en
PRIVACY POLICY AND DATA PROTECTION
I. Introduction
This Privacy and Personal Data Protection Policy explains how KONTECH Ltd. processes personal data in connection with the use of the website www.kontech.bg.
This Policy has been prepared in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation or GDPR, and the applicable Bulgarian legislation.
The Website is informational and representative in nature. Direct online sales, online payments or automatic conclusion of contracts are not carried out through it.
II. Website holder details and contact
The holder of the Website is:
KONTECH Ltd
UIC: 206700303
Registered seat: Bulgaria, Montana, postal code 3400
Website: www.kontech.bg
Email for contact and correspondence: sales@kontech.bg
Telephone: 0888 35 00 66
For questions related to the processing of personal data, you may contact us at sales@kontech.bg, indicating “Personal Data” in the subject line of your email.
III. What personal data we process
Depending on the way in which you use the Website, we may process the following categories of data:
1. Data provided through the contact form
When you send an inquiry through the contact form, we may process:
- name;
- telephone number;
- email address, if provided in the form or in the message;
- message content;
- selected product interest;
- technical parameters related to the inquiry;
- attached files;
- photographs of a nameplate, model, equipment or another object related to the inquiry;
- data contained in the attached files or photographs.
Please do not send personal identity documents, personal identification numbers, banking data, special categories of personal data or any other information that is not necessary for reviewing the inquiry through the contact form.
2. Data from communication with us
When you contact us by email, telephone or another communication channel, we may process the data contained in the relevant correspondence, including name, telephone number, email, company, position, inquiry content, offers, technical parameters and other information provided by you.
3. Technical data related to the use of the Website
When visiting the Website, technical data may be processed, such as:
- IP address;
- browser type and version;
- device type;
- operating system;
- date and time of visit;
- pages visited;
- technical logs related to the security and normal functioning of the Website.
4. Data through Google Analytics 4
The Website uses Google Analytics 4 only after consent has been obtained through the cookie banner.
Through Google Analytics 4, data on the use of the Website may be processed, such as pages visited, events, approximate location, device type, browser, source of the visit and identifiers related to analytical cookies.
Google Analytics 4 is used for statistical analysis and improvement of the Website. We do not use Google Analytics 4 for remarketing, personalised advertising or profiling for advertising purposes.
5. Data through Google Search Console
We use Google Search Console for technical and SEO monitoring of the Website’s performance in Google Search.
Google Search Console provides mainly aggregated information, such as search queries, impressions, clicks, positions, indexing and technical issues. We do not use this tool to directly identify individual visitors to the Website.
IV. Purposes for which we process personal data
We process personal data for the following purposes:
1. reviewing inquiries sent through the contact form;
2. preparing and sending a response or individual offer;
3. subsequent communication in connection with an inquiry, technical parameters, product solution or potential commercial relationship;
4. processing attached files and photographs where necessary for reviewing the inquiry;
5. maintaining correspondence and evidencing the communication carried out;
6. protecting the rights and legitimate interests of KONTECH;
7. ensuring the security, stability and normal functioning of the Website;
8. analysing Website traffic and use through Google Analytics 4, only after consent;
9. technical and SEO monitoring through Google Search Console;
10. fulfilling legal obligations where applicable.
V. Legal bases for processing
We process personal data only where there is an applicable legal basis.
| Purpose of processing | Categories of data | Legal basis |
|---|---|---|
| Reviewing an inquiry and preparing a response or offer | name, telephone number, email, message, product interest, technical parameters, attached files | Article 6(1)(b) GDPR — taking steps at the request of the data subject prior to entering into a contract |
| Subsequent communication regarding an inquiry or offer | correspondence data, technical and commercial information | Article 6(1)(b) GDPR and/or Article 6(1)(f) GDPR — legitimate interest |
| Storing correspondence to evidence communication and defend against or bring claims | emails, inquiries, offers, communication history | Article 6(1)(f) GDPR — legitimate interest |
| Security and maintenance of the Website | technical logs, IP address, device and browser data | Article 6(1)(f) GDPR — legitimate interest |
| Statistics through Google Analytics 4 | analytical cookies, client identifiers, Website usage data | Article 6(1)(a) GDPR — consent |
| Google Search Console and SEO monitoring | aggregated data on performance in Google Search | Article 6(1)(f) GDPR — legitimate interest |
| Fulfilment of legal obligations | data required by law | Article 6(1)(c) GDPR — legal obligation |
VI. Recipients of personal data
Personal data may be processed by the following categories of recipients only to the extent necessary for the purposes set out in this Policy:
1. hosting service provider;
2. providers of technical support and Website administration;
3. email and communication service providers;
4. Google Ireland Limited in connection with Google Analytics 4 and Google Search Console;
5. accounting, legal or other professional advisers, where necessary;
6. competent public authorities, where required by law.
KONTECH does not sell personal data and does not provide data from the contact form to third parties for their own marketing purposes.
VII. Transfers outside the European Economic Area
In connection with the use of Google services, data may be processed by Google Ireland Limited and/or Google’s affiliated companies, including outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, such transfer is carried out on the basis of an applicable mechanism under the GDPR, including an adequacy decision, the EU–US Data Privacy Framework where the recipient is certified, standard contractual clauses or another applicable protection mechanism.
VIII. Retention periods
We retain personal data only for as long as necessary to achieve the purposes for which it was collected, unless a longer period is required or permitted by law.
| Data category | Retention period |
|---|---|
| Inquiries that do not lead to an offer or subsequent commercial relationship | up to 12 months from receipt of the inquiry |
| Inquiries for which an offer has been prepared | up to 5 years where necessary to evidence communication and protect rights |
| Attached files that do not lead to an offer or subsequent commercial relationship | up to 12 months |
| Attached files that form part of an offer, project or commercial documentation | for the period applicable to the relevant offer, project or commercial documentation |
| Email correspondence regarding inquiries and offers | up to 5 years, unless a longer period is required by law or due to a dispute |
| Server logs and security data | up to 6 months, except in the event of a technical incident or dispute |
| Data from Google Analytics 4 | according to the retention period set in Google Analytics 4, but no more than 14 months, unless the settings are changed |
| Cookie consent records | up to 13 months or for the period determined by the consent management mechanism used |
After the applicable period expires, the data is deleted, anonymised or archived where this is permissible and necessary under the law.
IX. Cookies and similar technologies
The Website uses cookies and similar technologies.
Necessary cookies are used for the normal functioning of the Website and do not require consent.
Analytical cookies of Google Analytics 4 are used only after consent has been given through the cookie banner. The user may refuse or withdraw consent at any time through the cookie settings on the Website.
Detailed information is available in the Cookie Policy.
X. Personal data security
We apply appropriate technical and organisational measures to protect personal data, including:
1. use of a secure HTTPS connection;
2. restricted access to administrative panels and systems;
3. access to inquiries and correspondence only by authorised persons;
4. measures to protect email communication and administrative accounts;
5. technical support and Website updates;
6. backups where applicable;
7. control when processing attached files;
8. measures to prevent unauthorised access, alteration, disclosure or destruction of data.
Despite the measures applied, the transmission of information over the internet cannot be guaranteed to be completely secure. Users should not send through the contact form any information that is not necessary for reviewing the inquiry.
XI. Rights of data subjects
In relation to the processing of your personal data, you have the following rights:
1. right of access to personal data;
2. right to rectification of inaccurate or incomplete data;
3. right to erasure where the legal grounds are present;
4. right to restriction of processing;
5. right to object to processing based on legitimate interest;
6. right to data portability, where applicable;
7. right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
8. right to lodge a complaint with the competent supervisory authority.
To exercise your rights, you may contact us at sales@kontech.bg, indicating “Personal Data” in the subject line of your email.
We may request additional information where necessary to confirm the identity of the requester.
XII. Complaint to a supervisory authority
You have the right to lodge a complaint with the Commission for Personal Data Protection if you believe that the processing of your personal data violates the applicable legislation.
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Email: kzld@cpdp.bg
Website: www.cpdp.bg
XIII. Automated decision-making
KONTECH does not use personal data collected through the Website for automated decision-making that produces legal effects concerning the user or similarly significantly affects the user.
XIV. Changes to the Policy
This Policy may be updated in the event of changes to the Website, the technologies used, the applicable legislation or the processing activities.
The current version is published on the Website. We recommend that you review this page periodically.
XV. Governing language
The Website may have versions in Bulgarian and English. The Bulgarian version of this Policy shall prevail. In the event of any discrepancy between the Bulgarian and English versions, the Bulgarian text shall take precedence.
Last updated: 01.07.2026