Draft for legal review. Items in square brackets are to be completed before publishing.
1. Who processes your data
The data controller is [Company / Venelina Nedelcheva], UIC [●], address [●] (“Veni Verti”, “we”). For any question about your personal data write to hello@veniverti.com.
2. What we collect and why
When you contact us (email or contact form): name, email, phone (if you give it) and the content of your message. We use them to reply and, if there is interest, to prepare a quote. Legal basis: steps at your request prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
When you browse the site: our hosting provider Cloudflare processes technical data (IP address, browser type, time of request) for security and delivery of the pages. This data is not used for profiling. Legal basis: legitimate interest in the security and operation of the site (Art. 6(1)(f)).
Visitor statistics: we use Cloudflare Web Analytics, which works without cookies and without cross-site tracking. Only aggregated data is collected (visits, pages, country, device type), from which you cannot be identified.
3. Cookies
The site does not use cookies for tracking or advertising. Browser local storage may be used solely for technical preferences (for example the chosen language). Should we add cookies that require consent in the future, we will ask you through a banner before they are set and update this policy.
4. Who we share data with
Your data is not sold. It is shared only with providers who help us run the site and our communication and who act on our instructions:
- Cloudflare, Inc. — hosting, security and analytics (servers in the EU and the US; standard contractual clauses).
- Google LLC (Google Workspace) — email, hello@veniverti.com.
- [Contact form provider — Web3Forms / Formspree] — forwarding form messages to our email.
5. How long we keep data
Enquiry correspondence is kept for up to [2 years] after the last contact, unless a contract follows — then as required by accounting and tax law. Cloudflare’s technical logs are kept short-term under its own rules.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent where processing is based on it. Write to hello@veniverti.com — we reply within one month.
You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, cpdp.bg.
7. Security
The site is served over an encrypted connection (HTTPS). Access to the mailbox and the content management system is restricted and protected by authentication.
8. Changes
If this policy changes, we will publish the new version on this page with an updated date.