Privacy policy
How we collect, use and protect the personal data of the clients and visitors of the website of SDK-2008 Accounting Office.
In short. We collect only the data we need to answer you, to prepare your documents and to keep the accounts of your company. We do not sell data and do not use it for advertising. The website does not use advertising, analytics or tracking cookies. We count visits anonymously – without cookies and without storing your IP address.
1. Who processes the data
The controller of the personal data is GOLD LINE CONSULT EOOD (ГОЛД ЛАЙН КОНСУЛТ ЕООД), UIC 206396576, VAT number BG206396576, which provides the accounting services under the name "SDK-2008 Accounting Office" (Счетоводна къща СДК-2008).
Correspondence address: Iztok district, Khan Krum St., bl. 2, entr. V, fl. 1, 8600 Yambol, Bulgaria
Email: atanasovpro@gmail.com
Phone: +359 893 875 542
We are not required to appoint a data protection officer. For any question about personal data, write to the email above.
2. What data we process, why and for how long
| When | What data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|---|
| Enquiry or quote request from the website, by phone or email | Name, phone, email, message; the company details you send in the quote form | To reply and prepare an offer | Steps before entering into a contract – Art. 6(1)(b) | Up to 12 months after the last contact, if no contract is concluded |
| Accounting services for your company | Data of the manager and contact persons; data in the company documents, including of your employees and business partners | Accounting, taxes, payroll, statements and returns | Contract and legal obligations – Art. 6(1)(b) and (c). For the data of your employees and partners we act on your behalf as a processor under the accounting contract | For the periods in Article 12 of the Accountancy Act and the tax laws |
| Client identification | Identity data of the client and its owners and representatives | Identification under the Bulgarian Measures Against Money Laundering Act | Legal obligation – Art. 6(1)(c) | 5 years after the end of the relationship, as the law requires |
| Visiting the website | Technical data: IP address, browser, time of the visit | Operation and security of the website | Legitimate interest – Art. 6(1)(f) | Briefly, in the hosting logs |
| Visit statistics | Only aggregated data without IP address and without cookies: page opened, the website you come from (only its name), device type (phone or computer), clicks on phone, Viber, WhatsApp and email, forms sent and PDF files downloaded. For the number of unique visits per day a coded (hashed) value is kept that changes every day and does not allow you to be identified | To know which pages and calculators are useful and how clients find us | Legitimate interest – Art. 6(1)(f) | The aggregated counts – up to 24 months |
The calculators on the website work only in your browser. Nothing you enter in them reaches us unless you send an enquiry.
We do not make decisions based solely on automated processing that have legal effects for you. Any price is prepared by a person.
3. Who we share data with
- Public authorities, when the law requires it or when we file documents on your behalf: the Registry Agency (Commercial Register), the National Revenue Agency, the National Social Security Institute, the National Statistical Institute.
- Processors who work for us under a contract and only on our instructions: website hosting (SuperHosting.BG), email provider, providers of accounting software and cloud services, including artificial intelligence tools that we use when preparing documents.
We do not sell data and do not provide it for advertising.
4. Transfers outside the European Union
Some email and cloud providers may process data outside the EU, for example in the USA. This happens only in compliance with Chapter V of the GDPR: under an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or under standard contractual clauses approved by the Commission.
5. How we protect the data
- The website works only over a secure connection (HTTPS).
- To prevent abuse of the website forms, we count the forms sent from one address per hour. We keep only a coded (hashed) form of the IP address for no more than 2 hours.
- Only the staff of the office who work on your company have access to your data.
- Documents and archives are kept on protected computers with passwords and backups.
- If a data breach occurs that may harm you, we notify the Commission for Personal Data Protection within 72 hours and you without delay.
6. Your rights
You can ask at any time:
- to know what data about you we process and to receive a copy (right of access);
- to correct inaccurate or incomplete data;
- to delete the data when it is no longer needed or we have no basis to keep it;
- to restrict the processing while we check an objection or a correction;
- to receive the data you gave us in a machine-readable format (portability);
- to object to processing based on legitimate interest.
We must keep some data by law – for example under the Accountancy Act and the Measures Against Money Laundering Act – and cannot delete it before the legal period ends.
Write to us at atanasovpro@gmail.com or visit our office. We reply within one month, free of charge. We may ask you to confirm your identity so that we do not give data to another person.
You have the right to lodge a complaint with the Commission for Personal Data Protection: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., www.cpdp.bg.
7. Cookies and local storage
The website does not use advertising, analytics or tracking cookies. That is why we do not ask for your consent with a banner.
Statistics without cookies. When you open a page, your browser sends to our server which page was opened, which website you come from and whether you use a phone or a computer. Nothing is stored on your device, the IP address is not kept, and the data is collected only in aggregated form (see section 2).
Fonts. The fonts of the website are loaded from our own server – no requests to Google Fonts.
Map. The Google map is loaded only if you press "Show the map". Google may then set its own cookies according to its rules.
8. Changes to this policy
If we change the way we process data, we will update this page and the date of the last change at the top. In case of differences between the English and the Bulgarian version, the Bulgarian version prevails.