Privacy policy

Controller

Tech Art EOOD, UIC 204248002, 45 Bulgaria Blvd., Veliko Tarnovo, Bulgaria. Questions about personal data: office@ofsec.org.

Visiting the site

The site uses no cookies, no tracking scripts and no external analytics services. Fonts and all other resources are loaded from our own server.

The site reaches visitors through the Cloudflare network, which provides protection against attacks and content delivery. Cloudflare processes the IP address and technical request data (browser, requested address, time). The legal basis is our legitimate interest in keeping the site available and secure (Article 6(1)(f) GDPR). Our server keeps no visit logs.

Your choice of light or dark theme is stored only in your browser's local storage and is not sent to us.

Requests through the form

When you send a request, we process the data you enter: company, company ID or VAT number, name and position, work email, a description of the situation and any attached files, as well as the IP address from which the request was sent.

Purpose: to reply to the request and prepare a proposal.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in preventing abuse of the form.
Retention: if no engagement starts, we delete the request within 30 days of our reply. If we conclude a contract, the data is kept for the duration of the contract and for the periods required by law, for example accounting legislation.

The request form does not send automatic emails to the address entered.

When you request the free checklist or the newsletter, we process your work email and, if you provide them, your name and company. We also store the time of the request and of the confirmation, the version of the consent text and a keyed hash of the IP address (not the address itself), so that we can demonstrate consent and prevent abuse.

Confirmation: we send one email with a confirmation link to the address entered, valid for 48 hours. Without confirmation, the address is not added and the request is deleted automatically within 7 days.
Legal basis: fulfilling your request for the checklist (Article 6(1)(b) GDPR) and your consent for the newsletter (Article 6(1)(a) GDPR). Consent to the newsletter is separate and is not a condition for receiving the checklist.
Withdrawal: you can unsubscribe at any time through the link in every email or by writing to office@ofsec.org. After you unsubscribe we keep only the address and the date of unsubscribing, so that we do not email you again.
Retention: if you did not subscribe to the newsletter, we delete your data 30 days after confirmation. Subscribers remain on the list until they unsubscribe.
Storage: the data is kept in a database on our server in the European Union. The emails are sent through Cloudflare Email Service.

Recipients and processors

Cloudflare, Inc.: site delivery, protection, routing and sending of business email. Data may be transferred to the United States on the basis of the EU-U.S. Data Privacy Framework and standard contractual clauses.
Google: the business mailbox that receives requests.
The server hosting provider in the European Union.

We do not sell personal data or share it with third parties for marketing.

Your rights

You have the right of access to your data, to rectification, erasure and restriction of processing, to data portability and to object to processing based on legitimate interest. You can exercise your rights by writing to office@ofsec.org. We reply within one month.

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, cpdp.bg.

Changes

When this policy changes, we publish the new version on this page with the date of the update. The Bulgarian version of this policy prevails in case of discrepancy.