BGEN

Legal

Privacy Policy

This site collects personal data in exactly one place - the contact form. There is no visitor analytics, no advertising and no profiling. Below is precisely what happens to your data.

In force since

1.Who processes your data

The data controller is CULTECH EOOD, UIC TODO-EIK, with its registered seat and management address at 14 Sava Radulov Street, Varna.

For anything concerning your personal data, write to info@cultech.bg or to 14 Sava Radulov Street, 9000 Varna.

The company is not required to appoint a data protection officer. Enquiries are handled by the manager.

2.What data we collect

Data you provide yourself through the contact form:

  • name;
  • email address;
  • phone number - if you choose to enter one;
  • organisation - if you choose to enter one;
  • the subject of your enquiry and the text of your message;
  • the language the form was completed in, and the record of your consent.

In addition, the hosting provider records the usual technical data on every visit - network address, browser type, requested address, date and time. Those records serve security and fault-finding. We use no visitor analytics tools and build no visitor profiles.

3.Why we process it, and on what basis

Every processing operation has a specific purpose and legal basis under Regulation (EU) 2016/679:

  • Answering your enquiry and the correspondence that follows - on the basis of your explicit consent, Art. 6(1)(a), given via the checkbox on the form.
  • Taking steps at your request prior to entering into a contract, including preparing a quotation - Art. 6(1)(b).
  • Site security and maintenance through technical records - on the basis of our legitimate interest in keeping the service running and protected, Art. 6(1)(f).
  • Keeping accounting and tax records where an enquiry leads to a contract - on the basis of a legal obligation, Art. 6(1)(c).

We do not process special categories of personal data, and we ask you not to send any through the form.

4.How long we keep it

  • Enquiries that do not lead to a contract - up to 12 months from the last correspondence, after which they are deleted.
  • Correspondence and documents relating to a signed contract - for the term of the contract and thereafter for the periods set out in Bulgarian accounting and tax legislation.
  • Technical server records - for the period applied by the hosting provider, typically up to 30 days.

If you withdraw your consent, we stop the processing that relied on it and delete the data, unless we are required by law to retain it.

5.Who we share it with

We do not sell or rent personal data. We share it only with providers who process it on our instructions and under a contract:

  • the hosting provider for the site (Netlify), which holds the technical server records;
  • the form delivery service (Web3Forms), through which your enquiry reaches our inbox;
  • our email provider, where the correspondence is stored;
  • Google Ireland Limited - only if you have explicitly asked to load the map on the contact or about page.

We may also disclose data to a competent public authority where we are legally required to do so.

6.Transfers outside the European Economic Area

Some of the providers listed above are established outside the European Economic Area or process data there. In those cases the transfer takes place under a European Commission adequacy decision or on the basis of standard contractual clauses adopted by the Commission.

On request we will tell you which mechanism applies to a given transfer.

7.Automated decision-making

We take no decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

8.Data security

The site is served entirely over a secure connection. Access to the mailbox that receives enquiries is limited to the people who need it for their work and is protected by multi-factor authentication.

No measure is a complete guarantee. In the event of a security breach likely to result in a high risk to your rights, we will notify you within the periods set by the Regulation.

9.Your rights

In relation to your data you have the right to:

  • access your data and receive a copy of it;
  • have inaccurate or incomplete data corrected;
  • have your data erased where grounds for erasure exist;
  • restrict processing;
  • data portability for the data you provided;
  • object to processing based on legitimate interest;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Rights are exercised by a request to info@cultech.bg. We respond within one month. If you believe your rights have been infringed, you may lodge a complaint with the Commission for Personal Data Protection (Bulgaria), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, https://www.cpdp.bg.

10.Children data

The site is aimed at organisations and at adults. We do not knowingly collect data relating to people under 14. Where we identify such data, we delete it.

11.Changes to this policy

This policy may be supplemented as our activity or the law changes. The current version is always the one published on this page, with the date it took effect.

12.Contact us

Questions about this policy can be sent to info@cultech.bg or to 14 Sava Radulov Street, 9000 Varna.