1. Data Controller

The controller of your personal data is:

• IT Doctors
• Veliko Tarnovo, Bulgaria
• Phone: +359 877 610 850
• Email: info@itdoctors.bg

2. What data we collect

Through the contact form on the website we collect the following personal data, provided voluntarily by you:

• Full name or company name
• Email address
• Phone number
• Message content (optional)

We do not automatically collect tracking cookies, location data or sensitive personal data.

3. Purpose and legal basis for processing

Data is processed solely for the purpose of:

• Responding to your enquiry or service request
• Providing the consultation or quote you have requested

Legal basis: Processing is carried out on the basis of explicit consent (Art. 6(1)(a) of the GDPR), given by you when submitting the form.

4. Sharing data with third parties

Your data is not sold or shared with advertising partners. Messages submitted via the form are received through the FormSubmit service (formsubmit.co), which acts as a data processor and forwards enquiries to our email inbox.

5. Retention period

Received enquiries are retained in our email correspondence for a period of up to 2 years, or until the conclusion of any resulting business relationship, after which they are deleted.

6. Your rights

Under the GDPR you have the following rights:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate data.
• Right to erasure — you may request deletion of your data ("right to be forgotten").
• Right to restriction of processing — you may request that processing be restricted.
• Right to withdraw consent — you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint — you have the right to file a complaint with the Commission for Personal Data Protection (CPDP).

To exercise your rights, please contact us at: info@itdoctors.bg

7. Data security

We apply technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. The website operates over a secure HTTPS connection.

8. Changes to this policy

We reserve the right to update this policy in response to changes in legal requirements or our practices. The date of the last update is stated at the beginning of this document.