Personal data
Privacy
policy
Your data. Your rights. Clear information.
Updated on 02.11.2026Data controller and contact
This policy explains how CARGON processes personal data through its website and communications about its construction services and investment projects. Regulation (EU) 2016/679 and the Bulgarian Personal Data Protection Act apply.
„Каргон Про“ ЕООД22 Bacho Kiro Street, Varna
cargonbg@gmail.com
+359 889 776 543
Data we process
The enquiry form processes your name, phone, email and the message you send. If you contact us by phone or email, we process the contact details and correspondence you provide. Please do not send national ID numbers, identity document copies or sensitive data through a general enquiry.
To operate and protect the site, technical data such as IP address, request time and URL, browser and processing outcome may be processed. The app does not keep a permanent form-content database. A temporary email hash and request ID limit repeat submissions within a ten-minute window.
Purposes and legal bases
We use data to answer enquiries, provide requested information about construction services and investments, and follow up. For enquiries concerning a possible contract, the basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR.
General correspondence and site security rely on legitimate interests in responding, preventing abuse and keeping the site secure, Article 6(1)(f). Where a legal obligation applies, Article 6(1)(c) is the basis. We process only necessary data and respect your right to object.
Submitting an enquiry and acknowledging this policy do not subscribe you to marketing. Any future consent-based marketing will have a separate choice and a way to withdraw consent.
Recipients and providers
Access is provided when necessary to authorised staff and hosting, email and technical support providers. Data may be disclosed to competent authorities where there is a legal basis.
When email delivery is enabled, Resend sends enquiries to our team and acknowledgements to visitors. Correspondence at cargonbg@gmail.com is processed through Google/Gmail. Providers receive only data necessary for the service. In preview mode the form sends no emails.
Transfers outside the EEA
International email and infrastructure providers may process data outside the EEA. Transfers require safeguards under Chapter V GDPR, such as standard contractual clauses or an applicable adequacy decision. Ask our contact email for details of the processing and safeguards.
Provider documents are linked below. If services change, this information is updated to reflect the actual configuration.
Retention periods
Enquiries that do not result in a contract are kept for up to 12 months after the last contact, then deleted or anonymised. Contract records are kept for applicable statutory periods. Relevant data may be retained longer during disputes or claims until resolution and expiry of applicable periods.
Temporary rate-limit records expire after ten minutes and are cleared on subsequent requests or restart. External technical logs and email records follow the provider service and plan, limited to delivery, protection and troubleshooting needs.
Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction or portability. You may object to legitimate-interest processing. Consent may be withdrawn without affecting the lawfulness of earlier processing.
Email your request to cargonbg@gmail.com. We normally respond within one month and notify you of any permitted extension. We may request proportionate information to verify identity.
Right to complain
You may complain to the Bulgarian Commission for Personal Data Protection or another competent authority without contacting us first. See cpdp.bg for current filing information.
Providing data and policy changes
Providing enquiry data is voluntary. Without contact details we cannot respond. An enquiry is not a contract, payment or guaranteed reservation. The site is not intended to collect children’s data. The described communications do not involve automated decisions with legal or similarly significant effects.
We update this policy when functionality, providers or processing change. The latest version and update date are published here.