Privacy policy.

01 Data controller

The controller of your personal data is NBN West EOOD, Dunav 35, 1000 Sofia, Bulgaria. For any question or request about the processing of your personal data, write to info@nbn-west.com or to the postal address above.

Our commitment

As data controller, NBN West EOOD is responsible for the lawful, fair and transparent processing of your personal data. We uphold your rights at every stage of data handling.

We act in compliance with the GDPR, the Bulgarian Personal Data Protection Act and all applicable European data protection law.

02 Data we collect

We collect only the personal data needed to provide our services and to respond to your inquiries.

Contact information

Your name, email address and organization, when you write to us or submit a form. This allows us to identify you and reply.

Inquiry content

The information you submit through the inquiry forms on this website: your message, and, where you choose to provide them, your role and the strategic domain of interest. We also record which call to action you used to reach the form.

Consent record

The cookie categories you accept or refuse and the time of your choice, kept as proof of consent.

Technical data

Technical information collected automatically by our hosting infrastructure, such as IP address, browser type, device and operating system. We use it to deliver the website securely and to protect the forms against abuse.

03 Purposes of processing

We process your personal data only for the purposes listed here.

Responding to inquiries

We use your contact details and inquiry content to evaluate your request for a strategic engagement and to reply to it.

Service information

We use your data to provide the information about our services that you request.

Business communication

We may follow up on prior conversations for business purposes, to maintain a professional relationship with clients and partners.

Website improvement

Where you accept analytics cookies, we use technical data to analyse site performance and improve the experience of the website. Analytics runs only with your consent.

04 Legal basis

Every processing activity of NBN West EOOD rests on a lawful basis under Article 6 of the GDPR. We process data only on a valid legal basis.

Consent, Article 6(1)(a)

When you submit an inquiry form and tick the consent box, or accept analytics cookies, we process your data on the basis of your freely given consent. You may withdraw consent at any time, without affecting processing carried out before the withdrawal.

Pre-contractual measures, Article 6(1)(b)

When you request information about our services with a view to entering into a contract, we process your data as part of the steps needed before that agreement.

Legitimate interest, Article 6(1)(f)

We may process data on the basis of our legitimate interest in business communication, in maintaining professional relationships and in keeping the website secure, provided your fundamental rights and freedoms prevail where they conflict with it.

05 Storage and retention

We store your personal data securely and keep it only as long as needed for the purposes in this policy. When data is no longer required, we delete or anonymize it securely in accordance with applicable regulations.

We review our retention practices regularly, so that information is held only as long as strictly necessary. Storage runs on technical infrastructure that meets current security standards.

Data is retained only for the period its original purpose or a legal obligation requires.

06 Processors and data sharing

NBN West EOOD never sells personal data. To operate our services, we share data with a limited number of selected providers acting as processors on our behalf. Each is bound by contract to handle your data in compliance with applicable data protection law.

CRM and internal tools

We may use CRM or internal business tools to manage client relationships and communications. Access to personal data in these tools is restricted to authorized personnel.

07 International transfers

Some of our processors are based in, or process data in, countries outside the European Union or European Economic Area, including the United States. In those cases we apply safeguards under Chapter V of the GDPR: the Standard Contractual Clauses (SCCs) approved by the European Commission or, where the provider is certified, the EU-U.S. Data Privacy Framework.

What this means for you

When your data is processed outside the EU, you keep every right granted by the GDPR. Every international transfer carries a level of protection equivalent to the one that applies within the European Union.

• Standard Contractual Clauses applied where required
• Only reputable, GDPR-aware providers engaged
• Regular review of transfer mechanisms and provider compliance
• Details of specific transfers available on request

08 Your rights

Under the GDPR you hold a comprehensive set of rights over your personal data. NBN West EOOD honours them promptly and transparently. Send every request to info@nbn-west.com.

1. Right of access. Request a copy of the personal data we hold about you and information on how we process it.
2. Correction and deletion. Request correction of inaccurate data, or deletion of data no longer necessary for its original purpose.
3. Restriction of processing. In certain circumstances, request that we limit processing while a dispute or review is pending.
4. Objection. Object to processing based on legitimate interest, including processing for direct marketing purposes.
5. Withdrawal of consent. Where processing rests on consent, withdraw it at any time without affecting the lawfulness of processing before the withdrawal. For cookies, use Cookie settings.
6. Data portability. Receive the data you provided in a structured, commonly used, machine-readable format.

Supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in your country of residence. In Bulgaria, the authority is the Commission for Personal Data Protection (cpdp.bg).

09 Security

NBN West EOOD applies technical and organizational measures designed to prevent unauthorized access, accidental loss, disclosure or destruction of your data.

We review and update these measures regularly to reflect evolving practice and the threat landscape. They include:

• Encrypted data transmission via HTTPS
• Access controls and authentication measures
• Regular security assessments and audits
• Staff training on data protection obligations

10 Policy updates

We update this policy when our processing practices, the applicable law or our services change. The date of the latest revision always appears at the top of this page.

Where changes are significant, we make reasonable efforts to notify the people concerned.

11 Contact us about your privacy

For any question, concern or request about this policy or the processing of your personal data, write to us. We help you exercise your rights and clarify any aspect of our data practices.