VertaStack

Privacy Policy

This Privacy Policy explains how VertaStack collects, uses, and protects your personal data in accordance with GDPR and Bulgarian legislation.

Data controller

The controller of personal data collected through this site is VertaStack. Contact us at [email protected].

1. Data We Collect

We collect the following types of data:

Personal data you provide:

  • Full name
  • Email address
  • Project information shared through the contact form
  • Communication data (email correspondence)

Automatically collected data:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time of visit
  • Referral URL (where you came from)

2. How We Use Your Data

We use collected data for:

  • Processing inquiries and communicating with you
  • Providing and improving our services
  • Sending proposals and project documentation
  • Technical support
  • Monitoring site load and security through server logs
  • Complying with legal requirements
  • Protecting against misuse and fraud
  • Invoicing and accounting

3. Legal Basis for Processing

We process your data on the following legal bases:

  • Performance of a contract or taking steps at your request
  • Your consent (for marketing communications)
  • Legitimate interest (improving services, security)
  • Compliance with a legal obligation
  • Protection of vital interests

4. Data Sharing

We do not sell your personal data to third parties. We may share data with trusted service providers (hosting, email provider) who process data on our behalf and are bound by confidentiality obligations. This site uses no analytics or advertising service, as set out in the Cookie Policy.

5. Data Retention

We store your data for as long as necessary for the purposes for which it was collected, or as required by law. Contact form data is retained for up to 2 years after the last communication.

6. Your Rights

Under GDPR, you have the following rights:

  • Right of access to a copy of your personal data
  • Right to rectification of inaccurate data
  • Right to erasure of your data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to the processing of your data

To exercise your rights, contact us at [email protected].

7. Data Security

We implement technical and organisational measures to protect your data, including encryption, access controls, and regular security audits.

8. International Transfers

Your data is primarily processed within the EU. If a transfer outside the EEA is necessary, we ensure an adequate level of protection through standard contractual clauses.

9. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy practices. We recommend that you read their privacy policies.

10. Children's Data

Our services are not directed at individuals under 16 years of age. We do not knowingly collect data from children.

Right to complain

If you believe we process your data unlawfully, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, kzld.bg. We ask that you come to us first so we can try to resolve it directly.

11. Changes to This Policy

We may update this policy periodically. Changes are published on this page with an updated date. For material changes, we will notify you by email.

Last updated: February 2026