Privacy policy
Last updated: 1 August 2026
1. Data controller
The controller of the personal data collected through this website is АКСИС М ГРУП ЕООД (trading as Alfa Reach).
- Company ID (EIK): 207825007
- VAT No.: BG207825007
- Registered address: ул. Любата 23, София 1407, Bulgaria
- Manager: Филип Георгиев Арнаудов
- Email: alfareachmarketing@gmail.com
- Phone: +359 89 765 2300
2. What personal data we collect
We only collect the data needed for a specific purpose:
- Contact form data: name, email address, phone number and the content of your message.
- Technical data: IP address, device and browser type, pages visited — only if you have consented to analytics cookies.
- Marketing data: interaction with ads — only if you have consented to marketing cookies.
We do not knowingly collect special categories of personal data and we do not process data of persons under 16 years of age.
3. Purposes and legal basis
We process your personal data on the following grounds under Article 6 of the General Data Protection Regulation (GDPR):
- Responding to your enquiry and preparing a quote — Art. 6(1)(b) (steps prior to entering into a contract).
- Analytics and marketing cookies — Art. 6(1)(a) (your consent, which you can withdraw at any time).
- Site security and protection against abuse — Art. 6(1)(f) (legitimate interest).
- Compliance with accounting and tax obligations — Art. 6(1)(c) (legal obligation).
4. Cookies
We use three types of cookies. The necessary ones are required for the site to work. Analytics and marketing cookies load only after your explicit consent through the banner on your first visit.
You can change or withdraw your consent at any time by clearing the site data in your browser and making a new choice on your next visit.
5. Retention period
Enquiries submitted through the contact form are stored for up to 24 months from the last communication with you. Accounting documents are kept for the statutory periods. Cookie data is stored according to the settings of the respective platform, usually up to 14 months.
6. Recipients and data processors
We do not sell your personal data. We share it only with service providers who process it on our behalf:
- Resend — delivery of the emails from the contact form.
- Vercel — site hosting and technical support.
- Google (Google Analytics 4) — analysis of visits, only where consent is given.
- Meta Platforms — ad measurement, only where consent is given.
Some of these providers may process data outside the European Economic Area. In such cases the transfer takes place on the basis of standard contractual clauses approved by the European Commission.
7. Your rights
As a data subject you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase the data („right to be forgotten“);
- restrict processing;
- data portability in a machine-readable format;
- object to processing based on legitimate interest;
- withdraw consent at any time.
To exercise any of these rights, write to us at alfareachmarketing@gmail.com. We respond within one month.
8. Right to complain
If you believe your rights have been violated, you can file a complaint with the Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., or through the commission's website.
9. Changes to this policy
We may update this policy. The current version is always available on this page with the date of the last change. For the terms of use of the site, see the Terms and Conditions.