1. Who is responsible for your data
The data controller is [COMPANY LEGAL NAME], UIC [UIC NUMBER], [REGISTERED ADDRESS], Republic of Bulgaria (“Yasko Pro Services”, “we”). For any privacy question or request, email [email protected].
We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
2. What data we collect
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Name, email, company or website, message, selected packages | Checkout (order request) form | To respond to your request and prepare an offer | Steps before entering a contract (Art. 6(1)(b) GDPR) |
| Contact, billing and project information | You, during the engagement | To deliver the services, invoice and communicate | Performance of a contract (Art. 6(1)(b)) |
| Invoices and accounting records | Our records | To meet tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| IP address, browser type, request logs | Automatically, when you visit the site | To deliver the website securely and prevent abuse | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling, and we do not sell it.
3. Who we share it with
We use a small number of trusted service providers (processors) who handle data only on our instructions:
- Cloudflare, Inc. – website hosting, security and content delivery.
- Resend – delivery of order-request emails from our website.
- Google Fonts (Google LLC) – web fonts; your browser connects to Google’s servers, which receive your IP address.
- Our accountant and payment providers – for invoicing and bookkeeping.
Some of these providers are based in the United States. Where data is transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
4. How long we keep it
- Order requests that do not lead to an engagement: up to 12 months.
- Client and project records: for the engagement and up to 5 years afterwards, for legal claims.
- Invoices and accounting documents: 10 years, as required by the Bulgarian Accountancy Act.
- Server logs: kept by our hosting provider for a short period for security purposes.
5. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where there is no legal reason for us to keep it;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise any right, email [email protected]. We will reply within one month.
You also have the right to complain to the Bulgarian Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, cpdp.bg, or to the data protection authority in your EU country.
6. Security
The website is served only over encrypted HTTPS connections, and we limit access to personal data to people who need it to deliver our services.
7. Cookies
We do not use tracking or advertising cookies. See our Cookie Policy for details.
8. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page, with the date it was last updated.