Privacy policy
Pilarres EOOD (“Pilarres”, “we”) is the data controller for personal data processed through this website. This policy explains what we collect, why, and what rights you have.
What we collect
This website collects only two kinds of personal data:
- Contact-form submissions — the name, email address, subject and message you choose to send us through the contact page.
- Server logs — standard technical logs generated by our hosting infrastructure (Cloudflare Workers), such as IP address, request timestamps and user-agent, kept for security and operational purposes.
We do not use cookies for analytics or advertising, and this site does not run any third-party tracking script. See our cookie statement for details.
Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to a message sent through the contact form | Legitimate interest in answering enquiries, and steps taken at your request prior to a possible contract |
| Protecting the contact form against spam and abuse | Legitimate interest in the security of our services |
| Security and operation of the website | Legitimate interest in the security of our infrastructure |
Retention
Contact-form submissions are not stored in any database by this website. When you submit the form, the message is sent directly by email to Pilarres and is never written to disk or a database by our infrastructure. Once delivered, the message exists only in the recipient mailbox, subject to Pilarres’ ordinary email retention practice. Server logs are retained by our hosting provider (Cloudflare) for a limited operational period before automatic deletion.
Recipients and processors
Contact-form messages are delivered to Pilarres’ own mailbox via Cloudflare’s email sending infrastructure, and the contact form is protected by Cloudflare Turnstile. Cloudflare, Inc. acts as our hosting and infrastructure processor. We do not sell or share personal data with any other third party, and we do not use it for advertising.
International transfers
Our infrastructure provider, Cloudflare, operates a global network. Where personal data is processed outside the European Economic Area, this is done under the safeguards Cloudflare provides for its customers (including EU Standard Contractual Clauses).
Automated decision-making
No automated decision-making or profiling takes place on this website.
Your rights
Under the GDPR, you have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to data portability, subject to the conditions set out in the GDPR. To exercise any of these rights, contact us through the contact form on this website.
You also have the right to lodge a complaint with a supervisory authority. As Pilarres EOOD is established in Bulgaria, the competent lead supervisory authority is the Commission for Personal Data Protection (Комисия за защита на личните данни), reachable at www.cpdp.bg.
Contact
Pilarres EOOD, Bulevard 6-ti Septemvri 152, Ofis 3-8B, 4000 Plovdiv, Bulgaria. Use the contact form on this website to reach us.