Privacy

Version 1.3 · ruse.biz · 3 September 2026

This policy describes how „Кремена Цвяткова“ ЕООД processes personal data in connection with the corporate website ruse.biz.

Controller

„Кремена Цвяткова“ ЕООД
UIC: 200578141
VAT No.: BG200578141
3 Tsarkovna Nezavisimost St., 7000 Ruse, Bulgaria

The controller determines the purposes and means of processing personal data in connection with the website.

How contact works and what data we process

You can contact us via protected phone/email reveal and via the public web enquiry forms. We process name, email, enquiry capacity (individual or on behalf of a company/organization), and where applicable company/organization name and identifier (Bulgarian EIK/UIC or foreign registration number), preferred contact method, optional phone and optional message; data are transferred to our CRM (crm.ruse.biz), with client confirmation email and internal routing. Local enquiry records are ordinarily retained up to 12 months.

You can reveal a protected phone number and/or email address and contact us via ordinary channels (phone or email). Enquiries are received and handled in normal communication channels (telecom / email), not as web-form records stored in private web hosting.

When you contact us we process the data you provide — for example name, phone, email and the content of your message.

Purposes and legal bases

We process data for the following purposes and on the following legal bases:

• Pre-contractual enquiries requested by the data subject — Art. 6(1)(b) GDPR.
• Other ordinary business enquiries — Art. 6(1)(f) GDPR (legitimate interest in responding to business communications and organising our professional services).
• Necessary technical operation of the site (session/CSRF and preference cookie) — Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website).
• Optional statistics (Google Analytics via Google Tag Manager) — Art. 6(1)(a) GDPR (consent). You may withdraw consent at any time via “Cookie settings”.

Recipients / categories of recipients

Data may be processed by or disclosed to the following categories of recipients as needed:

• the hosting provider of the website — for technical operation;
• telecom and/or email providers — as needed for communication;
• Google Ireland Limited / Google (Analytics / Tag Manager) — only after consent to analytics cookies.

Retention

Enquiry data are processed for as long as needed to handle the enquiry and pre-contractual steps — ordinarily up to 12 months, unless law or an ensuing contract requires longer.

Cookie lifetimes: the session cookie lasts for the session; the preference cookie (rb_consent_v1) lasts 180 days. Analytics cookie durations are described in the Cookie policy.

Cookie lifetime and Google Analytics data retention are separate concepts. In GA4, event/user-level data retention is set to 14 months.

Cookies and statistics

We use necessary cookies for site operation and to remember your choice. Google Analytics (via Google Tag Manager, container GTM-M4WDX6W6) loads only after consent. Google Ads / advertising tracking is not currently active.

Transfers outside the European Economic Area

Where Analytics/GTM services are used, the relevant European Google entity may be Google Ireland Limited. Onward processing or transfers outside the European Economic Area may occur under Google’s terms and applicable safeguards/transfer mechanisms. This does not mean that the initial transfer from ruse.biz necessarily goes directly to a third country.

Your rights

Under the GDPR you have the right to:

• access;
• rectification;
• erasure;
• restriction of processing;
• object to processing;
• data portability where applicable;
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal);
• lodge a complaint with the Commission for Personal Data Protection (CPDP / КЗЛД), Bulgaria.

Voluntary provision of data

Providing data for an enquiry is voluntary. Without contact details we may be unable to answer.

See Cookies.