Privacy policy

1. Data controller

The controller of your personal data is BRILANS EOOD, UIC 208579455, registered office Business Park Sofia, Building 1, Floor 2, 1766 Sofia, Bulgaria, email office@brilans.com, phone +359 88 269 0209.

The company has not appointed a data protection officer. For any questions about your personal data, please write to office@brilans.com.

2. Visiting the website

This is an informational website – it has no registration or login forms, does not require you to provide personal data and does not profile visitors.

With every visit, our hosting provider’s server automatically records technical data: IP address, date and time of the request, the page requested, browser and operating system type, and the address of the page you came from. We use this data solely to keep the website running and secure and to detect and prevent abuse and attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Server logs are kept only for the short period needed for these purposes and are then deleted automatically. We do not use them to identify you.

3. When you contact us

When you email or call us, we process the data you choose to give us – usually your name, email address, phone number, organisation and the content of your enquiry. We use it to answer your enquiry and, if you wish, to prepare a consultation or an offer.

The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to correspondence we receive (Art. 6(1)(f) GDPR).

We keep correspondence for as long as it is needed for this purpose. If we enter into a contract, the related documents are retained for the periods required by law (for example the Bulgarian Accountancy Act). Providing data is voluntary, but without it we cannot reply to you.

4. Cookies

This website does not use cookies and does not store any information on your device. We do not use analytics, advertising or tracking tools or social media buttons, and we do not load resources from third parties – fonts and all other files are served from our own server. This is why the website does not show a cookie consent banner.

If this changes, we will update this policy and ask for your consent where the law requires it.

5. Recipients of the data

We do not sell your personal data or share it with third parties for marketing. The data may be accessible to the following providers, who process it on our behalf and on our instructions:

• SuperHosting.BG – website hosting;
• Microsoft Ireland Operations Limited – the Microsoft 365 email service we use to send and receive email.

When Microsoft services are used, data may also be processed outside the European Economic Area. In such cases the transfer takes place under appropriate safeguards in accordance with Chapter V GDPR – for example the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

We may also disclose data to public authorities where we are legally required to do so.

6. Your rights

With regard to your personal data, you have the right to:

• access (Art. 15 GDPR);
• rectification of inaccurate data (Art. 16 GDPR);
• erasure (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing based on legitimate interest (Art. 21 GDPR).

To exercise your rights, write to office@brilans.com. We will reply without undue delay and in any event within one month. We do not carry out automated decision-making, including profiling.

7. Right to lodge a complaint

If you believe we process your data in breach of the law, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, kzld@cpdp.bg, www.cpdp.bg. We would appreciate the chance to resolve your concern first, so please contact us.

8. Security

We apply appropriate technical and organisational measures to protect data, including an encrypted connection (HTTPS) to the website and restricted access to correspondence.

9. Changes to this policy

We may update this policy when the website or the law changes. The current version is always published on this page together with the date of the last update.