Privacy & Data Protection Policy (GDPR)

1. Categories of Personal Data Processed

In connection with calculating quotes, processing translation inquiries, and performing translation, notarization, and consular legalization contracts, we process only strictly necessary categories of data:

• Identification and Contact Details: Full name, telephone number, email address, company name, billing details (if requested).
• Delivery Details: City/municipality, physical street address, or selected courier drop-off/locker branch (Speedy / Econt).
• Data within Submitted Documents: Personal details naturally contained within documents submitted for translation or legalization (e.g., civil status certificates, diplomas, transcripts, background checks/police certificates, powers of attorney, corporate registries, commercial contracts).

2. Purposes and Lawful Grounds for Processing

Processing is carried out in strict compliance with Article 6 of the General Data Protection Regulation (EU) 2016/679 (GDPR):

• Article 6(1)(b) GDPR (Contractual Performance): Processing necessary for the performance of a translation or legalization contract, or to take steps at the request of the client prior to entering into a contract (e.g., volume calculation by standard 1,800-character pages, delivery timeline verification, preliminary quote issuance).
• Article 6(1)(c) GDPR (Legal Obligation): Compliance with statutory legal obligations applicable to authorized translation agencies under the Regulations on Legalization, Certification, and Translation of Documents of the Ministry of Foreign Affairs of Bulgaria, as well as mandatory accounting and tax laws.
• Article 6(1)(f) GDPR (Legitimate Interest): Necessary for network and platform security, rate-limiting, and anti-spam bot defense (such as transient IP rate-checks and honeypot traps), and ensuring site reliability.

3. Data Retention Periods

We adhere strictly to the principle of storage limitation (Article 5(1)(e) GDPR):

• Unconfirmed Inquiries and Quote Drafts: Documents, files, and contact messages submitted for quotation where no formal order is commissioned are permanently deleted within 90 days.
• Completed Translation Projects: Translation registers, sworn translator certifications, and document project archives are stored for up to 5 years to enable official verification, certified duplicate re-issuance, and warranty claims.
• Invoices and Accounting Records: Stored for the statutory period of 10 years in accordance with Bulgarian Accountancy Act requirements.

4. Confidentiality and Security Safeguards

All communications and file uploads are secured using end-to-end transport layer encryption (HTTPS/TLS). Access to uploaded documents is strictly restricted to assigned project coordinators and sworn, certified translators working on your specific order. All translators and staff members are legally bound by signed non-disclosure agreements (NDAs) and statutory professional confidentiality under Ministry of Foreign Affairs licensing rules.

5. Your Rights as a Data Subject

Under the GDPR, you have the following enforceable rights:

• Right of Access (Art. 15): Obtain confirmation of whether your data is being processed and request a copy.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.
• Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of data that is no longer required, subject to mandatory statutory retention rules.
• Right to Restriction of Processing (Art. 18): Restrict processing under circumstances provided by law.
• Right to Object (Art. 21): Object to processing based on legitimate interest.
• Right to Lodge a Complaint: You may submit complaints to the competent supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, Website: www.cpdp.bg.

To exercise any of these rights, please email: office@eurocontact.bg.

6. Cookies, Cookieless Analytics, and Technical Assets

Our website utilizes Vercel Web Analytics & Speed Insights to measure overall anonymous traffic and page performance.

This service operates entirely without tracking cookies and without storing profiling identifiers on your terminal device (per Article 5(3) of the ePrivacy Directive). We do not build user behavioral profiles, store static IP addresses, or share data with ad-targeting brokers. Daily visitor counts are computed using an anonymous cryptographic hash that automatically rotates and purges every 24 hours.

Fonts and icons are transmitted over encrypted SSL solely to deliver optimal typographic readability and technical functionality on the basis of legitimate interest (Art. 6(1)(f) GDPR), without harvesting personal telemetry.