---
title: Политика за поверителност
lang: en
canonical: https://polimex.co/privacy
type: page
generator: website_llm_pro/19.0.1.8.5
modified: '2026-10-05T07:08:50.422759'
alternates:
  en: https://polimex.co/en/privacy.md
---

# Политика за поверителност

[← Legal Information](/en/legal.md)

Data Protection

# Privacy Policy

Version 1.1 of 05.10.2026

Published at https://polimex.co/privacy

This English translation is for information only; the Bulgarian text is the binding version.

[All Documents](/en/legal.md)

Contents

1. [I. SCOPE](#razdel-i)
2. [II. WHAT PERSONAL DATA WE PROCESS](#razdel-ii)
3. [III. PURPOSES AND LEGAL BASIS](#razdel-iii)
4. [IV. RECIPIENTS OF THE DATA](#razdel-iv)
5. [V. RETENTION PERIODS](#razdel-v)
6. [VI. YOUR RIGHTS](#razdel-vi)
7. [VII. SECURITY](#razdel-vii)
8. [VIII. CHANGES TO THE POLICY](#razdel-viii)

PRIVACY POLICY

OF THE POLIMEX.CO WEBSITE

**DATA CONTROLLER:**

**POLIMEX HOLDING EOOD**

with registered seat and address of management: Sofia 1309, Vazrazhdane District, 128A Dimitar Petkov Str.

UIC: 175432830

email for personal data protection inquiries: sales@polimex.co

phone: +359 2 920 8666

website: https://polimex.co

This Privacy Policy explains what personal data Polimex Holding EOOD (hereinafter "Polimex", "we") collects through the polimex.co website, what it uses it for, with whom it shares it, how long it keeps it, and what rights you have. It has been prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation) and the Personal Data Protection Act.

## I. SCOPE

### What this policy covers

**Art. 1.** This Policy applies to the personal data you provide to us through the polimex.co website - the inquiry and consultation forms, the website chat, job applications and the customer account login - as well as to technical data collected when you visit the website.

**Art. 2.** The Policy does not apply to:

- other Polimex websites - they have their own privacy policies;
- personal data in our customers' Odoo systems, which we process when providing hosting and support. There the customer is the controller and we act as a processor on their instructions - in accordance with the Hosting Services Terms and Conditions (section X) and the Support Terms and Conditions (section XI), published at https://polimex.co/legal.

## II. WHAT PERSONAL DATA WE PROCESS

### Inquiries and consultation requests

**Art. 3.** When you send us an inquiry, a consultation request or a quotation request, we process the data you fill in on the form:

- first and last name;
- company name;
- email address and phone number;
- the text of the inquiry and the additional information from the form (for example, number of employees, type of site, whether you already use Odoo).

### Website chat

**Art. 4.** When you write to us in the website chat, we process your messages, your name if you provide it, and the visit data that the website shows to the employee who replies to you: country based on IP address, language and pages visited. Polimex employees respond in the chat.

### Job applications

**Art. 5.** When you apply for an advertised position, we process:

- name, email address and phone number;
- your LinkedIn profile, if you provide it;
- the cover letter and résumé (CV) you attach, together with the data contained in them.

**Art. 6.** Please do not include in your CV data that is not needed for the assessment - for example, personal identification number (EGN), health data, or religious or political beliefs.

### Customer account

**Art. 7.** When you log in to your customer account, we process your email address. The password is stored only in hashed form and cannot be read, including by us.

### Technical data and cookies

**Art. 8.** When you visit the website, the server records technical data - IP address, browser type, addresses visited and time of the request. The website system also keeps a visit record - country based on IP address, language, visit times and, for some pages, the addresses visited. The website also uses cookies; which ones they are, what they are used for and how to accept or reject them is described in the Cookie Policy at https://polimex.co/cookie-policy.

**Art. 9.** Analytics cookies (Google Analytics) and embedded maps (Google Maps) are loaded only after your consent, given through the cookie banner.

## III. PURPOSES AND LEGAL BASIS

**Art. 10.** We process personal data on the following grounds under Article 6(1) of the Regulation:

- taking steps at your request before entering into a contract and performance of a contract (point (b)) - to respond to your inquiry or chat message, prepare a consultation or quotation, and perform the contract if it is concluded;
- taking steps at your request prior to entering into a contract (point (b)) - to consider your job application;
- compliance with a legal obligation (point (c)) - for example, accounting and tax obligations when the inquiry results in a contract;
- your consent (point (a)) - for analytics cookies and embedded maps;
- legitimate interest (point (f)) - for the security of the website and the protection of the forms from automated abuse (spam), for the visit record that helps the chat employee reply to you, and for the establishment, exercise and defense of legal claims.

**Art. 11.** Providing data in the forms is not a legal obligation. However, without a name and a means of contact we cannot respond to your inquiry or review your application.

**Art. 12.** We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

## IV. RECIPIENTS OF THE DATA

**Art. 13.** Data from forms, chat and applications is stored in our Odoo system. The servers of the website and the system are located in Bulgaria, in a data center owned by Polimex. Only employees who need the data for their work have access.

**Art. 14.** We use the following external services, through which data may reach their provider:

- Google Analytics and Google Maps (Google) - only after your consent;
- Google reCAPTCHA (Google LLC) and Cloudflare Turnstile (Cloudflare, Inc.) - protection of the forms against automated abuse; when a form is submitted, they receive technical data about your browser and device.

**Art. 15.** Google LLC and Cloudflare, Inc. are established in the USA. The transfer of data to them is based on the European Commission's adequacy decision under the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795 of 10 July 2023), under which both companies are certified.

**Art. 16.** We provide data to public authorities only when we are legally obliged to do so. We do not sell personal data and do not provide it to third parties for their marketing purposes.

## V. RETENTION PERIODS

**Art. 17.** We keep data from inquiries and chat for as long as necessary to respond and for subsequent communication on the same matter. If an inquiry results in a contract, the data is kept for the periods provided by the law on contracts and accounting documents.

**Art. 18.** We keep data from job applications until the selection process for the position you applied for is completed, after which we delete it.

**Art. 19.** The visit record is deleted automatically after 60 days without a visit to the website, unless it is linked to an inquiry or to you as a contact - in which case it is kept together with them.

**Art. 20.** The cookie retention period is stated in the Cookie Policy. We keep technical server logs for a short period necessary for the security of the website and for troubleshooting.

## VI. YOUR RIGHTS

**Art. 21.** Under the Regulation, you have the right to:

- access your personal data and obtain a copy of it (Art. 15);
- request rectification of inaccurate data (Art. 16);
- request erasure of the data (Art. 17);
- request restriction of processing (Art. 18);
- data portability of the data you have provided to us (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal - for cookies, through the banner on the website.

**Art. 22.** Please send requests to sales@polimex.co. We respond without undue delay and no later than one month from receipt. For complex or numerous requests, the period may be extended by a further two months, in which case we will notify you within the first month and state the reasons.

**Art. 23.** You have the right to lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, kzld@cpdp.bg, https://www.cpdp.bg.

## VII. SECURITY

**Art. 24.** The website loads only over a secure connection (HTTPS). Access to data in the Odoo system is restricted according to job duties, and passwords are stored only in hashed form.

## VIII. CHANGES TO THE POLICY

**Art. 25.** In case of changes, we publish the new version on this page with a new number and date. We provide previous versions upon request.

- End of document - Privacy Policy of the polimex.co website, version 1.1 of 05.10.2026