Privacy Policy

1. Introduction

This Privacy Policy explains how Alentora OOD (“Alentora”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when users access our website, communicate with us, or use our digital services.

Alentora OOD is committed to protecting personal data and complying with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
• Bulgarian Personal Data Protection Act
• Applicable EU and international data-protection laws

This Privacy Policy applies to:

• Website visitors
• Prospective clients
• Clients and business partners
• Subscribers and communication recipients

2. Data Controller Information

Legal Entity: Alentora OOD
Legal Form: Limited Liability Company (OOD)
Registered Address:
Apt 3, Prof. Marin Drinov 40
9000 Varna, Bulgaria

Email: [email protected]
Website: https://alentora.com

Alentora OOD acts as the Data Controller under Article 4(7) GDPR.

3. Scope of This Policy

This Privacy Policy governs personal data processed through:

• The Alentora website
• Contact forms and inquiry forms
• Email communications
• Client onboarding and service delivery
• Automation systems and integrations
• Marketing, analytics, and cookies

It does not apply to third-party websites linked from our site.

4. Definitions (GDPR)

• Personal Data: Any information relating to an identified or identifiable natural person
• Processing: Any operation performed on personal data
• Data Subject: The individual whose data is processed
• Controller: Entity determining purposes and means of processing
• Processor: Entity processing data on behalf of controller

5. Categories of Personal Data Collected

5.1 Data Provided Directly by You

We may collect:

• Full name
• Email address
• Phone number
• Company name
• Billing details
• Project-related information
• Communication content

5.2 Automatically Collected Data

When visiting our website:

• IP address
• Browser type and version
• Device and operating system
• Pages visited and session duration
• Referral URLs
• Cookie identifiers

5.3 Client & Contractual Data

For service delivery:

• Account credentials (securely stored)
• Automation workflow data
• System integration data
• Invoices and payment records

6. Legal Bases for Processing (Article 6 GDPR)

We process personal data only when at least one legal basis applies:

• 1.  Consent – when you submit forms or subscribe
• 2.  Contractual necessity – to deliver agreed services
• 3.  Legal obligation – accounting, tax, compliance
• 4.  Legitimate interest – security, analytics, improvement

7. Purposes of Processing

We process personal data for the following purposes:

• Responding to inquiries and requests
• Providing digital services (automation, web, SEO, ads)
• Client onboarding and project execution
• Billing, invoicing, and accounting
• Website performance and analytics
• Security, fraud prevention, and abuse detection
• Legal compliance

8. Automated Decision-Making & Profiling

Alentora OOD does not engage in automated decision-making or profiling that produces legal or significant effects on individuals within the meaning of Article 22 GDPR.

9. Cookies & Tracking Technologies

9.1 Types of Cookies Used

• Essential cookies – website functionality
• Analytics cookies – traffic measurement
• Marketing cookies – only if consented

9.2 Cookie Consent

We use a GDPR-compliant cookie banner allowing users to:

• Accept all cookies
• Reject non-essential cookies
• Customize preferences

Consent records are stored securely.

10. Data Sharing & Recipients

We do not sell personal data.

Data may be shared only with trusted third parties, including:

• Hosting providers
• Analytics providers (e.g., Google Analytics)
• Email and CRM platforms
• Accounting and legal advisors
• Payment processors (e.g., Stripe)

All third parties operate under Data Processing Agreements (DPAs).

11. International Data Transfers

If personal data is transferred outside the EU/EEA, we ensure:

• Standard Contractual Clauses (SCCs)
• Adequate protection measures
• GDPR-compliant safeguards

12. Data Retention Periods

We retain data only as long as necessary:

Data Type	Retention Period
Contact inquiries	Up to 12 months
Client data	Contract duration + legal period
Accounting records	As required by Bulgarian law
Marketing data	Until consent withdrawal

---

13. Data Security Measures

We apply appropriate technical and organizational measures, including:

• Secure servers and encrypted storage
• Access controls and authentication
• Regular software updates
• Backup and disaster recovery systems
• Monitoring and incident response

14. Data Subject Rights (GDPR)

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase data (“right to be forgotten”) (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time

Requests can be sent to [email protected].
We respond within 30 days.

15. Complaints & Supervisory Authority

You may lodge a complaint with:

Commission for Personal Data Protection (CPDP)
Republic of Bulgaria

16. Children’s Data

Our services are not intended for children under 16.
We do not knowingly collect children’s data.

17. Third-Party Links

We are not responsible for the privacy practices of third-party websites linked from our site.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
The latest version will always be published on our website.

19. Contact Information

For privacy-related matters, contact:

📧 [email protected]
📍 Varna, Bulgaria