Privacy and Cookie Policy

Who is responsible

This site is run by Eurovision27.eu. For any privacy question, write to privacy@eurovision27.eu.

The site is an independent fan project. It is not affiliated with the European Broadcasting Union (EBU), BNT or the City of Burgas.

What we collect

There is no account, no sign-up and no form. We do not collect names, addresses or payment details. The only third-party analytics processing is audience measurement through Google Analytics 4 (measurement ID G-RXM29V6ZJX).

The site is hosted by a hosting provider acting as our processor. Its server keeps standard access logs: IP address, date and time, requested address, response code and size, referring address and browser details. The basis is legitimate interest under GDPR Article 6(1)(f) — site security and troubleshooting. The logs are kept only for as long as they are needed for those purposes.

Google Analytics and cookies

The gtag.js file is loaded from googletagmanager.com on every page view, whatever you choose. Google therefore receives your IP address, your browser details and the referring address before you have answered the banner. Your consent governs only whether a cookie is set and whether the visit is tied to a persistent identifier.

Without your consent: Google Analytics runs in cookieless mode. It sends a count of the page view, containing the page address, the referring address, device and browser type, and an approximate location derived from your IP address. No cookie is written or read and no persistent identifier is created, but your IP address and browser details still reach Google.

With your consent: Google Analytics sets the _ga and _ga_RXM29V6ZJX cookies, which last up to two years from your last visit and hold a pseudonymous identifier so returning visits can be recognised.

Google Ireland Limited and Google LLC process this data as our processors. Data may be transferred outside the EU under Standard Contractual Clauses and the EU-US Data Privacy Framework. Retention in Google Analytics is set to 14 months.

Consent and how to change it

On your first visit we show a banner with Accept and Reject given equal prominence. Refusing is as easy as accepting, nothing is pre-ticked, and access to the content does not depend on your choice.

Your choice is stored in localStorage on your own device rather than in a cookie. You can change or withdraw it at any time using the Your Privacy Choices link in the footer of every page.

If your browser sends a Global Privacy Control signal we treat it as a refusal automatically and do not ask again. The signal takes precedence: for as long as your browser sends it, analytics stays refused even if you afterwards choose Accept.

Legal basis (EU)

For cookies and identifiers the basis is your consent, under GDPR Article 6(1)(a) and Article 5(3) of the ePrivacy Directive.

For the cookieless measurement that continues when you refuse, the basis is legitimate interest under GDPR Article 6(1)(f): understanding how many people use the site without tracking you. You may object using the address above.

Your EU rights

You have the right of access, rectification, erasure, restriction and portability, the right to object, and the right to withdraw consent at any time. Withdrawing does not affect the lawfulness of processing carried out before it. We use no automated decision-making, including profiling.

You also have the right to complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg.

US privacy rights

We do not sell or share personal information for cross-context behavioural advertising. Google advertising features and Google Signals are switched off.

If you live in California, Colorado, Connecticut, Texas or another state with a comparable law, you have the right to know, to delete, to correct, to opt out, and not to be discriminated against for exercising those rights. Use the Your Privacy Choices link or write to us.

We honour the Global Privacy Control signal as a valid universal opt-out.

Fonts

The Montserrat and Roboto typefaces are served from this site, not from Google’s servers. Opening a page makes no request to Google Fonts, so no IP address reaches a third party because of fonts.

Children

The site is not directed at children and we do not knowingly collect their data. In Bulgaria the age at which a child can consent to information society services is 14.

Changes

If this policy changes we update the date above. If the way we process data changes, we will ask for your consent again.