1. Who processes your data
The controller of your personal data is Vajarov EOOD (Въжаров ЕООД, “Vajarov”, “we”).
- Address: 12 Kazbek St., office 1, Sofia, Bulgaria
- Email: office@vajarovbg.com
- Phone: 02 955 6402
For any question about your personal data, write to us at the email above.
2. What data we collect
- Through the request form: name, phone, email (optional), the service you need and your description of the problem, including your address or district if you give it.
- When you call or email us: phone number or email address, name and the content of your request.
- When we carry out a service: site address, contact person, equipment details (brand, model, serial number), service reports and billing details.
- Technical data when you visit the site: IP address, browser and device type, date and time. These are logged by our hosting provider to keep the site secure.
- Analytics and advertising cookie data: only if you have given consent (see “Cookies”).
We do not collect special categories of data, such as health data. Please do not include them in your messages.
3. Why we use your data and on what legal basis
- Replying to your request, site visits, quotes and carrying out the service: steps before entering into a contract and performing a contract (Article 6(1)(b) of Regulation (EU) 2016/679, GDPR).
- Invoicing, accounting and tax obligations: compliance with a legal obligation (Article 6(1)(c) GDPR).
- Warranty service, handling disputes, website security and spam prevention: our legitimate interest (Article 6(1)(f) GDPR).
- Visitor statistics and measuring our advertising: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
We do not send marketing messages without your explicit consent. We do not make decisions based solely on automated processing that produce legal effects for you.
4. Who we share data with
We do not sell your personal data. We share it only as far as necessary with:
- service providers processing data on our behalf: website and form hosting (Netlify, Inc.), email and IT services, accounting;
- Google (Google Analytics, Google Ads) and Meta Platforms (Facebook, Instagram), only if you have accepted analytics and advertising cookies;
- equipment manufacturers and importers, where needed for a warranty repair;
- public authorities, where the law requires it.
Providers that process data on our behalf do so under a data processing agreement.
5. Transfers outside the EU
Some of our providers (Netlify, Google, Meta) are based in the United States. Data is transferred on the basis of the European Commission’s adequacy decision under the EU–US Data Privacy Framework, or on the basis of Standard Contractual Clauses approved by the Commission.
6. How long we keep data
- Requests that did not lead to a contract: up to 12 months after our last contact.
- Contract and warranty data: for the term of the contract and warranty and up to 5 years afterwards, the general limitation period for claims.
- Accounting documents (invoices etc.): for the periods required by the Bulgarian Accountancy Act.
- Website technical logs: for the short period set by the hosting provider.
- Cookies: for the periods listed under “Cookies”.
When these periods end, we delete or anonymise the data.
7. Cookies
Analytics and advertising cookies load only if you accept them in the banner. If you decline, the site works the same.
- Necessary: the site remembers in your browser whether you accepted or declined cookies (entry “vj-consent”) so it does not ask again.
- Google Analytics (_ga, _ga_*): visitor statistics; up to 2 years.
- Google Ads (_gcl_*): measuring calls and requests that come from Google ads; up to 90 days.
- Meta Pixel (_fbp): measuring Facebook and Instagram ads; up to 90 days.
- Visit source: where you came from (for example, which ad). Kept only until you close the browser, and sent with your request if you fill in the form.
You can change your choice at any time with the “Cookie settings” link at the bottom of the site.
8. Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy;
- ask us to correct inaccurate data;
- ask us to erase your data (“right to be forgotten”);
- ask us to restrict processing;
- data portability for the data you gave us;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email office@vajarovbg.com. We reply within one month and may ask you to confirm your identity.
You can lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
9. Security
We use appropriate technical and organisational measures: an encrypted connection (HTTPS), access to data only for staff who need it for their work, and reliable providers.
10. Changes to this policy
We may update this policy. The current version is always on this page, with its effective date at the top.