Privacy Policy

1. General Information & Data Controller

This Privacy Policy outlines how Effigentic collects, processes, and protects personal data in compliance with the General Data Protection Regulation (GDPR), the UK GDPR, and relevant local data protection frameworks.

The Data Controller responsible for your personal data is:

  • Company Name: [Insert Registered Bulgarian Corporate Entity Name]

  • Unified Identification Code (UIC / Registration Number): [Insert BG UIC Number]

  • Registered Office Address: [Insert Official Registered Business Address, Bulgaria]

  • Contact Email: [Insert Public-Facing Compliance/Contact Email Address, e.g., info@effigentic.com]

2. Scope & Target Audience

This website addresses B2B markets across the European Union (with emphasis on the DACH region) and the United Kingdom. Personal data collected via this platform is strictly restricted to what is necessary for professional correspondence, business engagement, and service delivery.

3. Categories of Data Collected & Purpose of Processing

We only collect personal data that you explicitly provide to us or that is generated via essential business automation channels:

  • Inbound Correspondence & Requests: When you contact us via email, we process your contact information (name, business email, company) to evaluate, respond to, and fulfill your inquiries.

  • Inbound Scheduling Automation: When you book a professional consultation via our embedded online scheduler, we collect your name, email, time zone, and any introductory notes provided. This data is processed automatically to arrange the meeting.

  • Virtual Telephony & Communications Metadata: When communicating via our virtual corporate telephony channels, necessary system metadata (call logs, routing details, and timestamps) is generated dynamically to maintain communication infrastructure stability and quality.

4. Legal Basis for Processing

We process personal data under the following strict legal conditions set by Article 6(1) of the GDPR:

  • Performance of a Contract (Art. 6(1)(b)): Processing necessary to take preliminary steps at your request prior to entering into a formal contract, or to fulfill existing contractual obligations.

  • Legitimate Interests (Art. 6(1)(f)): Processing necessary to maintain secure, stable communication channels, protect our infrastructure from fraudulent activities, and manage professional enterprise relationships.

5. Third-Party Disclosures & Cross-Border Data Transfers

We do not sell, lease, or distribute personal data to third parties for marketing purposes. To facilitate business operations, data is processed using specialized third-party cloud tools acting as Data Processors (including scheduling software, virtual telephony infrastructure, and cloud hosting).

Where these third-party processors route or store data outside the European Economic Area (EEA)—such as in the United States or the United Kingdom—appropriate legal safeguards are enforced. These include standard contractual agreements incorporating EU Standard Contractual Clauses (SCCs) or reliance on recognized data protection frameworks to ensure a level of data protection equivalent to European standards.

6. Data Retention

Personal data is retained only as long as necessary to fulfil the operational business purposes outlined in this policy, or to comply with statutory legal, accounting, and reporting obligations under applicable corporate laws.

7. Your Data Protection Rights

Under international data protection laws, you possess the following core rights regarding your personal information:

  • Right of Access: The right to request copies of your personal data.

  • Right to Rectification: The right to request correction of inaccurate or incomplete information.

  • Right to Erasure: The right to request the deletion of your personal data, subject to specific legal limitations.

  • Right to Restrict Processing: The right to request that we limit how your data is used.

  • Right to Data Portability: The right to request the transfer of your data to another organization.

  • Right to Object: The right to object to our processing of your data under specific conditions.

To exercise any of these rights, please contact us directly using the corporate contact details provided in Section 1.

8. Competent Supervisory Authority

If you believe that your personal data has been processed in violation of data protection laws, you have the right to lodge a formal complaint with our primary lead supervisory authority:

  • Authority: Commission for Personal Data Protection (CPDP)

  • Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria

  • Website: www.cpdp.bg

Note for UK Residents: You also reserve the right to contact or lodge an inquiry with the Information Commissioner’s Office (ICO) at www.ico.org.uk.