01Legal
Privacy Policy
Effective date: 1 October 2026
1. Controller
KONDEVS Ltd. (КОНДЕВС ЕООД)
UIC 203436971, VAT BG203436971
Akad. Petar Dinekov 23, 1415 Sofia, Bulgaria
Email: info@kondevs.com
2. Data we collect
Enquiries by email or phone
When you write to us or call us, we process your name, contact details and the content of your message to respond to your enquiry and to prepare any offer you ask for. We keep this correspondence only as long as needed for that purpose and any follow-up, or as long as the law requires us to keep business records.
Website analytics
We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies and does not collect personal data. Only aggregate, anonymous traffic statistics are produced; no individual visitor is identified.
Server logs
Our hosting provider (Cloudflare) collects standard server access logs, which may include IP addresses, browser type and pages visited. These logs are used for security and performance purposes and are retained according to Cloudflare's data retention policies.
3. Legal basis for processing
We process personal data on the following legal bases under the GDPR:
- Steps before a contract (Article 6(1)(b)) and legitimate interest (Article 6(1)(f)): to answer your enquiry and to prepare an offer you ask for.
- Legitimate interest (Article 6(1)(f)): to operate, secure and maintain the website, prevent abuse, and keep server logs.
4. Data sharing (processors)
We do not sell, rent or trade your personal data. We share it only with the service providers (processors) needed to operate the site:
- Cloudflare: hosting, CDN, security and bot protection.
These processors act on our instructions under data processing agreements and process data in accordance with the GDPR.
5. International transfers
Our hosting provider, Cloudflare, is based in the United States and may process personal data outside the European Economic Area (EEA). Where data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the processor's certification under the EU-US Data Privacy Framework. You can request more information about these safeguards using the contact details below.
6. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3))
- Lodge a complaint with a supervisory authority: in Bulgaria, the Commission for Personal Data Protection (Комисия за защита на личните данни), cpdp.bg
To exercise any of these rights, contact us at info@kondevs.com.
7. Cookies
This website sets no cookies of its own, and we do not use cookies for tracking, profiling or advertising. Cloudflare, which hosts the site, may set its own strictly necessary cookies for security and bot protection. They are not used for tracking.
8. Data security
We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, secure email transmission, and access controls.
9. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date.
10. Contact
For privacy-related enquiries, contact us at:
Email: info@kondevs.com