About Us
“Skin Studio EOOD”, (hereinafter referred to as “Satori” and/or “Administrator”), is a company registered in the Commercial Register and the BULSTAT Register, managed by the National Revenue Agency, with UIC 205826224, with registered office and management address: 131 Vitosha Blvd., Ivan Vazov district, Sofia, 1408.
Tel: +359 882 900 999 | e-mail: info@satorilaser.bg
Medical services under the SATORI brand are provided by “MEDICAL CENTER SKIN STUDIO MEDICAL” OOD, a company registered in the Commercial Register with UIC 208256174, with registered office and management address: 63 Kazbek Str., Sofia.
For personal data processed in connection with medical services — including booking an appointment for a medical consultation or procedure, medical documentation and payments for medical services — the data controller is “MEDICAL CENTER SKIN STUDIO MEDICAL” OOD. For all other activities — cosmetic services, the online shop and the website — the data controller is “Skin Studio” EOOD. Where a service concerns both companies, they act as joint controllers within the meaning of Art. 26 GDPR, with a common contact point for exercising your rights: info@satorilaser.bg.
Our Data Protection Officer can be contacted at:
• Data Protection Officer: Stanislav Chernaev
• Tel: +359 882 900 999
• Email: info@satorilaser.bg
Satori, as administrator of personal data, collects and processes certain information about natural persons. This information may relate to employees, managers, clients and guests of Satori, suppliers, contractors, business contacts and other natural persons with whom the Administrator has or seeks to establish a business relationship. This Privacy Policy establishes how personal data are collected, processed and stored, in order to comply with the standards of the Administrator’s organisation and the legal requirements. This Privacy Policy is issued on the basis of the Personal Data Protection Act and its subordinate legislation, as amended (“Bulgarian legislation”), and the General Data Protection Regulation (EU) 2016/679 (“GDPR” or “GDPR”).
What is meant by “personal data” and “processing of personal data”?
“Personal data” is any information by which a natural person can be identified directly or indirectly by one or more characteristics of that person’s identity — such as: name, identification number/EGN, contact details — place of residence/postal address, telephone number, electronic address (email), online identifier/IP address, images from video recordings, etc. These characteristics may be part of the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.
“Processing of personal data” is the totality of operations performed with personal data or a set of personal data such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making data available, alignment or combination, restriction, erasure or destruction.
Our approach to your personal data
Satori attaches great importance to the protection of personal data and collects and processes personal data only in compliance with local and European legislation. The purpose of this Privacy Policy is to inform you of how we process your data and what personal data we have collected about you, for what purpose, for what period and what your rights are. The security of the data you have entrusted to us is very important to us. That is why we protect your data by applying all appropriate technical and organisational measures, which are adequate to the possible risks to the rights and freedoms of natural persons, so as to prevent unauthorised access, unauthorised or malicious use, loss or premature destruction of information.
What information do we collect and why?
We may collect personal data about you when you use our Site or choose our services. In most cases we request your personal data for the purpose of entering into a contract, to fulfil a legal obligation or to protect our legitimate interest. In certain cases we process data on the basis of your consent.
Depending on the services you use, we may collect and process the following information about you:
• Full name, national identification number (for registration purposes at Satori and issuance of invoices, where applicable), date of birth and gender;
• Contact details — correspondence address, telephone number and electronic address (email);
• Recordings from video cameras for the purpose of ensuring our and your security;
• Health data (information from medical consultations, medical history and documentation of performed medical procedures) — such data are processed solely by “MEDICAL CENTER SKIN STUDIO MEDICAL” OOD when providing medical services, on the basis of Art. 9(2)(h) GDPR and applicable healthcare legislation;
Principles by which we are guided and which we observe:
We strictly observe the fundamental principles introduced as mandatory in the processing of personal data:
Personal data are processed lawfully, fairly and transparently;
Personal data are collected for specific, explicitly stated and legitimate purposes and are not further processed in a manner incompatible with those purposes;
Personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Personal data are accurate and kept up to date where necessary;
Personal data are stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
Personal data are processed in a manner that ensures adequate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical and organisational measures;
The purpose of processing your data.
We process the personal data we most commonly collect for the following purposes:
At the conclusion and performance of a contract — for the registration of a guest at Satori, the preparation of accounting documents such as a receipt or invoice for the services provided to you; for the purpose of notifications related to our services;
In fulfilment of a legal obligation — for the purposes of obligations provided for in the Accounting Act and the Social Security Procedure Code and other related regulatory acts, in connection with the conduct of correct and lawful accounting; for obligations to provide information to all state commissions and regulatory bodies, as well as courts; for fulfilment of obligations in connection with online reservations (distance selling) and selling outside our premises;
With your consent — for direct marketing of our products and services;
On the basis of our legitimate interest — the conduct of video surveillance in our commercial premises;
What are your rights:
In the collection and processing of your personal data you have the right to:
Information about the processing of your personal data and access to the personal data collected about you;
Rectification/completion if the data is inaccurate/incomplete — at your initiative or at the initiative of Satori;
Erasure of personal data, where there are legal grounds for doing so;
Restriction of the processing of your personal data by Satori, where there are legal grounds for doing so;
Portability of personal data between separate administrators — this right allows you to receive your data from Satori and transfer it to another administrator in a suitable format;
Objection to the processing of your personal data, where there are legal grounds for doing so;
The right to protection by judicial or administrative process, in the event that your rights have been violated.
You may exercise your rights by writing to us at: info@satorilaser.bg or by post/courier to: Sofia, Ivan Vazov district, 131 Vitosha Blvd., postcode: 1408.
Your personal data is stored by us in accordance with the purpose for which it was collected and for the periods established by law. We do not store your data indefinitely.
Cross-border transfers
The transfer, storage and processing of personal data is ensured with modern technical means. Satori does not transfer your data outside the EEA without applying the legal possibilities, and will introduce appropriate safeguard measures to ensure the confidentiality of your information.
Erasure
Accounting and commercial information, as well as all other information and documents of significance for the daily accounting and mandatory security contributions, are retained by Satori for the following periods:
• payroll records — 50 years;
• accounting registers and financial reports — 10 years;
• documents for revenue and social insurance control — 5 years after the expiry of the limitation period for the public obligation to which they relate;
• all other carriers — 5 years, unless a shorter period is provided by law;
• video surveillance recordings — 30 days;
After the expiry of the storage period, the information carriers (paper or technical), which are not subject to transfer to the National Archives Fund, may be destroyed. After the expiry of the data storage period, data are destroyed as promptly as possible by destroying the paper carriers by shredding and, on the technical carrier, by deleting and removing the relevant files from the Company’s computers and systems.
Google Ads
Our website uses Google Ads, a remarketing and behavioural targeting service provided by Google, Inc. The advertising activity of our internet page is connected to the Google Ads advertising network through “cookies”. Our internet page does not identify or collect data about users through Google Ads.
Facebook Pixel
We use Facebook Pixel, a service of Facebook. This service uses “cookies” stored on your device, which allow targeted advertising through the Facebook advertising platform to its users, as well as to users of Facebook partner companies, such as Instagram, who have already visited our website in the last 180 days. This service also offers the possibility of creating aggregated anonymous audiences of visitors, based on the content viewed on the site, as well as tracking the success of advertising campaigns implemented through the Facebook advertising platform. For more information see Facebook’s Privacy Policy here: https://www.facebook.com/about/privacy/. If you do not wish to participate in the tracking process, you can disable the “cookie” setting, which is necessary for this, by using your browser settings and generally deactivating the automatic saving of “cookies”.
Google Analytics
We use Google Analytics, a web analytics service of Google LLC. The information generated by the “cookies” about your use of this site is normally transmitted to Google’s servers in the USA and stored there. Google preliminarily truncates your IP addresses within the framework of the member states of the European Union or in other signatory states to the Agreement on the European Economic Area. On behalf of the operator of this site, Google uses this information to evaluate the use of the website, to compile reports on website activity and to provide other services related to the website and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Analytics is not associated with other data held by Google. You may refuse the use of “cookies” by selecting the appropriate settings in your browser. You can also prevent the collection of data generated by “cookies” and related to your use of the site (including your IP address) by Google and its processing by Google, by downloading and installing the browser extension (plug-in) from here: https://tools.google.com/dlpage/gaoptout?hl=en.
Links to social media
Our website includes links to Facebook and Instagram. In this case, data transfer to the mentioned social media operators only takes place when the corresponding button on the icon illustrating the link is clicked. If you click on such a button, the page of the corresponding social network opens. There you may publish information about our services in accordance with the rules of the social media operator. You may use our official profiles for contact in the various social networks, as well as other official public profiles of the company. These are:
Facebook page: https://www.facebook.com/satorilaser.bg
Instagram page: https://www.instagram.com/satorilaser.bg
Personal data that you send through private messages will be processed only for the purposes of responding to your enquiry. We bear no responsibility for information and personal data that you voluntarily share on our official profiles, without being explicitly requested by us.
Security
Satori takes measures to protect your personal data against accidental loss and unauthorised access, use, alteration or disclosure. Policies and procedures are in place to prevent information from loss, misuse and improper disclosure. In addition to this we implement additional information security measures, including access control, strict physical protection and reliable practices for collecting, storing and processing information.
When do we delete your personal data?
We do not store all the information we have collected about you, and we destroy it within the legally established periods, and if there are none, within the periods determined by us (30 days for video surveillance) and after final settlement of all our financial relationships. We do not store your data indefinitely.
Changes to this Privacy Policy
This personal data protection procedure may be amended in the future. Such amendments will take effect immediately upon their announcement. Regularly reviewing this page guarantees that you are always aware of what information we collect, how Satori uses it and under what circumstances (if any) it will be shared with other parties.
This Privacy Policy was approved by the Manager on 23.05.2020 and last updated on 13.07.2026 (added “MEDICAL CENTER SKIN STUDIO MEDICAL” OOD as data controller for medical services).