Privacy Policy

🏢 Data Controller

The controller responsible for the processing of your personal data collected through this website is:

📋 What Data We Collect

When you use the contact form on our website, we collect only the data you voluntarily provide:

• Full name
• Email address
• Phone number (optional)
• Message content

We do not collect any sensitive personal data (e.g. health, financial, or identification data).

🎯 Purpose of Processing

Your personal data is collected and processed exclusively for the following purposes:

• Responding to your enquiries and requests submitted via the contact form
• Communicating with you regarding our products and services
• Fulfilling any pre-contractual or contractual obligations

The legal basis for processing is your consent (Article 6(1)(a) GDPR) and our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).

🗓️ Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected. Contact form submissions are stored for a maximum of 2 years, after which they are permanently deleted. You may request deletion at any time.

🔗 Third Parties & Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. Your data may be processed by Formspree Inc. solely as a technical intermediary for delivering contact form submissions to us. Formspree acts as a data processor under a data processing agreement and does not use your data for any other purpose.

We do not transfer your personal data outside the European Economic Area (EEA) without appropriate safeguards in place.

⚖️ Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the data we hold about you
• Right to rectification — you may request correction of inaccurate data
• Right to erasure — you may request deletion of your personal data
• Right to restriction — you may request that we limit the processing of your data
• Right to object — you may object to processing based on legitimate interest
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to withdraw consent — you may withdraw your consent at any time without affecting prior processing

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg

🔒 Data Security

Vadayo takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption to ensure the secure transmission of data.

🍪 Cookies

Our website uses only essential cookies — specifically to remember your preferred language. We do not use tracking, advertising, or analytics cookies. No personal data is stored through cookies.