1. Who is the controller of your personal data
The controller is [full legal name of the company], UIC [UIC], with registered office at [address] (“we”). Website: bulgariapropertyconcierge.com. For any questions about your personal data, write to [email protected].
2. What data we collect and when
- When you send the consultation form: name, email, phone number (with country code), property type, investment goal, purchase timeline, budget, preferred level of finish, and the text of your message.
- When you write or call us (email, Viber, WhatsApp, phone): your contact details and the content of your message. These apps have their own privacy policies.
- Technical data: the server hosting the website records technical data for each request (such as IP address, date and time, browser type), which is needed for security and for the site to work.
We do not take payments through the website and do not collect payment card data.
3. Why we use your data and on what legal basis
- Replying to your inquiry and preparing a proposal: steps taken at your request before entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679, “GDPR”).
- Performing a contract if you become our client: Art. 6(1)(b).
- Complying with legal obligations (for example accounting and tax rules, and anti-money-laundering rules where they apply): Art. 6(1)(c).
- Website security and protecting our legal rights: legitimate interest, Art. 6(1)(f).
- Updates and news: only if you have given consent (Art. 6(1)(a)). You can withdraw it at any time.
We do not make decisions based solely on automated processing, and we do not sell your personal data.
4. Who receives your data
- Providers who run the website and receive inquiries (hosting and server infrastructure: Railway; email notifications of inquiries: ZeptoMail (Zoho); delivery and protection of the website: Cloudflare). They process data on our behalf and under a contract.
- Lawyers, notaries, architects, contractors and other partners: only where needed for the service you asked for, and after we tell you.
- Public authorities, where the law requires it.
5. Transfers outside the EU and EEA
Some providers may be located outside the European Economic Area (for example in the USA). In that case we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or an adequacy decision. [Confirm with providers]
6. How long we keep your data
- Inquiries that do not lead to cooperation: up to [12] months after the last contact.
- Clients: for the duration of the contract and afterwards for the period required by law [period under the Accountancy Act and other applicable laws].
- Consent to updates: until you withdraw it.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest, as well as to withdraw consent where processing is based on it. Write to [email protected] and we will reply within one month.
You may lodge a complaint with the Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, www.cpdp.bg.
8. Cookies and similar technologies
The website does not use cookies for analytics, advertising or tracking. It remembers your language choice in your browser's storage (localStorage, key “bpc_lang”) so you do not have to choose again; this data is not sent to us.
To display fonts, your browser loads files from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which transmits your IP address to Google. If we add analytics or advertising in the future, we will ask for your consent first.
9. Security
We apply appropriate technical and organisational measures to protect your data from unauthorised access, loss or disclosure. The website is intended for adults.
10. Changes to this policy
We may update this policy. The current version is always on this page, and the date of the last change is at the top.