Privacy Policy

The controller of the personal data is:

Company

EMKYATEC LTD

UIC

202561393

VAT number

BG202561393

Registered office

Belomorska Street 3, Dzhebel, Kardzhali 6850, Bulgaria

Email

info@emkyatec.com

Phone

+359 876 032 220

When you use the site contact form, we process the following data:

• name
• email address
• the content of the message you send

When you contact us by email, phone, or another communication channel, we process the contact details and business information needed to review your inquiry and provide a response.

The website may store your language preference in your browser's local storage so it can keep your selected language on later visits.

If you accept optional cookies with the “Accept all” button, the Google tag on the site measures whether visits from our Google Ads lead to inquiries. When you then send the contact form, the Google tag reads the email address you entered, turns it in your browser into a one-way hashed code (SHA-256), and sends that code to Google so Google Ads can match the inquiry to an ad click (enhanced conversions). Google receives the hashed code, not your readable email address. If you choose “Decline”, this does not happen.

We use personal data for the following purposes:

• to respond to inquiries sent through the contact form
• to discuss requested services, potential projects, or business opportunities
• to prepare offers, proposals, meetings, or follow-up communication
• to maintain ordinary B2B communication with clients, partners, and prospects
• to ensure the proper functioning and management of the website
• to preserve the selected language preference when using the site
• to measure whether our online ads lead to inquiries — only with your consent
• to comply with applicable legal, accounting, or administrative obligations

We process personal data on the following bases under GDPR:

• taking steps prior to entering into a contract — when you send an inquiry about a service, project, offer, or potential cooperation
• legitimate interests — when we respond to business inquiries, maintain communication with clients and partners, manage the site, and protect the normal functioning of our services
• legal obligation — when we are required to keep certain information under applicable legal, accounting, or tax requirements
• consent — for optional cookies and the Google Ads measurement described above, given with the “Accept all” button, and where explicitly requested, for example for future marketing communications

We do not sell personal data.

Personal data may be processed by service providers that support our operations, including providers of:

• website hosting and technical support
• contact form and email communication
• business administration
• advertising measurement (Google Ireland Limited, Google Ads) — only with your consent
• accounting, legal, or other professional services where necessary

These providers process data only as needed for the relevant service and in compliance with applicable personal data protection rules.

Some service providers may process data outside the European Economic Area.

Where this happens, we apply appropriate safeguards under GDPR, including European Commission adequacy decisions, standard contractual clauses, or other applicable protection mechanisms.

We store personal data only for the period needed for the purposes for which it was collected, unless the law requires a longer period.

Inquiry and business communication data is normally reviewed for deletion after 24 months of inactivity, unless it is needed for ongoing relationships, contract negotiations, contract performance, or compliance with legal obligations.

The language preference remains in your browser until you change it, clear site data, or use another browser or device.

Subject to GDPR, you have the right to request:

• access to your personal data
• rectification of inaccurate or incomplete data
• erasure of personal data
• restriction of processing
• data portability
• objection to processing where it is based on legitimate interests
• withdrawal of consent where processing is based on consent

Where you object to processing based on legitimate interests, we will stop the processing unless we demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for the establishment, exercise, or defense of legal claims.

You have the right to lodge a complaint with a personal data protection supervisory authority.

In Bulgaria, the competent authority is:

Authority

Commission for Personal Data Protection

Website

www.cpdp.bg

For questions about this Privacy Policy or to exercise your rights, you can contact us at:

Email

info@emkyatec.com