Privacy policy

1. Data controller

The controller of personal data collected through this website is [Юридическо наименование ЕООД], [ЕИК 000000000], registered address: [1 Example Street], [9000] [Varna], email: office@kavera.eu, phone: +359 888 061 900.

[If you have appointed a data protection officer, state their name and contact details.]

2. What data we process

Through the enquiry form we process the data you provide:

• name, phone, email and preferred contact method;
• property details: city, construction stage, level of completion, area, number of rooms;
• requested services, material tier, timeline, approximate budget, whether you live abroad;
• the content of your message.

3. Purposes and legal bases

• Replying to your enquiry and preparing a quote – steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Concluding and performing a contract – Art. 6(1)(b) GDPR.
• Compliance with legal obligations, e.g. accounting and tax – Art. 6(1)(c) GDPR.
• Security of the website and prevention of abuse – legitimate interest (Art. 6(1)(f) GDPR).
• Visitor analytics – only if enabled and only with your consent (Art. 6(1)(a) GDPR).

4. Retention

• Enquiries that did not lead to a contract – [e.g. up to 12 months after the last communication].
• Data under a signed contract – for the term of the contract and warranty periods, and for the periods required by accounting and tax law [specify].

5. Recipients

Data may be shared, only to the extent necessary, with:

• the form service provider: [Formspree Inc. / Netlify Inc. – specify];
• the hosting provider: [specify];
• our accountant and other processors under contract;
• contractors carrying out your project – only the data needed for the work;
• public authorities – where required by law.

6. Transfers outside the EU/EEA

[If the form or hosting provider processes data outside the EU/EEA (e.g. in the USA), state the legal basis – an adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses. Check the provider’s current status.]

7. Your rights

You have the right to:

• access your personal data;
• rectification of inaccurate data;
• erasure (“right to be forgotten”);
• restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

8. How to exercise your rights

Write to us at office@kavera.eu. We will respond within the GDPR time limit – as a rule within one month.

9. Right to lodge a complaint

If you believe your rights have been infringed, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or with the supervisory authority in the country where you live or work.

10. Security

We apply appropriate technical and organisational measures to protect your data. The website does not store form data in your browser (e.g. in localStorage).

11. Changes

We may update this policy. The date of the last change is shown at the top.