Privacy Policy

This policy explains what personal data we collect through msynch.com and when you contact us, what we use it for, how long we keep it and what rights you have. We process data in line with the General Data Protection Regulation (GDPR), the Bulgarian Personal Data Protection Act and other applicable Bulgarian and EU law.

The data controller is M synch Ltd. („Ем синх“ ЕООД, trading as Msynch), a single-member limited liability company, company ID (EIK) 208800601, with its registered office at: 2 Ivan Karasulski St, 8238 Ravda, Bulgaria. Email: [email protected] Phone and Viber: +359 879 980 840

The site has no contact, sign-up or order form. We only collect the data you send us yourself when you get in touch, plus limited technical data:

Contact data: when you call, message us on Viber or email us, we receive your name, your phone number or email address and anything you tell us about your business and project. We do not ask for or collect sensitive data.

Technical data: IP address, browser and device type, date and time of the visit and pages visited. These are recorded automatically in the server and content delivery network logs and are used to keep the site secure and running.

• To reply to your enquiry, prepare a quote and perform the contract if we work together: Art. 6(1)(b) GDPR (steps before entering into a contract and performance of a contract). • To keep the site secure and working: Art. 6(1)(f) GDPR (legitimate interest). • To meet legal obligations, such as accounting and tax: Art. 6(1)(c) GDPR. We do not use your data for automated decision-making or profiling.

We do not sell personal data or share it with third parties for their own purposes. To run the site and talk to you, we use the following providers, who process data on our behalf:

Hosting and network: a server rented from Hetzner Online GmbH (Germany, EU data centre) that runs the site, and Cloudflare, Inc. (content delivery network and attack protection). Cloudflare may process data outside the EU; such transfers are covered by the European Commission's Standard Contractual Clauses.

Google Ireland Ltd.: the email service (Gmail) we use to receive and send messages at [email protected].

Viber Media S.à r.l. (Luxembourg): when you message us on Viber, your messages pass through their service under their privacy terms.

The site uses no tracking, analytics or advertising cookies. Only strictly necessary cookies are set: one for your chosen language if you switch it, and, in some cases, a Cloudflare security cookie. Details are in the Cookie Policy (msynch.com/en/cookies).

• Enquiries that did not lead to a contract: kept for as long as the conversation lasts and a reasonable time afterwards, so we can pick it up again, then deleted. • Data under a signed contract: for the term of the contract and afterwards for as long as the law requires, for example accounting rules. • Technical logs: for a short period needed for security, then deleted automatically.

Under the GDPR you have the following rights:

• Access: to find out whether we process your data and get a copy of it. • Rectification: to ask us to correct inaccurate or incomplete data. • Erasure ("right to be forgotten"): when the data is no longer needed or you withdraw your consent. • Restriction of processing: under certain conditions. • Portability: to receive your data in a structured, machine-readable format. • Objection: to processing based on legitimate interest. • Withdrawal of consent: at any time, without affecting processing before the withdrawal. • Complaint to a supervisory authority.

To exercise any of these rights, email us at [email protected] or call +359 879 980 840. We reply within one month of receiving your request.

If you believe we process your personal data unlawfully, you can file a complaint with the Bulgarian Commission for Personal Data Protection (CPDP):

Commission for Personal Data Protection (CPDP) Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria Phone: +359 2 91-53-518 Email: [email protected] Website: https://www.cpdp.bg

We may update this policy when the way we work or the law changes. The current version is always on this page, and the date of the last change is shown at the top.

For questions about this policy or your personal data, email us at [email protected] or call +359 879 980 840.