Privacy Policy (GDPR)

This notice explains what personal data this website collects, why, and what rights you have. It follows Regulation (EU) 2016/679 (GDPR).

1. Who processes your data

Controller: Chem AS Engineering Ltd
Company ID (UIC): [fill in]
Address: Sofia, Bulgaria
Email: rihristov@yahoo.com
Phone: +359 2 999 0000

2. What we collect, and on what basis

2.1. Enquiries sent through the contact form

We process: your name, email address, phone and company (if provided), subject, the message itself, the language of the site, plus the IP address and browser the message was sent from — the last two only to protect against abuse.

Purpose: to answer your enquiry and continue the correspondence.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by the checkbox on the form, and/or steps taken at your request prior to entering a contract (Art. 6(1)(b)).
Retention: [12 months] from the last correspondence, unless a contract follows, in which case statutory accounting retention periods apply.

2.2. Server logs

Our hosting provider records standard access logs (IP address, date and time, requested address, browser).

Purpose: security, diagnostics and protection against attacks.
Legal basis: legitimate interest (Art. 6(1)(f)).
Retention: per the hosting provider's policy.

2.3. Site search statistics

We record which words are searched on the site, in which language, and how many results were found, so we can see what content is missing. These records contain no IP address, cookie or other identifier and cannot identify you. They are kept for up to 12 months.

2.4. Cookies

See the separate Cookie Policy.

3. Who we share data with

We do not sell your data and do not share it for marketing. Access is limited to:

• Our hosting provider — storage of the site and database (processor);
• Our email provider — delivery of enquiries;
• Google — only if you explicitly choose to load the map on the Contacts page. Google then receives your IP address and may process data outside the EU under the safeguards of Art. 46 GDPR.

4. Your rights

You have the right to: access your data; have inaccurate data corrected; have data erased; restrict processing; data portability; object to processing based on legitimate interest; and withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these, write to rihristov@yahoo.com. We respond within one month.

5. Right to complain

If you believe your rights have been infringed, you may complain to the Bulgarian supervisory authority:
Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 3 518 · Email: kzld@cpdp.bg · www.cpdp.bg

6. Security

The site runs over an encrypted connection (HTTPS). The administration area is protected by individual accounts and passwords, limited to staff who need it.

7. Children

This site addresses professional customers and does not knowingly collect data from anyone under 18.

8. Changes

Any change to this notice is published on this page.
Last updated: [date].