Privacy Policy
Last updated: 26 October 2026
1. Who is the data controller
The controller of your personal data is Boryana Terzieva, a self-employed consultant in data protection and compliance.
Contact for data protection matters: dpo@eucompliance.net, phone +359 878 771 920.
2. What data I process and why
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Enquiry by email or phone | Name, email, phone, organisation, content of the enquiry | Replying and preparing an offer | Art. 6(1)(b) (pre-contractual steps) and (f) (legitimate interest) |
| Consulting contract | Contact persons’ details, contract and invoice data | Performing the contract, invoicing | Art. 6(1)(b) and (c) (legal obligation) |
| Visiting the website | IP address, browser type, date and time, page visited (server logs) | Security and technical operation of the site | Art. 6(1)(f) (legitimate interest) |
I do not use contact forms, newsletters, profiling or automated decision-making.
3. Cookies
The website does not use advertising cookies or traffic analytics. Fonts are served from the site’s own server, without connecting to third-party services.
The hosting provider GoDaddy automatically adds a server performance-monitoring script that sets technical cookies (_tccl_visitor, _tccl_visit, _scc_session). I do not use this data for analytics, advertising or profiling.
4. Who receives the data
- GoDaddy – hosting and email provider, acting as processor;
- public authorities – only where required by law.
I do not sell personal data or share it for marketing purposes.
5. Transfers outside the EU
GoDaddy is headquartered in the United States. Where data is transferred outside the European Economic Area, this is based on the EU–U.S. Data Privacy Framework, under which GoDaddy is certified.
6. How long data is kept
- Enquiries that did not lead to a contract – up to 12 months after the last correspondence;
- contracts and accounting documents – for the periods required by the Bulgarian Accountancy Act;
- server logs – according to the hosting provider’s policy.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. To exercise your rights, write to dpo@eucompliance.net. I reply within one month.
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority in your EU country of residence.
8. External links
The site links to a LinkedIn profile. LinkedIn’s own privacy policy applies once you visit it.
9. Changes
This policy may be updated. The current version is published on this page with the date of the last change.