Data Controller
The controller responsible for the processing of personal data on this website is:
DF Bulgaria EOOD
31 Mezhdunarodno Shose St.
2210 Dragoman
Bulgaria
Phone: +359 7172 7412
Email: info@dfbulgaria.bg
Authorized representatives:
Dipl.-Ing. Hans Ulrich Koch
Tobias Herberger
General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection legislation.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number or IP address.
Accessing Our Website and Server Log Files
When you visit our website, technical information may be automatically collected by the web server and stored in server log files. This may include:
- IP address of the accessing device
- Date and time of access
- Page or file accessed
- Amount of data transferred
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
This data is processed to ensure the technical availability, stability and security of our website.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and reliable website.
The data is deleted as soon as it is no longer required for these purposes, unless statutory retention obligations or security-related reasons require longer storage.
Contacting Us
If you contact us by email, telephone or via our contact form, we process the personal data you provide in order to handle your enquiry and communicate with you.
This may include:
- Name
- Company
- Email address
- Telephone number
- Subject and content of your message
- Any other information you voluntarily provide
The legal basis depends on the purpose of your enquiry.
If your enquiry relates to the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in handling and responding to enquiries pursuant to Art. 6(1)(f) GDPR.
Data collected in connection with your enquiry will only be stored for as long as necessary to process the enquiry. Statutory retention obligations remain unaffected.
Cookies
As a general rule, personal data is processed only within our company and only by those departments or individuals who require the data to perform their respective duties.
We may also use external service providers, for example for hosting, IT operations, maintenance or other technical services. Where these service providers process personal data on our behalf, this is carried out on the basis of an appropriate data processing agreement in accordance with Art. 28 GDPR.
Personal data is only disclosed to other third parties where there is a legal basis for doing so, where disclosure is necessary for the performance of a contract, or where you have consented to such disclosure.
Recipients of Personal Data
As a general rule, personal data is processed only within our company and only by those departments or individuals who require the data to perform their respective duties.
We may also use external service providers, for example for hosting, IT operations, maintenance or other technical services. Where these service providers process personal data on our behalf, this is carried out on the basis of an appropriate data processing agreement in accordance with Art. 28 GDPR.
Personal data is only disclosed to other third parties where there is a legal basis for doing so, where disclosure is necessary for the performance of a contract, or where you have consented to such disclosure.
Transfers to Third Countries
Personal data is transferred to countries outside the European Economic Area (EEA) only where the requirements of the GDPR are met.
Where service providers located in third countries are used, we ensure an adequate level of data protection in accordance with Art. 44 et seq. GDPR, for example on the basis of an adequacy decision by the European Commission or appropriate safeguards.
Data Retention
We store personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply.
Once the purpose of processing no longer applies and there is no legal obligation to retain the data, the relevant data will be deleted.
Once the purpose of processing no longer applies and there is no legal obligation to retain the data, the relevant data will be deleted.
Under the General Data Protection Regulation, you have the following rights in relation to your personal data:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you may contact us at any time using the contact details provided above.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The competent supervisory authority in Bulgaria is:
Commission for Personal Data Protection (CPDP)
Комисия за защита на личните данни (КЗЛД)
Sofia, Bulgaria
Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other forms of unlawful processing.
Our security measures are regularly reviewed and adapted in line with technological developments and applicable requirements.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where changes to our website, the technologies used or legal requirements make this necessary.
The current version published on this website shall apply.
Last updated: September 2026