Website, enhance security, support traffic analysis and, with your consent, may be used for marketing purposes through external services.
Similar technologies include pixels, local storage, and SDKs.

3) What cookies we use and why

3.1. Essential (strictly necessary)

• They ensure basic functionality: page loading, protection against malicious activities, and saving your consent preferences.
• Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• These cookies are set without prior consent.

3.2. Analytical (Google Analytics 4 – GA4)

• They help us understand how the Website is used: traffic, user behaviour, and frequently visited pages.
• Legal basis: consent (Article 6(1)(a) GDPR).
• They are activated only after explicit consent.
• IP anonymisation is used.

3.3. Marketing (Meta Pixel)

• They measure the effectiveness of our communications on social networks and allow content optimisation.
• Legal basis: consent (Article 6(1)(a) GDPR).
• They are activated only after explicit consent.
• For certain activities, there may be joint controllership with Meta under Article 26 GDPR.

Important: The Website is for informational purposes only. No online ticket sales are carried out and no user accounts are created.

4) Who places cookies (first/third parties)

• First party – cookies set by our domain zoosofia.eu (for example, to store your consent preferences).
• Third parties – Google (GA4), Meta (Pixel), only with given consent.

5) Details by category and example cookies

A) Essential

Name	Provider	Purpose	Type	Duration
cookie_consent / consent_preferences	zoosofia.eu	Stores cookie consent choices	HTTP	6–12 months
XSRF-TOKEN / csrftoken	zoosofia.eu	CSRF protection / security	HTTP	Session
__cf_bm (if a CDN is used)	Cloudflare/others	Bot protection / stability	HTTP	30 minutes

B) Analytical (GA4)

Name	Provider	Purpose	Type	Duration
_ga	Google	Recognises users (anonymous ID)	HTTP	13 months
ga*	Google	Sessions/events	HTTP	13 months
_gid	Google	Distinguishes users	HTTP	24 hours

C) Marketing (Meta Pixel)

Name	Provider	Purpose	Type	Duration
_fbp	Meta	Ad recognition / attribution	HTTP	3 months
fr	Meta	Advertising identifier	HTTP	3 months

6) How you manage consent

• On your first visit, we display a consent banner. You can:
  • accept all cookies;
  • reject all cookies (except essential ones);
  • choose by category.
• You can change your preferences at any time via the “Cookie Settings” link in the Website footer.
• You can also delete or block cookies through your browser settings (this may affect the functionality of the Website).

7) Legal bases and your rights

• For essential cookies – legitimate interest.
• For analytical and marketing cookies – consent (which can be withdrawn at any time).
• Your rights under the GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., www.cpdp.bg).
• Contact for exercising your rights: zoosofia@zoosofia.eu.

8) Transfers outside the EEA

Google and Meta may transfer data outside the EEA. Standard Contractual Clauses (SCCs) and, where necessary, additional safeguards are applied. Further details are available in their privacy policies.

9) Security

We apply technical and organisational measures to protect personal data and the use of cookies. The internet environment does not allow absolute security; therefore, we recommend managing your personal settings and keeping your software and browser up to date.

10) Changes to the Policy

We may periodically update this Policy. The latest version will always be published on this Website and will apply from the date of publication.

Effective date: 04.10.2025