Privacy Policy

1. Data Controller

The entity responsible for your data (the "Controller") is: Bio Design 2021 LTD,
EIK 123456789, 1504 Sofia/City, Bulgaria. Email: devopsio.bg@gmail.com
 
2. Data We Collect

We only collect data that is necessary to provide our services and improve user experience. This includes:

• Contact Information: Name, email address, phone number, and company name (usually collected via our contact form).

• Technical Data: IP address, browser type, and operating system (collected via cookies for website analytics).

• Project Data: In the course of consulting, we may have access to infrastructure metadata, though we prioritize "Privacy by Design" to minimize access to sensitive personal data within your cloud environments.
   

3. Purpose and Legal Basis for Processing

We process your data under the following legal bases of the GDPR:

• Contractual Necessity: To provide the DevOps and Cloud services you have requested.

• Legal Obligation: To comply with Bulgarian tax and accounting laws.

• Legitimate Interest: To improve our website performance and secure our IT infrastructure.

• Consent: For marketing communications (only if you explicitly opt-in).
   

4. How We Share Your Data

We do not sell your data. We only share information with third-party service providers (Data Processors) necessary for our operations:

• Cloud Providers: Azure (for hosting and infrastructure).

• Communication Tools: Email service providers and CRM systems.

• Legal & Accounting: Professional advisors in Bulgaria for statutory compliance.

All third-party providers are vetted to ensure they are GDPR-compliant.
 
5. International Data Transfers

As an Azure-specialized business, some data may be processed in data centers outside the European Economic Area (EEA). We ensure that such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
 
6. Data Retention

We store your data only as long as necessary:

• Inquiry Data: Deleted after 12 months if no contract is signed.

• Client Data: Retained for the duration of the contract plus the statutory period required by Bulgarian law (usually 5–10 years for tax audits).
   

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Access: Request a copy of the data we hold about you.

• Rectification: Ask us to correct inaccurate information.

• Erasure ("Right to be Forgotten"): Request deletion of your data.

• Portability: Request a transfer of your data to another provider.

• Withdraw Consent: At any time for marketing purposes.

To exercise these rights, please contact us at [Your Email]. In Bulgaria, you also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP).
 
8. Cookies

Our website uses cookies to analyze traffic. You can manage your cookie preferences through your browser settings.
 
9. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last Updated" date.