Privacy Policy

Last updated: October 25, 2025

1. Introduction and Data Controller

This Privacy Policy explains how we collect, use, and protect your personal information when you use our website or engage our services. We, WEB AL EOOD, are committed to protecting your privacy and handling your data responsibly in accordance with GDPR and Bulgarian data protection laws.

Data Controller:

WEB AL EOOD
Tsar Asen 35
Plovdiv, Bulgaria
VAT: BG206941336
Email: alexey.voronkov1988@gmail.com

2. Information We Collect

We collect the following types of information:

  • Contact Information: Name, email address, phone number, and company details when you reach out or engage our services
  • Project Information: Details about your project requirements, technical specifications, and business needs
  • Communication Records: Emails, messages, and meeting notes related to our professional engagement
  • Usage Data: Information about how you interact with our website, including IP address, browser type, and pages visited
  • Payment Information: Billing details and payment history (processed securely through third-party payment processors)
  • Technical Data: Device information, log files, and cookie data for website optimization and security

3. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to enter into and perform our contract with you
  • Legal Obligations: Compliance with legal obligations under Bulgarian law and EU regulations
  • Legitimate Interests: Our legitimate business interests in providing and improving our services
  • Consent: Your explicit consent for specific processing activities such as marketing communications

4. How We Use Your Information

We use your information to:

  • Provide and deliver the services you request
  • Communicate with you about projects, updates, and service-related matters
  • Process payments and maintain financial records for tax compliance
  • Improve our services and website functionality
  • Comply with legal obligations and resolve disputes
  • Send occasional updates about our services (you can opt out at any time)
  • Protect against fraud and ensure website security

5. Information Sharing

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

  • With your explicit consent
  • With service providers who assist in delivering services (e.g., payment processors, hosting providers, communication platforms)
  • When required by law or to protect legal rights
  • In connection with a business transfer or acquisition (with prior notice to affected individuals)
  • With professional advisors (lawyers, accountants) for legal and tax purposes

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide services and comply with legal obligations. Specifically:

  • Project-related information is retained for 7 years for tax and legal purposes as required by Bulgarian law
  • Financial records are retained in accordance with Bulgarian accounting regulations (minimum 5-7 years)
  • Communication records are retained as needed for contract performance and dispute resolution
  • You may request deletion of your data at any time, subject to legal retention requirements

8. Cookies and Tracking

Our website may use cookies and similar tracking technologies to enhance user experience and analyze website traffic. We use:

  • Essential cookies: Required for website functionality
  • Analytics cookies: To understand how you use our site
  • Preference cookies: To remember your settings

You can control cookie preferences through your browser settings. Disabling cookies may affect website functionality.

9. Third-Party Services

We may use third-party services such as analytics tools, payment processors, and communication platforms. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services but ensure all processors meet GDPR requirements.

10. Your Rights Under GDPR

You have the right to:

  • Right of Access: Obtain a copy of your personal information held by us
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Erasure: Request deletion of your personal information (subject to legal retention requirements)
  • Right to Restrict Processing: Object to or restrict certain processing of your data
  • Right to Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller
  • Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  • Right to Lodge a Complaint: File a complaint with the Bulgarian Commission for Personal Data Protection (CPDP)

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable EU data protection standards. Any transfers outside the EU are protected by appropriate legal mechanisms (Standard Contractual Clauses, adequacy decisions, or your explicit consent).

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at alexey.voronkov1988@gmail.com.

13. Data Processing Agreements

For business clients who engage our services to process their data or data of their clients, we are prepared to sign Data Processing Agreements (DPA) in compliance with GDPR Article 28. Please contact us to discuss your specific data processing requirements.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the updated policy.

15. Contact Us and Data Subject Rights

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: alexey.voronkov1988@gmail.com

Company: WEB AL EOOD

Address: Tsar Asen 35, Plovdiv, Bulgaria

VAT: BG206941336

We will respond to your request within 30 days or as required by law.

16. Complaints

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) if you believe we have violated your privacy rights. You can find more information at the CPDP website.

Alexey Voronkov - Full Stack Developer & Fractional CTO | webal.dev