Personal data protection policy

Data controller information

The data controller is VZ Tech EOOD, a company registered with the Bulgarian Commercial Register at the Registry Agency, UIC 208114901.

You can contact us by email at office@vztech.bg or by phone at 0877987576.

Legal bases and purposes for using personal data

We process your personal data on the basis of the website terms of use, performance of a contract or pre-contractual steps, your explicit consent, a legal obligation, or a legitimate interest related to the normal operation and security of the website.

The main purposes are providing the website functionality, responding to inquiries, preliminary communication regarding future services, maintaining and protecting the website, analyzing and improving content after consent, and complying with legal obligations.

Performance of a contract or pre-contractual steps

We process personal data for the use of the website in accordance with the terms and conditions, and where necessary to respond to an inquiry sent by you or to discuss the parameters of a future service.

When you submit an inquiry through the contact form, we process the provided data in order to respond, discuss your needs, and, where necessary, prepare a proposal.

The site currently does not provide public user registration. If such functionality is offered in the future, personal data related to the relevant profile will be processed in accordance with this policy and the applicable terms of use.

Data we process

• Contact form data: name, email, phone, company, and message content.
• Technical information needed for site security and normal operation, such as IP address, request date and time, URL, and browser information, where such information is stored in server logs.
• Cookie choices and visual theme preferences stored in the browser.
• Analytics data through Google Tag Manager and Google Analytics 4 only if you consent to analytics cookies.
• Data for direct marketing or profiling is processed only where separate, explicit, and freely given consent has been requested and obtained.

With your consent

We process personal data on this basis only after your explicit, unambiguous, and freely given consent. We will not impose any adverse consequences if you refuse the processing of personal data.

Consent is a separate legal basis for processing your personal data, and the purpose of the processing is stated for the specific case.

With your consent, we may process data for statistics, content improvement, analysis of website use, or direct marketing. Where consent is given for marketing purposes, data may be provided to marketing agencies, Google, Meta/Facebook, or similar providers where necessary for the relevant campaign.

Given consents may be withdrawn at any time through the cookie settings or through our contact details. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipients of data

• Hosting and infrastructure providers that keep the website available.
• The email provider used to receive contact form inquiries.
• Google Ireland Limited for Google Tag Manager and Google Analytics 4, only after analytics-cookie consent.
• Marketing agencies, Google, Meta/Facebook, or similar providers where you have given separate consent for the relevant purpose.
• Competent authorities where required by law.

Cookies

On this website we use necessary cookies and settings for normal site operation, and analytics cookies only after your consent.

Google Tag Manager does not load until you accept analytics cookies. After acceptance, Google Analytics 4 may use analytics cookies for aggregated statistics.

Detailed information about the types of cookies, their retention periods, and how to manage them is published in the website Cookie Policy.

When we delete data

• Contact form inquiries are stored for up to 24 months unless the communication becomes a client relationship or a longer period is needed to protect legal rights.
• Data collected on the basis of consent is deleted upon your request, upon withdrawal of consent, or 12 months after initial collection where no other period is specified.
• Data related to a contractual relationship or user profile, where applicable, is deleted up to 2 years after the relevant relationship ends, unless the law requires otherwise.
• Server logs are stored for a short technical period according to the hosting provider settings.
• The consent cookie is stored for 6 months. Analytics cookies are retained according to Google Analytics settings.

How we protect your personal data

To ensure adequate protection of company and client data, we apply the necessary organizational and technical measures required by the Bulgarian Personal Data Protection Act and applicable European Union law.

We maintain rules for preventing abuse and security breaches, which support the processes for protecting and securing your data.

For maximum security during processing, transfer, and storage of your data, additional protection mechanisms such as encryption, pseudonymization, and access restriction may be used.

User rights

• Right to be informed about the processing of your personal data.
• Right of access to your personal data.
• Right to rectify inaccurate or incomplete data.
• Right to erasure of personal data, including the right to be forgotten.
• Right to restriction of processing by the controller or processor.
• Right to data portability between separate controllers.
• Right to object to the processing of your personal data.
• Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
• Right to judicial or administrative protection if your rights have been violated.

Erasure and restriction of processing

You may request erasure where the personal data is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis, where you object to processing and there is no overriding legal basis, where the data has been processed unlawfully, or where erasure is required to comply with a legal obligation.

You may request restriction of processing where you contest the accuracy of the data, processing is unlawful, the data is needed by you for legal claims, or you have objected to processing pending verification whether the controller’s legal grounds override your interests.

Data portability and objection

You have the right to receive the personal data concerning you and provided by you to a controller in a structured, commonly used, and machine-readable format where processing is based on consent or a contractual obligation and is carried out by automated means.

You have the right to object to the processing of your personal data. When you object to personal-data processing for direct marketing purposes, processing must be terminated immediately.

Exercising rights and complaints

You can exercise your rights by sending a message to office@vztech.bg. We may request additional information where necessary to confirm your identity.

Every user has the right to lodge a complaint against unlawful processing of personal data with the Bulgarian Commission for Personal Data Protection or the competent court.