Privacy Policy

1. Who is the controller of your personal data

The controller of the personal data is:

• Company name: AVATON DEVELOPMENT EOOD (АВАТОН ДИВЕЛЪПМЪНТ ЕООД)
• UIC (ЕИК): 206686049
• Registered office and address of management: Sofia, Krasno Selo district, 61 A Pirinski Prohod St., entrance A, apt. 14
• Represented by: Atanas Plamenov Tankov, Managing Director
• Contact email: sales@avaton.bg
• Phone: +359 896 52 52 52

2. Data Protection Officer (DPO)

The company is not obliged to appoint a data protection officer and has not appointed one to date. For all matters relating to the processing of your personal data and the exercise of your rights, you can contact us at sales@avaton.bg.

3. What personal data we collect

We collect only the data we need in order to respond to your enquiries and to maintain the website:

• Data you provide to us through the contact, property-enquiry or viewing-request forms: name, email address, telephone number and the content of your message or enquiry (for example, a project or apartment you are interested in).
• Data we receive through marketing consent (if you have given it): an email address for receiving news and offers.
• Technical data collected automatically when you visit the site: IP address, device and browser type, pages visited and similar usage information, collected via cookies and similar technologies (see the Cookie Policy).

We do not deliberately collect special categories of personal data (e.g. data about health, ethnic origin, etc.). Please do not send us such data through the forms on the site.

4. For what purposes and on what legal basis we process the data

5. Recipients of the data and processors

We do not sell your personal data. We share data only with service providers that process it on our behalf and under our instructions (processors), subject to appropriate safeguards:

• Hosting and contact-form provider: Netlify, Inc. — hosting of the website and processing of the enquiries submitted through the forms.
• Web analytics provider: Google (Google Analytics 4) — Google Ireland Limited, for analysing the use of the website on the basis of your consent.

We may also disclose data to competent public authorities where required to do so by law.

6. Transfers of data outside the EU/EEA

Some of our providers (e.g. Netlify, Inc., as well as Google when data is transferred to servers of Google LLC) may process data outside the European Economic Area, including in the USA. In such cases the transfer takes place subject to appropriate safeguards within the meaning of the GDPR — for example, standard contractual clauses approved by the European Commission. You can request more information at sales@avaton.bg.

7. Retention period

We keep personal data only for as long as necessary for the purposes for which it was collected:

• Enquiries and viewing requests: up to 12 months after the last communication, unless a contractual relationship arises from them, in which case the relevant statutory periods apply.
• Data based on marketing consent: until you withdraw your consent.
• Accounting and other data held under a legal obligation: for the period provided for in the applicable legislation.
• Technical data and cookies: for the period stated in the Cookie Policy.

8. Your rights

In accordance with the GDPR, you have the right to:

• obtain access to your personal data;
• request rectification of inaccurate data;
• request erasure of the data (the “right to be forgotten”);
• request restriction of processing;
• exercise the right to data portability;
• object to processing based on legitimate interest or for direct marketing purposes;
• withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

To exercise your rights, write to us at sales@avaton.bg. We will respond within one month.

9. Right to lodge a complaint

If you believe that we are processing your data in breach of the law, you have the right to lodge a complaint with the supervisory authority:

Commission for Personal Data Protection (КЗЛД/CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
tel.: 02/915 35 18 · email: kzld@cpdp.bg · website: www.cpdp.bg

10. Is the provision of data mandatory

Providing data through the site is voluntary. However, if you do not provide us with a name and contact details (email or telephone), we will not be able to respond to your enquiry or arrange a viewing.

11. Automated decision-making

We do not make decisions affecting you based solely on automated processing, including profiling.

12. Data security

We apply appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or disclosure, including an encrypted connection (HTTPS) and access controls.

13. Cookies

The website uses cookies and similar technologies. Detailed information and the ability to manage your consent can be found in the Cookie Policy.

14. Changes to this policy

We may update this Policy from time to time. If we do, we will update the “Last updated” date above and, where necessary, notify you in an appropriate manner. We recommend that you review this page periodically.