Privacy policy

1. Who processes your data

The data controller is Vesmar - Machinex EOOD, UIC 119673702, VAT No. BG119673702, registered office 8 Yane Sandanski St., 8800 Sliven, Bulgaria. For any question about personal data, email office@vesmar.eu.

2. What we collect and why

Enquiry form

Your email (required), the selected service, company or contact person (optional), the description of your challenge and any attachments (optional). We use them to reply to your enquiry and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679 — GDPR) and, for enquiries on behalf of a company, our legitimate interest in replying to business contacts (Art. 6(1)(f)).

Please do not include sensitive data, or personal data of other people that the enquiry does not need, in the description or the files.

Meeting booking

The name, email and other details you enter in the Google booking calendar. We use them to schedule and hold the meeting. Legal basis: Art. 6(1)(b) GDPR.

Technical data

IP address, date and time, requested address and browser type are recorded in the hosting server logs. We use them for security and to detect abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The form also keeps a hashed (irreversibly transformed) fingerprint of the IP address for 15 minutes to limit bulk sending.

Do you have to give us your data?

No, providing data is voluntary. Without an email address, however, we cannot reply to your enquiry, and without a name and email Google cannot book the meeting.

3. How your enquiry is sent

The form sends your enquiry as an email to office@vesmar.eu. The website does not store enquiries in a database and never publishes attachments. The connection to the website is encrypted (HTTPS).

4. Who receives the data

• SuperHosting.BG (Bulgaria) — website and mail server hosting.
• Google — the meeting booking calendar and part of our business email. Google may process data outside the European Union under the EU–US Data Privacy Framework and standard contractual clauses. See the Google Privacy Policy.
• Public authorities — only where the law requires it.

We do not sell data or share it with others for marketing.

5. How long we keep data

• Enquiries and correspondence — as long as needed to reply and for any negotiations. If no contract follows, up to 2 years after the last correspondence. If a contract follows, for the periods set by Bulgarian accounting and tax law.
• Calendar meetings — up to 2 years after the meeting.
• IP fingerprint in the form — 15 minutes.
• Server logs — up to 3 months, then deleted automatically.

6. Cookies

The website uses no cookies, no Google Analytics and no advertising or tracking code. Fonts and images are served from our own server. The Google calendar loads only when you press “Open booking calendar”. After that, Google may use its own cookies under its policy.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. Email office@vesmar.eu. We reply free of charge within one month. We may ask you to confirm your identity.

8. Complaints

If you believe your data is processed unlawfully, you can complain to the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, kzld@cpdp.bg, www.cpdp.bg, or to the data protection authority in your EU country.

9. Automated decisions

We make no automated decisions and do no profiling.

10. Changes

When this policy changes, we publish the new version on this page with a new date. This version replaces the 2018 policy.