GDPR privacy
Controller
Achaeergev EOOD, ul. Graf Ignatiev 38, 1000 Sofia, Bulgaria. Email [email protected].
Data protection contact responds within thirty days under GDPR.
Categories
Identity, contact, billing, project photos, floor plans, and optional analytics post-consent.
No children's data collected knowingly; parental projects use guardian contact only.
Bases
Contract for design services; legitimate interest for security logs; consent for newsletters and analytics.
Withdraw consent anytime without affecting prior lawful processing.
Retention
Project archives seven years; marketing until unsubscribe; analytics twenty-six months.
Encrypted backups in EU data centres with access logging.
Rights
Access, rectification, erasure, portability, restriction, objection, and complaint to Bulgarian CPDP.
Identity verification may be required before disclosure to prevent unauthorised access.
Sharing
Processors include hosting, email, and accounting tools under DPA; no sale of personal data.
International transfers rely on Standard Contractual Clauses where applicable.