Privacy notice

Controller and contact

Първанова Лидършип ЕООД. София, бул. Г. М. Димитров 52А, ет. 5, офис 515-516. ЕИК 208954211. For data protection inquiries: contact@parvanova.bg.

When you contact us

We receive your email address and the information included in your message. We use them to respond and discuss your inquiry, based on steps requested before a contract where applicable, or our legitimate interest in answering correspondence. Please do not include sensitive or confidential information in your first message.

When you subscribe

When you subscribe, we store your email address, selected topics, preferred language, request, confirmation and preference-change dates, and the consent notice version. We send a single-use confirmation link valid for 24 hours. Subscription is voluntary and starts after you confirm your address. We send your selected updates on the basis of your consent. Sending a contact inquiry does not subscribe you. You do not need to subscribe to browse the website or contact us.

Security

We process technical information to prevent abuse and limit repeated requests. Email addresses and queued message content in the subscription database are encrypted. For request limits, we store cryptographically derived codes for the IP address and email rather than the raw IP address. These codes are pseudonymous, not anonymous. Hosting and external services may separately process the IP address and technical logs. Processing is based on our legitimate interest in protecting the service.

Retention

Unconfirmed requests are deleted 7 days after the latest request; request-limit records are deleted after 7 days. Content of sent, cancelled and failed messages is removed after 30 days from creation; content with an uncertain delivery outcome is kept until the case is reviewed. Delivery-attempt records are kept for 30 days. Active subscriptions are retained until you unsubscribe. After unsubscribe, the subscription record, including the encrypted address and consent history, is retained for up to 365 days to record your choice and prevent unwanted sending, then deleted automatically. Correspondence is retained to handle the inquiry, necessary follow-up and applicable record-keeping obligations. Technical logs are managed separately for hosting operation and security; these newsletter retention periods do not apply to them.

Providers and external services

Our hosting provider serves the website, private subscription database and technical logs. Microsoft 365 processes correspondence and email delivery, including the recipient address and message content. Cloudflare Turnstile processes technical signals, including IP address, browser and connection information, for bot protection; Cloudflare also uses signals to improve bot detection under its own notice. Google processes measurement data only after the separate cookie choice. These providers may process data outside the European Economic Area. Their linked notices and terms explain processing, locations and international transfer mechanisms. You can request information about the recipients and safeguards applicable to our use at contact@parvanova.bg.

Your choices and rights

Use the preferences and unsubscribe link in newsletter updates to change topics or language, or withdraw consent. You may also email contact@parvanova.bg. You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. Withdrawal does not affect earlier lawful processing. Contact contact@parvanova.bg. You may complain to the Bulgarian Commission for Personal Data Protection.

Google Ads measurement

Only after you allow measurement do we load Google Ads to measure advertising performance. Google may receive information about visited pages, your browser, device and connection, and use cookies. Ad personalization is disabled. To change or withdraw permission, open “Cookies” in the website footer and use the “Cookie settings” button on that page. Withdrawal reloads the page and blocks the tag.

Google Analytics measurement

After “Accept all”, we load Google Analytics 4 to understand visits, traffic sources and how pages are used. Google processes technical information about your browser, device and connection and may set cookies. We do not send form contents or arbitrary URL parameters; bounded campaign labels are allowed. Google Signals and ad personalization are disabled. Withdraw permission through “Cookie settings” on the Cookies page.

Other technologies

We do not track newsletter opens. We do not sell subscriber lists or make automated decisions with significant legal effects. Changes to providers or processing require an updated notice.

Cloudflare Turnstile Privacy Addendum

Microsoft 365 privacy information

Microsoft Products and Services Data Protection Addendum

Google Privacy Policy

Google advertising measurement cookies

Bulgarian Commission for Personal Data Protection

Version: newsletter-v1 / measurement-v2