Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

METAL CONSTRUCTIONS LTD (МЕТАЛНИ КОНСТРУКЦИИ ВАРНА ЕООД) Legal form: Sole proprietorship limited liability company (EOOD) EIK (company ID): 207788740 VAT number: BG207788740 Registered address: v. Rudnik (9105), Bulgaria Email: [email protected] Phone: +359 899 946 956

For any questions about this policy or the processing of your personal data, contact us at the email address above.

2. What Data We Collect

We collect personal data only when you voluntarily provide it to us.

When you submit a contact form on our website, we collect:

- Name - Email address - Message content

If you contact us directly by email or phone, we process the contact details and information you choose to share with us.

We also store your chosen language (English or Bulgarian) locally in your browser. This preference stays on your device and is not transmitted to us or to third parties.

We do not use cookies, analytics tools or third-party tracking. We do not use your data for automated decision-making, profiling or marketing.

3. Purpose of Data Collection

We collect your personal data for the following purposes:

- To respond to your inquiry or request - To communicate with you regarding our services - To maintain a record of our correspondence

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6(1) GDPR:

- Your consent (Article 6(1)(a)), given by ticking the consent checkbox and submitting the contact form - Our legitimate interest (Article 6(1)(f)) in responding to inquiries and maintaining business communication

You may withdraw your consent at any time by contacting us. This does not affect the lawfulness of processing carried out before withdrawal.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are typically retained for up to 12 months unless an ongoing business relationship requires longer retention.

6. Who Receives Your Data

Your personal data is accessible only to authorised employees of METAL CONSTRUCTIONS LTD who need it to handle your inquiry. We also use the following service providers as data processors:

- EmailJS (EmailJS Inc., United States) — processes the contact form and delivers it to our email inbox - Google LLC (Gmail, United States) — email hosting and storage - Our website hosting provider (European Union) — hosts the website and its server logs

We do not sell, rent or share your personal data with third parties for marketing purposes.

7. Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

- Right of access — to request a copy of the personal data we hold about you - Right to rectification — to request correction of inaccurate data - Right to erasure — to request deletion of your personal data - Right to restriction — to request restriction of processing - Right to data portability — to receive your data in a structured, machine-readable format - Right to object — to object to the processing of your personal data - Right to withdraw consent — to withdraw your consent at any time

To exercise any of these rights, please contact us at [email protected].

8. Right to Complain

If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP):

Commission for Personal Data Protection Address: 2, Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria Website: www.cpdp.bg

9. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), in particular EmailJS and Google in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards approved by the European Commission, such as the EU-US Data Privacy Framework (where the provider is certified) or Standard Contractual Clauses. You can request more information about these safeguards by contacting us.

10. Data Security

We apply appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encrypted (HTTPS) connections, restricted access to email inboxes, and access only by authorised personnel. Please note that no method of transmission over the internet is completely secure.

11. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.