Privacy policy of Cyber Tech Group AD Ltd
This privacy policy is based on the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR) and the Bulgarian Personal Data Protection Act. This policy aims to inform you about what personal data we collect, why we collect it, how we use and protect it, and what rights you have regarding your data when you visit our website ctg.bg.
Data Controller
The data controller for the personal data collected through this website is Cyber Tech Group AD Ltd. You can contact us regarding any data protection matters at:
Email: office@ctg.bg
Phone: +359 877 886 044
What personal data do we collect?
We collect personal data only when you voluntarily provide it to us through our contact form on the website. The data collected includes: your name, email address, phone number, company name, and the content of your message. We do not collect any personal data beyond what you explicitly submit to us through this form.
In addition, when you visit our website, certain technical information is automatically collected through cookies and analytics tools. This includes your IP address, browser type, device information, pages visited, and time spent on the website. For more details about cookies, please refer to our Cookie Policy.
Why do we collect your data and on what legal basis?
We process your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:
Responding to your inquiry - when you submit a contact form, we process your data in order to respond to your request. The legal basis is our legitimate interest in communicating with potential clients and, where applicable, the performance of pre-contractual measures taken at your request.
Website analytics - we use Google Analytics (GA4) to understand how visitors interact with our website, which helps us improve its content and functionality. The legal basis is your consent, provided through our cookie consent banner.
Spam protection - we use Google reCAPTCHA to protect our contact form from automated spam submissions. The legal basis is our legitimate interest in maintaining the security and integrity of our website.
Third-party services
In order to operate and improve our website, we use the following third-party services that may process your data:
Google Analytics (Google LLC) - for website usage analytics and statistical analysis. You can learn more about how Google processes your data in the Google Privacy Policy (https://policies.google.com/privacy).
Google Tag Manager (Google LLC) - for managing analytics and marketing tags on our website.
Google reCAPTCHA (Google LLC) - for protecting our contact form against spam and abuse.
How long do we retain your data?
Personal data submitted through the contact form is retained for up to 12 months after your inquiry has been resolved, unless a longer retention period is required by law or for the establishment, exercise, or defence of legal claims. Analytics data collected through Google Analytics is retained for 14 months.
International data transfers
Some of your data may be processed by Google LLC in the United States. Such transfers are carried out in accordance with the GDPR, based on Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring that your data receives an adequate level of protection.
Data security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption for all data transmitted between your browser and our website, access controls, and regular security assessments conducted in line with our professional expertise as a cybersecurity company.
Your rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access - you have the right to request information about whether we process your personal data and, if so, to receive a copy of that data.
Right to rectification - you have the right to request the correction of inaccurate personal data concerning you.
Right to erasure ("right to be forgotten") - you have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Right to restriction of processing - you have the right to request the restriction of processing of your personal data under certain circumstances.
Right to data portability - you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object - you have the right to object to the processing of your personal data based on legitimate interest.
Right to lodge a complaint - you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at www.cpdp.bg or with any other competent supervisory authority.
To exercise any of these rights, please contact us at office@ctg.bg.
CHANGES IN OUR PRIVACY POLICY
Any future changes to our Privacy Policy will be posted on this page. All changes will take effect immediately, except as otherwise noted. This policy was adopted on 15.07.2025.