Privacy Policy

Effective date: 22 April 2026
Last updated: 22 April 2026

1. Who we are

This Privacy Policy explains how Bulgaria Sat EAD ("Bulgaria Sat", "we", "us", "our") collects, uses, stores and protects personal data when you visit and use the website https://bulgariasat.com/.

The public contact information shown on the website includes: 15 Magnaurska shkola str, 3rd floor, 1784 Sofia, Bulgaria, telephone +359 2 965 4707, and email inquiries@bulgariasat.com. The website also identifies dpo@bulgariasat.com as the contact address for privacy matters.

For the purposes of applicable data protection law, Bulgaria Sat EAD is the data controller for personal data collected through this website, unless this Policy states otherwise.

2. Scope of this Policy

This Privacy Policy applies to personal data collected through the Bulgaria Sat website, including when you browse the website, contact us through the contact form, send us an email, apply for a job or submit a CV through the website, or interact with content, links, or embedded third-party services on the website.

This Policy does not apply to third-party websites linked from our website. Those websites have their own terms and privacy policies.

3. What personal data we collect

3.1 Information you provide directly

When you contact us or submit information through the website, we may collect the following:

• full name;
• email address;
• phone number;
• company name and job title, where relevant;
• the contents of your message or enquiry;
• any documents or attachments you send to us;
• any additional information you choose to provide.

The website includes a contact form requesting name, email, phone number, and message.

3.2 Recruitment and careers information

If you apply for a job or send a CV, we may collect:

• your identification and contact details;
• CV/resume;
• education and employment history;
• professional qualifications and skills;
• references or referee details you provide;
• any additional information included in your application.

Applicant data may be processed for recruitment and staffing purposes.

3.3 Information collected automatically

When you visit the website, we may automatically collect certain technical and usage information, such as:

• IP address;
• browser type and version;
• device type and operating system;
• referring website;
• pages viewed and time spent on pages;
• date and time of access;
• clickstream and interaction data;
• approximate geographic location inferred from technical data;
• cookie identifiers and similar online identifiers.

4. Sources of personal data

We collect personal data directly from you, automatically from your device or browser when you use the website, from service providers that support website hosting, security, analytics, communications, or recruitment administration, and from third parties where you choose to interact with embedded or linked social media or other third-party features.

5. Why we process your personal data and legal bases

We process personal data only where we have a valid legal basis to do so.

5.1 To respond to enquiries and requests

We use your personal data to respond to questions, support requests, business enquiries, and other communications.

Legal basis:

• your consent, where you voluntarily submit an enquiry;
• our legitimate interests in communicating with website users and managing our business;
• compliance with legal obligations where applicable.

5.2 To manage recruitment and job applications

We use applicant information to evaluate applications, communicate with candidates, manage recruitment processes, and keep records relating to hiring decisions.

Legal basis:

• steps prior to entering into a contract;
• your consent where applicable;
• our legitimate interests in recruitment and staffing;
• compliance with legal obligations.

5.3 To operate, maintain, and secure the website

We process technical and usage data to keep the website working, prevent misuse, troubleshoot errors, detect security incidents, and protect our systems.

Legal basis:

• our legitimate interests in maintaining a secure and functional website;
• compliance with legal obligations.

5.4 To analyze website performance and improve our services

We may use analytics and aggregated usage information to understand how visitors use the website and improve its design, content, and performance.

Legal basis:

• your consent, where cookies or similar technologies require consent;
• otherwise, our legitimate interests in improving the website and user experience.

5.5 To comply with law and protect rights

We may process personal data where necessary to comply with legal obligations, enforce our rights, respond to lawful requests, or protect our business, employees, users, and systems.

Legal basis:

• compliance with legal obligations;
• our legitimate interests;
• establishment, exercise, or defense of legal claims.

6. Cookies and similar technologies

We use cookies and similar technologies on the website. Some are necessary for the website to function, while others help us understand usage and improve performance. For more information, please see our Cookie Policy.

7. Who we share personal data with

We do not sell your personal data. We may share personal data with:

• IT, hosting, and website support providers;
• analytics, security, and communications service providers;
• recruitment-related service providers and advisers;
• affiliated companies where necessary for legitimate internal administration;
• legal, regulatory, judicial, or public authorities where required by law;
• professional advisers, auditors, insurers, or potential transaction parties where necessary to protect our legitimate interests.

8. International transfers

If we use service providers or infrastructure located outside Bulgaria or the European Economic Area, your personal data may be transferred internationally. Where that happens, we will take appropriate safeguards required by applicable law, including adequacy decisions or standard contractual clauses where relevant.

9. How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory, or reporting requirements.

Indicative retention periods may include:

• Contact enquiries: for as long as necessary to respond to the enquiry and maintain related business records;
• Technical logs and security records: for a limited period necessary for security, troubleshooting, and audit purposes;
• Recruitment data and CVs: up to 12 months after receipt or closure of the recruitment process, unless a longer period is required by law or you consent to longer retention.

10. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent at any time, where processing is based on consent;
• request data portability, where applicable;
• lodge a complaint with a competent supervisory authority.

11. How to exercise your rights

To exercise your rights or ask a privacy-related question, please contact us at:

• Data protection contact: dpo@bulgariasat.com
• General contact: inquiries@bulgariasat.com
• Postal address: 15 Magnaurska shkola str, 3rd floor, 1784 Sofia, Bulgaria

We may request information necessary to verify your identity before responding.

12. Children

This website is not intended for children under the age of 14, and we do not knowingly collect personal data from children under 14 through the website.

If you believe a child has provided personal data through the website, please contact us and we will take appropriate steps.

13. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no website or online transmission can be guaranteed to be completely secure.

14. Third-party links and social media

The website may contain links to third-party websites or social media services. If you click those links or interact with third-party content, your personal data may be processed by those third parties under their own privacy policies.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page together with the revised "Last updated" date.