§Protocol document
Privacy Policy
Draft — review before publishing. Replace every [BRACKETED] placeholder and have the text checked against your actual setup and Bulgarian/EU law (GDPR, Bulgarian Personal Data Protection Act).
Who we are
This website is operated by [SELLER LEGAL NAME], [REGISTERED ADDRESS], UIC/EIK [NUMBER] ("we", "us"). Contact: [CONTACT EMAIL].
What we collect and why
| Data | Purpose | Legal basis (GDPR Art. 6) | Kept for |
|---|---|---|---|
| Email, name, country, order details | Processing and delivering your purchase, sending your download link, customer support | Performance of a contract (6(1)(b)) | As long as required by accounting and tax law ([e.g. 10 years]) |
| Payment information | Handled entirely by Stripe — we never see or store card numbers | Contract (6(1)(b)) | Per Stripe's policy |
| Messages sent through the contact form | Replying to you | Legitimate interest (6(1)(f)) | [24 months] |
| Download records (time, file) | Enforcing download limits, fraud prevention | Legitimate interest (6(1)(f)) | [24 months] |
| Aggregate page counters | Understanding which pages are visited. No cookies, no IP addresses and no personal data are stored — only daily totals per page. | Legitimate interest (6(1)(f)) | Indefinitely (anonymous) |
Service providers (processors)
- Stripe Payments Europe Ltd. — payment processing.
- Cloudflare, Inc. — hosting, content delivery and file storage.
- Neon / [your database provider] — database hosting.
- Resend — sending transactional email.
- Google / YouTube — video embeds. The player is only loaded after you click play, from the privacy-enhanced youtube-nocookie.com domain.
Some providers may process data outside the EEA under Standard Contractual Clauses or an adequacy decision.
Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing by writing to [CONTACT EMAIL]. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or your local supervisory authority.
Updates
We may update this policy. The current version is always published on this page.