Privacy Policy

1. Data controller

The controller of the personal data processed through the website www.cybilas.com is CYBILAS Ltd. (СИБИЛАС ЕООД), UIC 208819078, entered in the Commercial Register of the Republic of Bulgaria, with head office and registered address: 19 Kavala Str., fl. 6, apt. 18, Odesos district, 9000 Varna, Bulgaria. The company is represented by Sibila Dinkova Stoilova (Manager and sole owner).

Contact for data protection matters: email office@cybilas.com, phone +359 88 746 1147. The company is not required to appoint a Data Protection Officer (DPO) under Art. 37 GDPR; for any matter concerning your personal data, please use the contacts above.

2. What personal data we process

Through the free consultation form on this website we collect only the data you provide voluntarily:

• full name;
• email address;
• phone number (optional);
• organisation type and type of service sought;
• free-text description of your project idea (optional);
• IP address, date and time of submission — recorded automatically when the form is submitted.

The website does not require registration and does not automatically collect other personal data. Information about the technologies used is available in the Cookie Policy.

3. Purposes and legal grounds of processing

We process the data provided for the following purposes:

• responding to your enquiry and providing a free consultation — on the basis of Art. 6(1)(b) of the General Data Protection Regulation (GDPR): taking steps at your request prior to entering into a contract;
• subsequent communication regarding our services — on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time;
• compliance with legal obligations (accounting, tax) where a contract is concluded — Art. 6(1)(c) GDPR;
• protecting the form against abuse and spam (IP address, date and time of submission) — on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

4. Retention period

Data from enquiries that do not result in a contract are stored for up to 12 months from receipt and then deleted. Data relating to concluded contracts are stored for the periods required by accounting and tax legislation.

5. Recipients of the data

We do not sell or share your personal data with third parties for marketing purposes. The data may be accessible only to: the website hosting provider; the company's accounting and legal advisers where necessary; and competent state authorities where required by law. The data are stored within the European Union.

6. Your rights

Under the GDPR you have the right to:

• access your personal data and information about its processing;
• rectification of inaccurate data;
• erasure ("right to be forgotten");
• restriction of processing;
• data portability;
• object to processing;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at office@cybilas.com. We will respond within one month.

7. Right to lodge a complaint

If you believe your rights have been violated, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

8. Data security

We apply appropriate technical and organisational measures to protect personal data, including an encrypted connection (HTTPS) for data transmitted through the website and restricted access to received enquiries.

9. Cookies

Information about cookies and third-party resources used on this website is provided in the separate Cookie Policy.

10. Changes to this policy

We reserve the right to update this policy. The current version is published on this page with its effective date indicated.