Skip to content

Legal information

Privacy policy

What personal data we collect through the site, why, how long we keep it and what your rights are. The policy follows the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the Bulgarian Personal Data Protection Act.

Last updated:

Who processes your data

The controller of the personal data collected through the site is:

Company
Профешънал консултинг ЕООД (Professional Consulting Ltd.)
UIC (ЕИК)
200294205
Address
10 Devnya St., office 4, 9000 Varna, Bulgaria
Email
office@accvarna.com
Phone
052 613 554
Website
accountingvarna.com

For questions about personal data and to exercise your rights, write to office@accvarna.com or to the address above.

What we collect and why

We collect only the data we need. For each case below you can see what the data is, what we use it for and on what legal basis.

Contact form

Data
Full name, phone, email and your message.
Purpose
To reply to your enquiry and arrange a call, a meeting or an offer.
Legal basis
Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); for general questions, our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Questionnaire for a price offer

Data
Contact person, company name, phone, email and the company information you fill in: activity, legal form, registered office, number of documents, employees, bank accounts, sites and cash registers, registrations (VAT, excise, licences), imports and exports, foreign shareholders, subsidiaries and branches abroad, and anything else you add.
Purpose
To prepare an individual offer for accounting services.
Legal basis
Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Phone and email

When you call or write to us, we process the details you give us (name, phone, email, the content of the call or message) for the same purposes and on the same bases as for the contact form.

Technical data when you visit

Data
IP address, date and time of the request, the page opened, browser and operating system, the page you came from.
Purpose
To serve the site, protect it from abuse and find technical problems. The hosting provider’s server records them automatically (logs).
Legal basis
Our legitimate interest in a secure, working site (Art. 6(1)(f) GDPR).

Spam protection for the forms

Data
IP address, browser and device data and signals from the page needed for the check.
Purpose
To check that a person, not a bot, is filling in the form. We use a hidden field and Cloudflare Turnstile, a service of Cloudflare, Inc., which loads only once you start filling in a form. More in the Turnstile Privacy Addendum.
Legal basis
Our legitimate interest in keeping the forms and our mailbox free of spam (Art. 6(1)(f) GDPR).

Fonts

Data
IP address and browser data.
Purpose
The site’s fonts load from Google Fonts (Google), so the site looks the same on every device. For this, your browser connects to Google’s servers. More in Google Fonts: Privacy.
Legal basis
Our legitimate interest in a consistent, readable site (Art. 6(1)(f) GDPR).

Map

Data
IP address, browser data and the cookies Google sets.
Purpose
To show where our office is. The map in the Contact section is from Google Maps and loads only if you have allowed external content in the cookie settings or press “Show the map”. Your browser then connects to Google’s servers. More in Google’s privacy policy.
Legal basis
Your consent (Art. 6(1)(a) GDPR), which you can withdraw in the cookie settings.

Cookies

We use necessary cookies without consent, because the site doesn’t work without them. All others only with your consent (Art. 6(1)(a) GDPR). Details in the Cookie policy.

Do you have to give us your data?

No, giving us data is voluntary. Without a name and a way to contact you, however, we cannot reply, and without the questionnaire’s information we cannot prepare an accurate offer. We make no decisions based solely on automated processing and do not profile visitors.

Please don’t send sensitive data (for example about health) or other people’s personal data through the forms, unless the enquiry needs it.

How long we keep the data

  • Enquiries and questionnaires: as long as we need them to reply and discuss the offer. If no contract follows, we delete them within 12 months of our last correspondence.
  • If you become our client: the data becomes part of our contractual relationship and is kept for the term of the contract and for the periods the law requires, for example under the Accounting Act and the tax laws.
  • Technical data (logs): for the short time needed for security and troubleshooting, after which the hosting provider deletes them automatically.
  • Your cookie choice: 6 months, in your browser.

Who receives the data

We don’t sell personal data or use it for advertising. Only the company’s staff who handle your enquiry have access to it. Besides them, data is received by:

  • the hosting provider whose servers run the site and handle the form data and the logs;
  • the email provider that hosts the office mailbox, through which we receive the form messages;
  • Cloudflare, Inc., for the spam check;
  • Google, when the fonts or the map load;
  • public authorities and courts, where the law requires it.

The providers process the data on our behalf and on our instructions or, where their policies say so, as independent controllers.

Transfers outside the EU

Cloudflare, Inc. and Google LLC are based in the USA and may process data there. Such transfers rely on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework and/or on standard contractual clauses approved by the Commission.

How we protect the data

  • The site works only over a secure connection (HTTPS), so the form data travels encrypted.
  • Form messages are not stored in a database on the site; they are sent by email to the office mailbox.
  • Only the people who handle your enquiry have access to the data.

Your rights

Under the GDPR you have the right:

  • of access: to find out whether we process data about you and to get a copy (Art. 15);
  • to rectification of inaccurate or incomplete data (Art. 16);
  • to erasure, when the data is no longer needed or is processed unlawfully (Art. 17);
  • to restriction of processing (Art. 18);
  • to data portability: to get the data you gave us in a machine-readable format (Art. 20);
  • to object to processing based on our legitimate interest (Art. 21);
  • to withdraw your consent at any time, for example for cookies, without affecting the lawfulness of the processing before the withdrawal.

To exercise your rights, write to office@accvarna.com or to our address. We will reply within one month. For complex or numerous requests this may be extended by two further months, and we will let you know. We may ask you to confirm your identity, so that we don’t give your data to someone else.

Right to complain

If you believe we process your data unlawfully, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection:

Address
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Email
kzld@cpdp.bg
Website
www.cpdp.bg

We would be glad if you contacted us first, so that we can try to resolve the matter together.

Changes to this policy

We will update this policy when we change how we process data, for example if we add a new service to the site. The date of the last change is shown at the top of the page.