PrivacyPolicy

The controller of your personal data is Aureum Systems & Consulting. To exercise your rights, please use the contact form on this website.

We process only the data you provide to us yourself through the contact form:

• your name;
• your company;
• your work email address;
• your telephone number — optional;
• the areas you are interested in;
• the content of your message.

Please do not include sensitive information in your message — for example health data, data relating to your clients or information protected by professional secrecy. It is not needed for an initial inquiry.

As with any website, the hosting provider may process technical data about requests to the server (for example IP address, browser type and time of the request) that is necessary to deliver the website and keep it secure.

We use the data from the form solely to respond to your inquiry and to conduct any follow-up correspondence with you about it — including preparing a proposal, if you have asked for one.

• Article 6(1)(b) of the General Data Protection Regulation (GDPR) — taking steps at your request prior to the possible conclusion of a contract;
• Article 6(1)(f) GDPR — our legitimate interest in responding to the inquiries we receive and in maintaining the security of the website.

We do not use your data for marketing newsletters, profiling or automated decision-making.

We keep the data from your inquiry for as long as necessary to process it and to conduct the related correspondence, but no longer than 24 months after our last contact with you. If the inquiry develops into a contractual relationship, the data is kept for the periods applicable to that relationship and to our legal obligations. Once the period expires, the data is deleted.

We do not sell your data or provide it to third parties for their own purposes. The following may have access to it:

• the hosting provider on which the website runs;
• the email and inquiry-management service providers through which we receive the form;
• public authorities — only where required by law.

These providers process the data on our behalf as processors, on our instructions and under a contract. If any of them processes data outside the European Economic Area, the transfer takes place only subject to appropriate safeguards under Chapter V of the GDPR, such as standard contractual clauses.

The website does not set cookies and does not use advertising or cross-site tracking tools. We do not store information in your browser using local storage.

For aggregate visitor statistics we use Vercel Web Analytics — a cookieless service that does not build visitor profiles and does not store IP addresses. It records only aggregate data such as the pages visited, the source of the visit, the country and the device type.

Fonts and other resources are loaded from the same server on which the website runs. Should this change in future, we will update this policy before the change takes effect.

Under the GDPR, you have the right:

• of access to your personal data and to a copy of it;
• to request the rectification of inaccurate or incomplete data;
• to request the erasure of your data (the “right to be forgotten”);
• to request the restriction of processing;
• to the portability of the data you have provided to us;
• to object to processing based on legitimate interest.

To exercise your rights, send a request through the contact form. We will respond without undue delay and no later than one month after receiving it. We may ask for additional information to confirm your identity.

If you believe that we are processing your data in breach of the law, you have the right to lodge a complaint with the Commission for Personal Data Protection (КЗЛД) — www.cpdp.bg — or with the supervisory authority in the Member State in which you live or work. We would be grateful if you contacted us first, so that we can try to resolve the matter.

Data from the form is transmitted over an encrypted connection (HTTPS). Only the people who respond to inquiries have access to the inquiries received. We apply technical and organisational measures appropriate to the nature of the data and the risks involved in processing it.

We may update this policy when the website, the services we use or the applicable law change. The date of the last update is shown at the top of this page.