Privacy policy

The data controller is Paggas Technologies, Lozenets district, 6 "Nikola Y. Vaptsarov" Blvd., 1407 Sofia, Bulgaria.

For any question about this policy or about exercising your rights, email us at contact@paggas.bg.

Inquiry form. We collect only what you fill in yourself: name, email address, optional phone number, subject and the text of your message. We use it solely to answer your inquiry and to carry on the conversation that follows.

Technical data on form submission. To prevent spam and abuse we process your IP address and behavioural signals from Google reCAPTCHA. The IP address is used only for short-term rate limiting and is not stored in any database.

Visit statistics. If you have consented to analytics cookies, Google Analytics collects anonymised data about how the site is used. Without your consent no cookies are written and no identifier is created for you — see the Cookie policy for details.

We do not collect special categories of personal data, and we do not carry out automated decision-making or profiling of site visitors.

Where your inquiry concerns one of our services — Art. 6(1)(b) GDPR: taking steps at your request prior to entering into a contract.

Where the inquiry is of a general nature — Art. 6(1)(f) GDPR: our legitimate interest in replying to a message addressed to us.

For spam protection through reCAPTCHA and IP rate limiting — Art. 6(1)(f) GDPR: our legitimate interest in keeping the form working and preventing abuse.

For analytics cookies — Art. 6(1)(a) GDPR: your consent, which you can withdraw at any time.

We do not sell your personal data and do not pass it to third parties for marketing purposes. Access is limited to the members of our team who need it in order to reply to you, plus the following providers acting on our instructions:

Resend — delivers messages from the form to our company mailbox. It processes the data on servers within the European Union.

Vercel — hosts the website. It may process technical request data (IP address, browser type) for the operation and security of the service.

Google Ireland Ltd. — reCAPTCHA (form protection) and Google Analytics (statistics, only with consent). Google may transfer data outside the European Economic Area on the basis of standard contractual clauses approved by the European Commission.

Correspondence from the inquiry form is kept for up to 12 months after the conversation ends, unless the inquiry leads to a contract — in which case the data is kept for the term of the contract and for the retention periods required by law thereafter.

Analytics data in Google Analytics is retained according to the service settings, but no longer than 14 months.

Rate-limiting data lives in the server's memory for up to 10 minutes and is never written to storage.

Under the General Data Protection Regulation you have the right to: access your personal data; have inaccurate data corrected; have data erased (the "right to be forgotten"); restrict processing; data portability; object to processing based on legitimate interest; and withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, email us at contact@paggas.bg. We respond within one month of receiving your request.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection — 2 "Prof. Tsvetan Lazarov" Blvd., Sofia 1592, kzld.bg.

The site runs entirely over HTTPS. Messages from the form are transmitted encrypted and arrive directly in our company mailbox — they are not stored in a website database. Access to that mailbox and to the site administration is restricted to named individuals.

We may update this policy when our services, our providers or the law change. The current version is always available at this address, and the date of the last update is shown at the top.