Privacy policy
This page explains what personal data we receive through bsmanagement.shop, why we process it, how long we keep it and what rights you have.
Last updated:
Data controller
The controller is BS MANAGEMENT LTD, UIC 207472831, address: 19 Georgi Benev Str., 6000 Stara Zagora, Bulgaria, email office@bsmanagement.shop, phone 0879 906 088.
For any question about your personal data, write to office@bsmanagement.shop.
What data we process
When you send an inquiry through the form, we store:
- the name, company, email and phone you entered (only the name and email are required);
- the solution type you chose and the text of your message;
- the attached file, if you added one, with its name and size;
- the language of the page and the date and time of sending;
- the IP address the inquiry came from and your browser details (user agent).
If you email or call us, we process the data you give us in that email or call. The server also keeps a technical log of requests to the site: IP address, requested page, browser and time.
Google Analytics collects data only if you allow analytics. This is described in our Cookie policy.
You are not obliged to give us any data, but without a name, an email and a description we cannot answer your inquiry. Please do not write or attach sensitive data, such as health information or beliefs. We do not need it.
Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your inquiry and preparing an offer | Data from the form, email or call | Steps taken at your request before entering into a contract (Article 6(1)(b) of Regulation (EU) 2016/679, the GDPR). When you write on behalf of a company, also our legitimate interest in answering business inquiries (Article 6(1)(f)). |
| Protecting the form against spam and abuse (limiting the number of inquiries from one address) | IP address and browser details | Legitimate interest (Article 6(1)(f) GDPR) |
| Server security and troubleshooting | The technical log | Legitimate interest (Article 6(1)(f) GDPR) |
| Visit statistics | Google Analytics data | Your consent (Article 6(1)(a) GDPR and Article 4a of the Bulgarian Electronic Communications Act) |
If the inquiry leads to a contract, the data becomes part of the contract and our accounting records. We then process it to perform the contract (Article 6(1)(b)) and because the law requires us to (Article 6(1)(c)).
How long we keep data
- An inquiry that did not lead to a contract: 24 months from our last correspondence about it. We then delete it together with the attached file.
- An inquiry that led to a contract: for as long as the contract runs, and after that for as long as the Bulgarian accounting and tax laws require.
- The server’s technical log: up to 7 days. It is then overwritten automatically.
- Google Analytics data: the cookies last 2 years and Google keeps the collected data for 2 months.
Who receives the data
- Hosting: our server is rented from Hostinger International Ltd. and is located in Frankfurt, Germany, in the European Union. Our database, attached files and email live on it. Hostinger maintains the machine and does not use the data for its own purposes.
- Google: only Google Analytics data and only with your consent. Google processes it on our behalf.
- Public authorities, when the law requires it.
We do not sell data and do not give it to other companies for advertising.
Transfers outside the European Union
Data from the form does not leave the European Union. Only Google Analytics data may go outside it, and only if you have allowed it. Google LLC is certified under the EU-U.S. Data Privacy Framework and relies on the European Commission’s standard contractual clauses where they are needed (Data transfer frameworks).
Your rights
Under Articles 15–22 of the GDPR you have the right:
- to know whether we process your data and to get a copy of it (Article 15);
- to have inaccurate or incomplete data corrected (Article 16);
- to have your data erased (Article 17);
- to have processing restricted (Article 18);
- to receive your data in a machine-readable format or have it passed to another controller, where we process it on the basis of a contract or consent (Article 20);
- to object to processing based on our legitimate interest (Article 21);
- not to be subject to a decision based solely on automated processing (Article 22). We make no such decisions and do no profiling;
- to withdraw your consent to analytics at any time through “Cookie settings” at the bottom of the page (Article 7(3)).
To exercise your rights, write to office@bsmanagement.shop. We reply within one month. If we are not sure the request comes from you, we may ask you to confirm your identity.
Right to complain
If you believe we are violating your rights, you can complain to the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, cpdp.bg. You can also write to us first so we can try to resolve it.
Changes to this policy
If we change the way we process data, we will update this page and its date.