Privacy policy

This covers the safty.bg website, including the English pages, and both tools on it.

It does not cover the Safty software solution. Its use is governed by a contract between the parties, which also sets out the processing of personal data. In those cases the client is the controller and the company processes the data on its documented instructions.

When you check a file through the file check page, the file opens locally on your own device. The site does not receive the file and stores neither its contents nor its name.

If you accepted statistics cookies, the only thing sent to Google Analytics when the check finishes is whether discrepancies were found and what language the page is in. No content from the file is sent.

What you fill in yourself

The site contains three forms. The consultation form requires a name, a work email, the company, the accounting system and the data volume. The handbook form requires a work email; the name is optional. The form under the check result requires a name, a work email and a phone number. None of the three accepts the file you check, or any data read from it.

Cookies

Only after you accept them, separately for statistics and for advertising. Which ones exactly are set out in the Cookie policy.

Data from loading the page itself

To get the page to you, your IP address, browser and device type, where you came from and the time are processed. This happens on every visit; without it the page cannot be served.

Filling in the forms is voluntary. If you do not, we cannot reply or send you the handbook. There is no other consequence. The site and its tools work without it.

Each purpose has its own basis under Art. 6 GDPR:

To answer a consultation request

We review what you submitted and send you a proposal. Basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract).

To send the handbook

We use the address for that only. We do not add you to a newsletter list. Basis: Art. 6(1)(a) GDPR (your consent).

To contact you about a file check

If you fill in the form under the result, we call or email you on the details you gave and go through the findings. We use them for that only and we do not add you to a newsletter list. Basis: Art. 6(1)(a) GDPR (your consent).

To see how the site is used

Google Analytics, and only if you accepted statistics cookies. Basis: Art. 6(1)(a) GDPR (consent, which you can withdraw at any time).

To advertise

Safty advertises on Google. If you accepted advertising cookies, Google can see which visits came from an ad and may show you a Safty ad on other sites. Basis: Art. 6(1)(a) GDPR (consent).

To keep the site working and secure

The data from the previous section is processed to serve the pages and to detect abuse. Basis: Art. 6(1)(f) GDPR (legitimate interest).

To meet a legal obligation

Where law requires us to retain or produce data. Basis: Art. 6(1)(c) GDPR.

We take no decisions about you by automated means alone.

We do not sell data. Outside the company, personal data is disclosed only to providers we work with, on our instruction and on the basis of a contract under Art. 28 GDPR. The categories are:

• website hosting;
• online form tools;
• website analytics tools;
• advertising platforms;
• a cookie consent management tool.

Some of them are outside the European Economic Area, or use sub-processors there. Where that is so, the transfer rests on a European Commission adequacy decision or on standard contractual clauses under Art. 46 GDPR. You can request a copy at compliance@safty.bg.

We keep each record only for as long as it is needed for the purpose it was collected for, unless law requires longer, such as the retention periods for accounting and tax records.

Once there is no longer a reason to process it, the data is deleted or anonymised. Where that cannot happen immediately, because the record sits in a backup for example, the data is stored separately and not used until deletion is possible.

You can ask for erasure at any time.

Under the GDPR you have the right:

• to see what data we hold about you, and to get a copy (Art. 15);
• to have incorrect data corrected (Art. 16);
• to ask for erasure (Art. 17);
• to ask us to stop using it (Art. 18);
• to receive your data in a portable form (Art. 20);
• to object to processing based on legitimate interest (Art. 21);
• to withdraw consent at any time (Art. 7(3)).

Write to compliance@safty.bg. We answer within one week.

If you believe we are breaking the rules, you can complain to the Bulgarian КЗЛД (Commission for Personal Data Protection): 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, kzld@cpdp.bg, cpdp.bg.

When the site changes, this page changes with it. The date of the last change is at the top.