Privacy policy
This policy explains how Novaris Group Ltd (“we”) collects and uses your personal data when you visit this website or contact us, in accordance with Regulation (EU) 2016/679 (GDPR).
Data controller
Novaris Group Ltd („Новарис Груп“ ЕООД), 10 Stefan Karadzha Str., Floor 3, 1000 Sofia, Bulgaria, UIC 208869215. Contact: contact@novarisgroup.eu.
We have not appointed a data protection officer, as this is not required for our activity. All requests can be sent to the address above.
Data we collect
- Contact form: your name, email address, company (optional), your message and the language of the page.
- Emails: the information you choose to send us when you write to us directly.
- Technical data: IP address, browser type, date and time of the request, processed by our host to deliver and secure the website.
- Anti-spam check: when you use the contact form, Cloudflare Turnstile analyses technical signals from your browser to tell humans and bots apart.
We do not collect special categories of data, we do not carry out advertising profiling and we do not make automated decisions about you.
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your request and preparing a proposal | Steps prior to a contract and legitimate interest in answering enquiries (Art. 6(1)(b) and (f)) |
| Website security, spam and abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Meeting our legal obligations (e.g. accounting, if we work together) | Legal obligation (Art. 6(1)(c)) |
Recipients and processors
Your data is only accessible to Novaris Group and to the technical providers below, acting as processors and only for the purposes above:
- Cloudflare, Inc. (United States): website hosting (Cloudflare Pages), content delivery, security, Turnstile anti-spam check and processing of the contact form.
- Zoho Corporation (Zoho Mail and ZeptoMail): email hosting and delivery of contact form messages.
We never sell or rent your personal data.
Transfers outside the European Union
Some of these providers may process data outside the European Economic Area, in particular in the United States. These transfers rely on the EU–US Data Privacy Framework adequacy decision where the provider is certified, and otherwise on the European Commission’s standard contractual clauses (Article 46 GDPR).
Retention periods
- Contact requests and related emails: 3 years after our last exchange, unless a business relationship follows.
- Client data: for the duration of the contract, then for the periods required by Bulgarian accounting and tax law.
- Technical logs: kept by Cloudflare for a short period, for security purposes only.
Your rights
Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise these rights, write to contact@novarisgroup.eu. We answer within one month and may ask you to prove your identity.
You can also lodge a complaint with a supervisory authority: in Bulgaria, the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia — www.cpdp.bg, or with the authority of your country of residence in the EU.
Cookies and trackers
This website sets no audience-measurement or advertising cookies and contains no third-party trackers. Fonts are hosted on our own servers: no request is sent to Google Fonts or any other font service.
Cloudflare may use strictly necessary security mechanisms (such as bot protection), which are exempt from consent. Cloudflare Turnstile is only loaded when you reach the contact form.
Security
We apply appropriate technical and organisational measures to protect your data: HTTPS encryption on every page, strict security headers and restricted access to our administration tools.
External websites
Links to other websites (LinkedIn, heydring.com, partners) are subject to those websites’ own privacy policies.
Changes
We may update this policy. The date of the latest update is shown at the top of this page.