Privacy

Here we explain what personal data the bora-bg.com website collects, why, how long we keep it and what rights you have. This policy follows the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the Bulgarian Personal Data Protection Act.

Who processes your data

The controller of your personal data is BORA Solutions Ltd., UIC 131142618, with its registered office and address of management at floor 1, 280 Tsar Simeon Str., 1309 Sofia. For questions about personal data, write to bora@bora-bg.com or call us on +359 886 315 435.

What data we collect

  • When you write to us through the form on the Contacts page: your name, e-mail address and the text of the message.
  • When you e-mail or call us: the data you give us yourself.
  • If you are our client and log in to the client area: your username, e-mail and password (we store it only in encrypted form).
  • Technical data on every visit: IP address, browser type, date and time and the pages visited. These are recorded in the server logs for the security of the website.
  • Only if you agree in the cookie banner: data on how you use the website (Google Analytics) and on the effect of our advertising (Meta Pixel). Cookies are described in detail in the Cookie Policy.

We do not collect sensitive data (for example about health, religion or political views) and do not ask for it through the website.

What we use it for and on what legal basis

  • To answer your enquiry and send you a quote: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering enquiries (point (f)).
  • For the client area and client support: performance of the contract (point (b)).
  • For website security and protection against misuse: legitimate interest (point (f)).
  • For statistics and advertising: only with your consent (point (a)). You can withdraw it at any time from “Cookies” at the bottom of the website.
  • When the law requires us to keep or disclose data, for example to a public authority: legal obligation (point (c)).

We do not sell or rent out personal data. We do not make decisions about you by automated means alone.

Who else may see the data

The data is available only to our employees who need it for their work. We also use providers that process data on our behalf and on our instructions:

  • website hosting: WordPress.com (Automattic), with servers in the EU;
  • statistics: Google Analytics (Google), only with your consent;
  • advertising: Meta Pixel (Meta), only with your consent;
  • the map on the Contacts page: Google Maps, only when you ask for it.

Google and Meta may transfer data outside the European Union, including to the United States. This is done on the basis of the European Commission’s decision on the EU-U.S. Data Privacy Framework or of standard contractual clauses.

How long we keep the data

  • Messages from the form and correspondence: as long as needed to answer and follow up the enquiry, and if you become a client, for the term of the contract and the periods required by law.
  • Client area accounts: as long as you are our client. After that we close them.
  • Cookies: according to the periods in the Cookie Policy.

Your rights

You have the right to ask for access to your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format and to object to processing based on legitimate interest. Where we process data with your consent, you can withdraw it at any time. This does not affect the lawfulness of the processing up to that point.

To exercise your rights, write to bora@bora-bg.com. We reply within one month. If you believe your rights have been infringed, you can lodge a complaint with the Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg).

Cookies

The website uses necessary cookies in order to work. Cookies for statistics, advertising and external content are switched on only if you accept them. You can change your choice at any time from “Cookies” at the bottom of the website. Details: Cookie Policy.

How we protect the data

The website runs only over a secure connection (HTTPS). Access to the data is restricted by role, passwords are stored encrypted, and our providers are required to keep the data confidential.

Other companies’ websites

The website contains links to other websites, for example Facebook, LinkedIn and public institutions. They have their own privacy rules, for which we are not responsible. We recommend that you read them.

Changes to this policy

When we change the policy, we publish the new text here. Last updated: 5 October 2026.