Privacy Policy

Last updated: 19 October 2026

This policy explains how KRISTIANA INVEST GRUP EOOD (“we”, “us”) uses personal data when you visit this website, send a request through the form, write to us or call us. It is written under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Bulgarian Personal Data Protection Act.

1. Controller

The controller is KRISTIANA INVEST GRUP EOOD, 7 Kozloduy St., Apt. 1, Ruse 7000, Bulgaria, company number 205029357, represented by the director Ivanka Valentinova Mircheva. E-mail: kristina.invest.grup@gmail.com, phone: +359 877 692 709.

2. What data we process

• Requests sent through the form: your name, company name if you give it, e-mail address and/or phone number, the product group and type of request you choose, the quantity or volume and the message you write.
• E-mail and phone: your name, contact details and the content of your message or call.
• Technical data: when the site is delivered, our hosting provider processes your IP address, browser type (user agent), the page requested and the time of the request, for security and delivery of the site.

When you press Send in the request form, the details you entered are sent to our website and stored in a database hosted by Cloudflare so that we can reply to you. To protect the form against automated spam, a one-way coded (salted hash) form of your IP address is stored with the request and used only to limit how many requests can be sent in a short time. The IP address itself is not stored with the request.

3. Purposes and legal bases

• To reply to your request and prepare an offer: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• To answer other questions, keep our correspondence in order, protect the form against abuse and keep the website secure: Article 6(1)(f) GDPR (our legitimate interests in running the business and the website).
• To keep accounting and tax records where an order follows: Article 6(1)(c) GDPR (legal obligation).

4. How long we keep data

We keep requests and correspondence for as long as needed to deal with the request. Requests sent through the form are deleted from the website database automatically 12 months after they arrive. If an order follows, records are kept for as long as Bulgarian accounting and tax law requires. Hosting logs are kept by the provider for a short period for security purposes.

5. Who receives data

Cloudflare, Inc. hosts and delivers this website and stores the requests sent through the form, as our processor and on our behalf. E-mail providers deliver the messages you send us. We do not sell personal data and do not share it for marketing.

6. Transfers outside the EEA

Cloudflare may process technical data and stored requests outside the European Economic Area, including in the United States. Such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the Standard Contractual Clauses adopted by the European Commission.

7. No cookies, no tracking

The website sets no cookies and uses no analytics, advertising or tracking tools. There is no profiling and no automated decision-making. See the Cookie Policy.

8. Your rights

Under Articles 15–22 GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. Giving your data is voluntary, but without contact details we cannot reply to a request. To use any of these rights, contact us at kristina.invest.grup@gmail.com.

9. Complaints

You have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

10. Changes

We may update this policy when the website or our processing changes. The date at the top shows the latest version.