PRIVACY AND PERSONAL DATA PROTECTION POLICY
of "Architectural Bureau Dimitrov" Ltd.
Last updated: 27.08.2026
1. General
This Privacy and Personal Data Protection Policy ("Policy") aims to inform visitors to the website https://www.archb.pro/ and persons who contact "Architectural Bureau Dimitrov" Ltd. through the contact form on the website https://www.archb.pro/contact , about the manner in which the company collects, uses, stores and protects their personal data.
"Architectural Bureau Dimitrov" Ltd. processes personal data in accordance with applicable personal data protection legislation, including Regulation (EU) 2016/679 ("GDPR") and the Personal Data Protection Act.
This Policy primarily applies to personal data voluntarily provided by potential clients through the contact form on the website or through subsequent communication with the company in connection with their inquiry.
2. Personal Data Administrator
Personal Data Administrator:
"Architectural Bureau Dimitrov" Ltd.
UIC: 131198474
Headquarters and registered office: 1618 Sofia, Bulgaria, 14B Kazbek Str., entrance A, Vitosha district
E-mail: d.dimitrov@archb.com
Phone: +359 888355287
Within this Policy, "Administrator", "we" and "the company" mean "Architectural Bureau Dimitrov" Ltd.
3. What personal data do we collect
Depending on the content of the specific request, the following categories of personal data may be collected through the contact form:
• name and surname;
• e-mail address;
• telephone number;
• information contained in the message sent by the person;
• information regarding the investment intention or future project, when the person voluntarily provides it;
• technical data related to sending the form (IP address, date and time of submission) — to the extent that they are collected automatically by the hosting provider;
• other data that the person voluntarily included in their inquiry.
Please do not provide special categories of personal data within the meaning of Art. 9 of the GDPR through the contact form, unless this is necessary and there is an appropriate legal basis for processing them.
The company strives to collect only personal data that is adequate, relevant and limited to what is necessary for the respective purpose.
4. For what purposes do we use personal data
The personal data provided through the contact form may be processed for the following purposes:
4.1. Processing an inquiry and preparing an offer
When a person contacts us with the intention of receiving design, architectural, consulting or related services, their data is used to:
• establish contact;
• clarify the requirements and parameters of the assigned project;
• discuss the possibility of providing the service;
• preparation and sending of an offer;
• conducting the necessary correspondence in connection with the inquiry and the offer.
4.2. Performance of a contract
When a contract is concluded between the person and the company, personal data may be used to the extent necessary for:
• performance of the agreed design and/or consultancy services;
• communication with the client;
• coordination of the project;
• performance of legal and contractual obligations;
• protection of the rights and legitimate interests of the company.
5. Legal grounds for processing
Depending on the specific purpose, the processing is carried out on one or more of the following grounds under Art. 6, par. 1 of the GDPR:
a) taking steps at the request of the person prior to entering into a contract — Art. 6, par. 1, b. "b" of the GDPR.
This is the main legal basis for processing data when a potential client sends an inquiry for the purpose of obtaining information, discussing a project or preparing an individual offer.
b) performance of a contract — Art. 6, par. 1, b. “b” of the GDPR.
When a contract is concluded, the data are processed to the extent necessary for its performance.
c) compliance with a legal obligation — Art. 6, par. 1, b. “c” of the GDPR.
This basis applies when processing is necessary for the performance of an obligation arising from applicable law, such as accounting, tax or other regulatory obligations.
d) legitimate interest — Art. 6, par. 1, b. “f” of the GDPR.
Where necessary, the company may process data to protect its legitimate interests, including for the establishment, exercise or defence of legal claims, correspondence and proof of actions taken in connection with contractual or pre-contractual relations.
When using this basis, the company assesses the balance between its legitimate interests and the rights and freedoms of the data subject.
6. Storage period
6.1. Potential clients with whom a contract has not been concluded
When, after sending an inquiry and/or preparing an offer, a contract has not been concluded, personal data are stored for the period necessary to process the inquiry and prepare and follow up on the offer, but no longer than 12 months after the end of the communication, unless:
• there is another legal basis for their longer storage;
• storage is necessary for the establishment, exercise or defense of legal claims;
• applicable law requires a longer period.
After the applicable period has expired, the data are deleted or destroyed in a secure manner, unless there is a legal basis for their continued storage.
6.2. Customers with whom a contract has been concluded
When a contract is concluded, personal data are stored for the period necessary for its performance, as well as thereafter for the periods that arise from applicable law, including accounting and tax law, or to protect the rights and legitimate interests of the company.
Different categories of documents may be stored for different periods depending on applicable legal requirements.
7. To whom personal data may be provided
Access to personal data may only be provided to the extent necessary for the relevant purpose and in compliance with personal data protection requirements.
Depending on the specific project, the data may be accessible to:
• employees and associates of the company who are involved in processing the inquiry or implementing the project;
• external designers, engineers, consultants and other specialists involved in the specific project;
• accountants, lawyers and other professional consultants of the company;
• providers of IT, hosting, e-mail, communication and other technical services, when this is necessary for the functioning of the activity;
• state and municipal authorities and other competent institutions, when the provision of the data is provided for or required by law.
We do not sell or provide your data to third parties for marketing purposes without your explicit consent.
8. Transfer of personal data outside the European Economic Area
As a rule, the company does not aim to transfer personal data outside the European Economic Area.
The hosting service provider through which the contact form operates may store data on servers outside the EEA. In this case, the transfer is carried out on the basis of appropriate guarantees under Art. 46 GDPR
9. Security of personal data
The Company implements appropriate technical and organizational measures to protect personal data against:
• unauthorized access;
• unlawful or accidental disclosure;
• loss or destruction;
• accidental or unlawful alteration;
• other forms of unlawful processing.
Access to personal data is limited to persons for whom such access is necessary in connection with the performance of their functions or the specific project.
10. Automated decision-making and profiling
The Company does not carry out automated decision-making, including profiling, which produces legal effects or similarly significantly affects the persons whose data it processes in connection with inquiries and design services.
11. Rights of individuals
Under the conditions and restrictions provided for in the GDPR, the persons whose personal data are processed have the following rights:
• right to information about the processing of their personal data;
• right to access personal data;
• right to rectification of inaccurate or incomplete data;
• the right to erasure of personal data (“right to be forgotten”), where the legal requirements are met;
• the right to restriction of processing;
• the right to data portability, where the legal requirements are met;
• the right to object to processing, where the processing is based on a legitimate interest;
• the right not to be subject to a decision based solely on automated processing, including profiling, where the GDPR requirements are met.
Where processing is based on consent, the data subject has the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
It should be noted that the individual rights are not absolute and may be restricted where there is a legal basis for this.
12. How to exercise the rights
To exercise their rights, the person may send a request to:
"Architectural Bureau Dimitrov" LTD.
E-mail: d.dimitrov@archb.com
Address: 1618 Sofia, Bulgaria, 14B Kazbek Str., entrance A, Vitosha district
The request should include sufficient information to identify the person and the processing to which the request relates.
The company considers the requests within the time limits provided for in the GDPR.
When there are reasonable doubts about the identity of the person, the company may request additional information necessary to confirm their identity.
13. Right to complain to a supervisory authority
If the person considers that the processing of their personal data violates the GDPR or the applicable legislation on personal data protection, they have the right to file a complaint with the competent supervisory authority.
For the Republic of Bulgaria this is:
Commission for Personal Data Protection (CPDP)
Sofia, Bulgaria
Website: https://www.cpdp.bg/
The right to complain to a supervisory authority does not limit the person's right to use other remedies provided for by law.
14. Data provided through the contact form
Providing certain data through the contact form is necessary for the company to respond to the inquiry and, when requested, to prepare an offer.
If the person does not provide the necessary information, the company may not be able to contact him, clarify the parameters of the project or prepare an offer.
The person is not obliged to provide more personal data than is necessary for the specific inquiry.
15. Cookies and technical data
This Policy applies to the processing of personal data provided in connection with inquiries and design services.
The archb.pro website may use technically necessary cookies for the correct functioning of the contact form (e.g. protection against spam via CAPTCHA/reCAPTCHA).
16. Updating the Policy
The Company may update this Policy when necessary due to changes in the legislation, the way the website works or the processing of personal data.
The current version of the Policy is published on the company's website and indicates the date of the last update.
17. Contact
If you have any questions regarding this Policy or the processing of personal data, you can contact:
"Architectural Bureau Dimitrov" LTD.
E-mail: d.dimitrov@archb.com
Phone: +359 888355287
Address: 1618 Sofia, Bulgaria, 14B Kazbek Str., entrance A, Vitosha district