This Privacy Policy governs the manner in which “Renovation Hub” Ltd., UIC 208137661, with its registered office and address of management at: Sofia, Vitosha District, 7 Angel Bukureshtliev St., in its capacity as a data controller, processes, stores, and protects the personal data of individuals who use the website.
The Company processes personal data in accordance with applicable Bulgarian and European legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Personal Data Protection Act, and all relevant subordinate legislation.
1. Data Controller
The data controller is:
“Renovation Hub” Ltd.
UIC: 208137661
Address: Sofia, Vitosha District, 7 Angel Bukureshtliev Street
If you need to contact us regarding the processing of personal data, you may use the contact information provided on the website or the contact form.
2. What personal data do we process?
Depending on how you use the website, we may process the following categories of personal data:
- first and last name;
- phone number;
- email address;
- subject and content of the message sent;
- information that you have voluntarily provided in an inquiry or correspondence;
- IP address;
- information about your device, browser, operating system, language, and behavior while using the site;
- data collected through cookies and similar technologies, when enabled.
The Company does not seek or require the provision of special categories of personal data as defined by applicable law. Please do not send sensitive personal data via the contact forms unless it is objectively necessary.
3. Purposes of processing
Personal data may be processed for the following purposes:
- to contact you regarding an inquiry you have submitted;
- providing information about services, activities, opportunities for collaboration, or project-related communication;
- preparing a proposal, an offer, or a response to an inquiry;
- improving the performance, security, and functionality of the website;
- for statistical and analytical purposes;
- compliance with legal obligations;
- to protect the Company’s legitimate interests when necessary.
4. Legal grounds for processing
Personal data is processed on one or more of the following grounds:
- express consent, where required;
- taking steps at the request of the data subject prior to entering into a contract;
- performance of a contract or actions related to a potential future contractual relationship;
- compliance with a legal obligation;
- the controller’s legitimate interests, provided that this does not infringe upon the rights and freedoms of the data subject.
5. Method of data collection
Data may be collected in the following ways:
- directly from you by filling out the contact form;
- when sending an email or other form of correspondence;
- automatically through technical means when you visit the website;
- using analytical and marketing tools, where permitted and appropriately configured.
6. Shelf life
Personal data is retained for the period necessary to achieve the purposes for which it was collected, unless a longer period is required by law.
Usually:
- Data from inquiries are retained for the period necessary to process the correspondence and any subsequent communication;
- Data related to contractual or pre-contractual relationships may be retained for the periods specified in the applicable tax, accounting, and commercial laws;
- Technical data and logs may be stored for a limited period of time for the purpose of ensuring the security of the website and systems.
7. Recipients and categories of recipients of data
If necessary and where there is a suitable legal basis, personal data may be disclosed to:
- hosting and technical support providers;
- providers of software and cloud services necessary for the operation of the website and communication;
- accounting, legal, and administrative consultants;
- state and municipal authorities, when required by law;
- other parties, when necessary to protect the Company’s legitimate interests or to fulfill contractual obligations.
The company does not sell personal data to third parties.
8. Transfer of data outside the European Union
As a general rule, personal data is processed within the European Union or the European Economic Area. When certain tools or providers involve transfers to third countries, this is done only if there are applicable safeguards in accordance with applicable law, including standard contractual clauses, an adequacy decision, or another acceptable mechanism.
9. Rights of Data Subjects
As a data subject, you have the right to:
- to obtain information about whether and what personal data of yours is being processed;
- to request access to the data being processed;
- request the correction of inaccurate or incomplete data;
- to request the erasure of personal data when the legal conditions are met;
- to request restriction of processing;
- to object to processing based on a legitimate interest;
- to withdraw your consent at any time when the processing is based on consent;
- request data portability, where applicable;
- to file a complaint with the Commission for Personal Data Protection.
The exercise of rights may be restricted in the cases provided for by law.
10. Protection of Personal Data
The Company implements reasonable technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, or any other unlawful form of processing.
Such measures may include:
- restricted access to the data;
- use of secure connections and systems;
- updates to software and technical infrastructure;
- internal controls over access and processing;
- logging and protecting systems against unauthorized access.
11. Links to external websites
This website may contain links to external websites, social media platforms, or third-party services. The Company is not responsible for the privacy policies, content, or practices of these external sites. We recommend that you review their policies before providing any personal data.
12. Policy Changes
The Company reserves the right to update this Privacy Policy in the event of changes to legislation, the website’s operations, the technologies used, or organizational processes. The current version is published on the website and takes effect upon publication, unless otherwise specified.
If you have any questions regarding the processing of personal data, please contact us using the contact information provided on the website.