Data controller
Bulsmetka, 14 Tsar Osvoboditel Blvd., 4th floor, 1000 Sofia, office@bulsmetka.bg. Questions about personal data: office@bulsmetka.bg.
What data we process
Data submitted through the quote request form (name, phone/email, type of service); data required for company registration and accounting services (personal ID number, ID card, banking details, employee data) — on the basis of contract and legal obligation (the Accountancy Act, the Tax and Social Insurance Procedure Code, the Social Insurance Code); technical data collected when visiting the site (IP address, browser) — on the basis of legitimate interest.
Purposes and retention periods
Preparing a quote — up to 6 months from the request. Performance of the contract and legal obligations — 10 years after termination (Art. 12 of the Accountancy Act). Payroll records — 50 years (Art. 5, para. 10 of the Social Insurance Code). Marketing — only with consent, until withdrawn.
Recipients
The National Revenue Agency (NRA), the National Social Security Institute (NOI), the Registry Agency, banks — as required by law and for the performance of the contract. EU-based software and hosting providers under data processing agreements. We do not sell or transfer data for marketing purposes to third parties.
Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent — submit a request to office@bulsmetka.bg. We respond within 30 days. Complaints: Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., cpdp.bg.
Security
Encrypted connection (TLS), two-factor authentication for access to accounting systems, EU-based electronic archive with daily backups, access restricted to the responsible accountant only.