Privacy Policy
How we process your personal data when you use this website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Bulgarian Personal Data Protection Act.
Last updated:
Data controller
The controller of the personal data processed through this website is:
- Name: Energy Expert Engineering LTD
- Company ID (UIC / BULSTAT): 203938819
- Address: 11 21-vi vek St., bl. 2, Sofia, Bulgaria
- Phone: +359 87 743 4515
For any question about data protection, or to exercise your rights, write to us at:
What data we process
We process only the data needed for the purposes described below:
- Offer request form data: name, email address and message (required), plus company, phone, project location and requested service (optional).
- Data from direct contact by phone or email: the contact details you give us and the content of the correspondence.
- Technical data: IP address, browser and device type, date and time of the request, and the address of the requested page. These are processed automatically by our hosting and content delivery provider (Cloudflare) when the site is loaded, and for security purposes.
- Anti-spam data: when you submit the form, we use Cloudflare Turnstile, which analyses technical characteristics of the connection and browser (for example the IP address) to tell a person from an automated program.
We do not collect special categories of personal data and do not ask you to enter them. Please do not include such data in your project description.
Purposes and legal bases
- Responding to your enquiry and preparing an offer: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
- Conducting business correspondence and handling enquiries, including from company representatives: Article 6(1)(f) GDPR (our legitimate interest in serving customers and prospective customers).
- Site security and protection against spam and abuse: Article 6(1)(f) GDPR (our legitimate interest in keeping our systems secure and working).
- Complying with legal obligations (for example accounting and tax) if a contract is later concluded: Article 6(1)(c) GDPR.
Providing your name, email address and message in the form is necessary for us to reply; without them we cannot process the request. The other fields are optional.
We do not take decisions based solely on automated processing (including profiling) that produce legal effects for you. Your data is not used for direct marketing and is not sold.
Recipients of the data
Your data may be disclosed only to parties that help us process it (processors), and where the law requires it:
- Cloudflare, Inc. — website hosting, content delivery network, processing of the form request, and spam protection (Cloudflare Turnstile).
- Resend — an email delivery service through which the form message reaches our mailbox.
- Gmail — the provider of our business email, where we receive and keep messages.
- Accountants, lawyers, subcontractors and other advisers — only as far as needed for a specific enquiry or contract and under a duty of confidentiality.
- Public authorities — where required by law.
Transfers outside the EEA
Some of our providers (for example Cloudflare and Resend) are based in the United States or process data outside the European Economic Area. Transfers take place only with appropriate safeguards under Chapter V GDPR: a European Commission adequacy decision (for example the EU–US Data Privacy Framework, where the provider is certified under it) and/or Standard Contractual Clauses. On request, we will give you information about the safeguards applied.
Retention
- Form submissions are not stored on the website: they are forwarded by email and no copy is kept on the site.
- Correspondence about enquiries is kept for as long as needed to handle the enquiry and any follow-up discussions. If no cooperation follows, we delete it once it is no longer needed.
- If a contract is concluded, data is kept for the term of the contract and afterwards for the periods required by law (for example accounting and tax legislation) or while we have grounds to establish, exercise or defend legal claims.
- Technical logs are kept by the relevant providers for a limited period according to their settings and policies.
Links to other websites
The site links to external resources (for example our Facebook page). They open in a new tab and are run by their own operators, who process data under their own privacy policies. We do not load social network scripts or widgets on the pages of this site.
Changes to this policy
We may update this policy, for example when our data processing or the law changes. The current version is always published on this page, and the date of the last change is shown at the top.