Back to the website

Legal documents

Privacy policy

Last updated: 3 November 2026

Data controller

The data controller is Colyn Zlatanov (see the Legal notice). For any question about your data: codexwebmaker@gmail.com.

Our activity does not require us to appoint a data protection officer.

In short

Visiting the website

When you browse the website, our hosting provider (Vercel Inc.) automatically processes the technical data needed to display the pages and keep them secure: IP address, date and time, requested page, browser and operating system, referring page.

Legal basis: our legitimate interest in providing a website that works and is protected against abuse (Article 6(1)(f) GDPR). These logs are kept by the hosting provider for a limited period set by its own rules.

Enquiries and quotes

If you use the form or write to us directly (email, phone, WhatsApp, Instagram), we receive the information you send us: your name, the type of business, your city if you give it, the description of your project and how to reach you, plus anything else you choose to share.

Purpose: to answer your enquiry and, if you wish, prepare a quote. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Retention: we keep these exchanges for no more than 12 months after the last contact if no contract follows, and then delete them.

Clients

If we work together, we process the contact details of your business and its representatives, the content needed for the project and billing data.

Purposes and legal bases: performing the contract (Article 6(1)(b)) and meeting our accounting and tax obligations (Article 6(1)(c)). Retention: for the duration of the contract, then for the periods required by Bulgarian accounting and tax law.

Where we process data about your own customers on your behalf (for example through a form or by hosting your website), we do so as a processor, under an agreement that meets Article 28 GDPR.

Recipients and service providers

Your data is accessible only to CodexWeb and, where relevant, to the following providers:

We may also be required to disclose data to the authorities where the law requires it.

Transfers outside the European Union

Some of these providers, or their parent companies, are established in the United States. Such transfers rely on the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or on the standard contractual clauses adopted by the Commission.

Your rights

You may at any time ask for access to your data, its rectification or erasure, the restriction of processing or data portability, and object to processing based on our legitimate interest. Write to us at codexwebmaker@gmail.com: we reply within one month.

You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg, or with the supervisory authority of your country of residence in the European Union.

Security

The website is served over HTTPS only, collects no data on a server and embeds no third-party services. We keep only the information we need and protect access to it.

Changes

We will update this policy if our processing changes, for example before adding an analytics tool. The date of the last update is shown at the top of the page.