Privacy and cookie policy for web-expert.bg

1. Data controller

The controller of personal data collected through web-expert.bg is Udar Studio EOOD.

Address: 10 Vitosha Street, Varna.

For questions and requests about personal data:  

2. Enquiries through the contact form

We process the name, email address, phone number (if provided), selected service and message you enter so that we can respond, discuss your project and prepare a quote. We do not use this data to send unsolicited marketing messages.

For service enquiries, the legal basis is taking steps at your request before entering into a contract: Article 6(1)(b) of the GDPR. For other business correspondence and preventing abuse, we rely on legitimate interests under Article 6(1)(f).

Your name, email address and message are required to submit the form. Without them, we cannot process your enquiry through it. Your phone number is optional.

If no contract is concluded, correspondence is retained for up to 12 months after the last contact. Where a contract or legal obligation applies, the relevant documents are retained for the applicable periods.

3. Service providers and recipients

The form uses Web3Forms (Web3Creative), which processes your submitted enquiry and delivers it by email. Data may also be processed by hosting, email and abuse prevention providers to the extent necessary to provide the service.

According to the Web3Forms policy, form data may be stored for up to three years unless the plan or an earlier deletion provides for a shorter period. The provider operates from India and uses infrastructure in various regions. For transfers outside the EEA, it refers to standard contractual clauses in its data processing agreement.

When Google Analytics is enabled, website usage data is processed by Google Ireland Limited and affiliated Google companies. Processing outside the EEA may take place under Google's applicable data processing and international transfer terms.

4. Google Analytics

Google Analytics 4 loads only after your explicit consent. Before consent, and if you decline, the website does not load the Google tag or send analytics data to Google.

With your consent, we measure visits, pages used, approximate location, device and browser type, traffic source and successfully submitted enquiries. We do not send names, email addresses, phone numbers or message contents to Analytics. For our events, we remove URL query parameters and fragments.

The legal basis is consent under Article 6(1)(a) of the GDPR. We do not enable advertising storage, ad personalisation or Google Signals through this website.

You can withdraw consent through 'Cookie settings'. We delete accessible analytics cookies and reload the page to stop the running Google tag. This does not affect the lawfulness of processing before withdrawal and does not automatically delete data already sent to Google.

5. Cookies and browser storage

Analytics cookies are disabled by default. If you decline, the website continues to work. You can change your choice using the button below or in the footer of any page. Your browser also allows you to delete and block cookies.

6. Technical data and security

When you access the website or submit the form, infrastructure providers may process your IP address, request time, browser and technical logs to deliver content, diagnose issues and prevent abuse. The legal basis is the legitimate interest in operating the website securely. These operations are separate from optional analytics.

Access to correspondence is restricted to those handling enquiries. We use an encrypted HTTPS connection on the public website.

7. Your rights

Subject to the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests and withdrawal of consent. We do not carry out automated decision-making that produces legal or similarly significant effects for you.

Send a request using the contact details above. We normally respond within one month; if an extension is needed, we will inform you in accordance with the GDPR. Identity verification may be necessary to protect your data.

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or the competent supervisory authority where you habitually reside, work or where the alleged infringement took place.

8. Changes to this policy

We publish the current version on this page. If the purposes or services that require consent change, we will ask you to choose again before enabling them.