Privacy Policy
1. Who We Are
D&L Project56 EOOD is the data controller responsible for your personal data.
EIK: 208418815
VAT: BG208418815
Registered Address: Sofia, жк Горубляне, ул. Павел Красов 5А, Bulgaria
Email: web@dlproject56.com
2. What Data We Collect
We collect and process the following personal data:
- Identity data: name, business name
- Contact data: email address, phone number, address
- Financial data: payment details, VAT number (for invoicing)
- Technical data: IP address, browser type, device information (via analytics)
- Project data: content you provide for your website (text, images, logos)
3. How We Collect Your Data
We collect data when you:
- Contact us via email, WhatsApp or contact form
- Place an order for our services
- Provide content for your website project
- Visit our website (via cookies and analytics)
4. Why We Process Your Data
We process your personal data for the following purposes:
- Contract performance: to deliver the services you ordered
- Legal obligations: to issue invoices and comply with tax regulations
- Legitimate interests: to improve our services and communicate with you
- Consent: for marketing communications (only with your permission)
5. Legal Basis (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on:
- Article 6(1)(b): performance of a contract
- Article 6(1)(c): compliance with legal obligations
- Article 6(1)(f): legitimate interests
- Article 6(1)(a): consent (where applicable)
6. Data Retention
We retain your personal data for as long as necessary to:
- Fulfil our contractual obligations
- Comply with legal requirements (typically 5–10 years for financial records)
- Resolve disputes and enforce agreements
Project files are retained for the duration of your hosting period plus 6 months, unless you request earlier deletion.
7. Data Sharing
We do not sell your personal data. We may share data with:
- Hosting providers: EU-based infrastructure for website hosting
- Payment processors: Stripe, PayPal, Revolut (for payment processing)
- Domain registrars: for domain registration in your name
- Accounting services: for invoicing and tax compliance
- Analytics: Google Analytics (anonymised data)
All third parties are required to respect the security of your data and process it in accordance with applicable law.
8. International Transfers
Your data is primarily stored within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
9. Cookies
Our website uses cookies for:
- Essential cookies: necessary for the website to function
- Analytics cookies: to understand how visitors use our site (Google Analytics)
- Marketing cookies: for advertising purposes (Meta Pixel)
You can control cookie preferences through your browser settings.
10. Your Rights
Under GDPR, you have the right to:
- Access: request a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data ("right to be forgotten")
- Restriction: limit how we process your data
- Portability: receive your data in a structured format
- Objection: object to processing based on legitimate interests
- Withdraw consent: where processing is based on consent
To exercise any of these rights, contact us at web@dlproject56.com.
11. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant supervisory authority:
Commission for Personal Data Protection (Bulgaria)
Website: www.cpdp.bg
12. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption
- Secure server infrastructure
- Regular backups
- Access controls
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
14. Contact
For any questions about this Privacy Policy or your personal data, contact us at:
Email: web@dlproject56.com
WhatsApp: +356 7792 2436