PRIVACY AND COOKIES POLICY

1. Who processes your data

Orgard EOOD, UIC 207402427, with registered office and management address: Sofia, Prof. Stefan Dimitrov St. No. 8 (hereinafter “Orgard”, “we” or “us”), is a personal data controller within the meaning of the GDPR.

Contact for personal data matters: mail@orgard.eu

2. What data we collect and why

2.1. When booking an appointment online

When you request a service through the booking form, we collect:

  • the address of the site where the service will be performed;
  • a contact phone number;
  • email address;
  • the content of comments you choose to leave at your discretion.

The legal basis is performance of a contract (Art. 6(1)(b) GDPR). Without this information, we cannot confirm, schedule, or fulfil your request.

The data is stored for the period necessary to fulfil contractual and legal obligations, after which it is deleted or anonymized.

2.2. When communicating with us

If you contact us by email, phone, or via Viber, we process the data contained in the correspondence (contact details, case description). The legal basis is legitimate interest (Art. 6(1)(f) GDPR) – responding to inquiries and managing customer relationships.

We plan to introduce an official communication channel via Viber. Once it is activated, this policy will be updated with the specific processing terms.

3. Cookies

3.1. Essential (functional) cookies

These cookies are necessary for the normal operation of the website – for example, for the booking form to work and for session security. They cannot be disabled, because without them core website features will stop working.

Important: all essential cookies are automatically deleted when you close your browser (session cookies). We do not store persistent identifiers without your consent.

The legal basis is legitimate interest (Art. 6(1)(f) GDPR) and technical necessity. Consent is not required within the meaning of the ePrivacy Directive.

3.2. Analytics cookies (optional)

With your consent, we use analytics cookies – currently mainly Google Analytics – to understand how visitors use the website. This data helps us improve content and user experience.

The data is sent to Google LLC (USA). Google acts as a processor on our behalf. Names, phone numbers, addresses, and email addresses are not sent. The transfer is safeguarded using Standard Contractual Clauses under Art. 46 GDPR.

You can refuse analytics cookies at any time through the cookies banner or your browser settings. Refusal does not affect access to services, but certain website functions may work with more limited personalization.

In the future, we may add other analytics tools. With each change, we will update this policy and, where required, request new consent.

The legal basis is consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time – withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

3.3. Managing cookies

On your first visit, a consent banner is displayed. You can change your choice at any time from cookie settings or your browser settings:

  • Google Chrome: Settings → Privacy and security → Cookies
  • Mozilla Firefox: Settings → Privacy and security
  • Apple Safari: Preferences → Privacy
  • Microsoft Edge: Settings → Cookies and site permissions

4. Data recipients

We do not sell or rent personal data to third parties for their marketing purposes. Data may be shared only in the following cases:

  • Technical service providers (hosting, CRM, communication tools), acting as processors on our behalf and bound by processing agreements under Art. 28 GDPR.
  • Google LLC – when using analytics cookies (only with given consent).
  • Competent authorities – when we are required by law.

5. Your rights

Under the GDPR you have the following rights:

  • Right of access – to obtain confirmation whether we process your data and a copy of it.
  • Right to rectification – to request correction of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) – under certain conditions.
  • Right to restriction of processing.
  • Right to data portability – to receive your data in a structured, machine-readable format.
  • Right to object – to processing based on legitimate interest.
  • Right to withdraw consent – at any time, without affecting prior processing.

To exercise your rights, contact us at: mail@orgard.eu. We respond within 30 days.

You have the right to lodge a complaint with the supervisory authority in Bulgaria:

Commission for Personal Data Protection (CPDP) 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia | www.cpdp.bg

6. Data security

We apply appropriate technical and organizational measures to protect personal data, including an HTTPS encrypted connection, restricted access to systems, and regular security reviews.

7. Children’s data

Our services are intended for adults. We do not knowingly collect personal data from children under 16. If we discover that we have received such data, it will be deleted immediately.

8. Changes to this policy

In case of material changes, we will publish an updated version with a new date. We recommend that you periodically review the policy. For changes requiring new consent, we will notify you explicitly.

9. Contact

For questions related to the processing of your personal data:

Email: mail@orgard.eu

Controller: Orgard EOOD, UIC 207402427, with registered office and management address: Sofia, Prof. Stefan Dimitrov St. No. 8

Last updated: 22.04.2026