Privacy Policy

1. Who processes your data

The data controller is Rabotivo.bg ("Rabotivo", "we"), based in Sofia, Bulgaria. For anything concerning your personal data: hello@rabotivo.bg.

2. What we collect — and what we don't

This site collects personal data in exactly one place: the contact form. If you submit it, we receive what you typed: name, company (optional), email, phone (optional), a description of the task, the page language, and the time of submission.

Equally important is what we don't do:

• No cookies — not tracking, not analytics, not even "strictly necessary" ones. That's why there is no banner.
• Our statistics collect no personal data. We use Umami (EU region) — cookieless analytics that counts page visits without building profiles or following you across the web. Requests go to our own address (rabotivo.bg/stats), never to a third party from your browser; your IP is used once for anonymous counting and is not stored.
• The calculator runs entirely in your browser. The numbers you type are never sent anywhere and we never see them.
• We don't buy, sell, or enrich data from third-party sources.

3. Why, and on what legal basis

We process the form data for one purpose: to answer your enquiry and, if you ask for it, to hold the scheduled call. Legal bases under the GDPR: your consent (Art. 6(1)(a)) and steps prior to entering into a contract at your request (Art. 6(1)(b)). No marketing lists, no newsletters, no automated profiling.

4. Where your data travels

Specific, because this is literally our trade:

1. The form posts to our server-side code at Cloudflare, Inc. (the site's hosting and network infrastructure).
2. From there the message arrives as an email in a mailbox operated by Google (Gmail).
3. The data is not written to any database — it exists only as that email.

Anonymous visit statistics are processed by Umami Software, Inc. in the European Union region, cookieless and without storing personal data.

Cloudflare and Google are US companies; transfers are safeguarded by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. The listed providers act as processors bound by contractual confidentiality obligations.

5. How long we keep it

12 months from our last contact with you, after which the email is deleted. If we sign a contract in the meantime, contract data is retained for the statutory periods (Bulgarian accounting law requires up to 10 years for accounting records).

6. Your rights

Under the GDPR you have the right to: access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time without affecting prior lawful processing. Write to hello@rabotivo.bg — we respond within the statutory month, and by habit much faster.

7. Supervisory authority

You may lodge a complaint with Bulgaria's Commission for Personal Data Protection (CPDP/КЗЛД): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.

8. Security

HTTPS only; minimal data; no personal-data database; mailbox access restricted and protected with multi-factor authentication.

9. Children

The site addresses businesses and is not intended for anyone under 18. We do not knowingly collect children's data.

10. Changes

Any change to this policy is published here with a new date. If we ever add analytics or any new processing, it will be described here before it goes live.