Last updated: 14 October 2026
This policy explains what personal data this website collects, why, and what you can ask us to do with it. It covers the website only. Data we handle for clients during an engagement is covered by the contract we sign with them.
Who we are
[registered company name], UIC [UIC number], registered address [registered address], is the controller of the personal data collected through this website. You can write to us about this policy or about your data at [privacy contact email], or through our contact form.
What we collect
The only personal data you give us on this site is what you type into the contact form: your name, email address, subject and message, and a phone number if you choose to add one. Only the phone number is optional. We need the rest to reply to you.
The form sends your message to us by email. The website itself doesn't store it.
Why we use it
We use your details to answer your message and, if you ask about a project, to discuss its scope and send you a proposal. When you contact us about a possible engagement, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For any other question, it's our legitimate interest in answering the people who write to us (Article 6(1)(f) GDPR).
We don't use your data for automated decisions or profiling.
How long we keep it
We keep messages from the contact form for [retention period].
Who processes it for us
Two service providers handle the data on our behalf: [hosting provider], which hosts this website, and [email provider], which delivers and stores our email. They're our processors, which means they may use the data only on our instructions.
Transfers outside the EEA
[State whether the hosting or email provider processes data outside the European Economic Area and, if so, the safeguard for the transfer, such as an adequacy decision or standard contractual clauses.]
Cookies
The site sets a single cookie: a session cookie that holds a random identifier. It remembers the language you're reading in and protects the contact form against forged submissions. Scripts on the page can't read it, and your browser deletes it when you close the browser. Because the site needs it to work, it doesn't require your consent.
Every page loads its fonts, styles and scripts from our own server, and we don't use analytics, advertising or social media tools. The exception is the error page for an address that doesn't exist: it loads icons from Font Awesome (use.fontawesome.com), so your browser sends that service your IP address and details of the browser you use.
Server logs
Like most web servers, ours records each request: your IP address, the date and time, the page you asked for, the page you came from and the browser you use. We use these logs to keep the site working and secure, which is our legitimate interest (Article 6(1)(f) GDPR), and delete them after [log retention period].
Your rights
You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it or restrict how we use it. You can object to processing based on our legitimate interest. For the data you gave us to discuss a contract, you can also ask for a copy in a portable format. Write to [privacy contact email]. We'll reply within one month. If a request is complex, the law lets us take up to two more months, and we'll tell you if we need them.
If you think we've mishandled your data, you can complain to the Commission for Personal Data Protection (CPDP, www.cpdp.bg) or to the supervisory authority in the EU country where you live or work. We'd appreciate the chance to sort it out with you first.
Changes to this policy
If we change this policy, we'll publish the new version on this page and update the date at the top.