Privacy notice

Last updated: [date of publication]

Draft. Replace every highlighted placeholder, confirm the hosting and email details with the providers, and have the finished notice checked before launch. It describes the site as built today: no cookies, no analytics and no contact form.

In short

This website does not use cookies, analytics or any other tracking. We only process personal data where it is needed to show you the website and to reply when you contact us.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

[Registered business name]
Georgi Jekov
[Street and number]
[Postcode, city, country]
Email: [hello@stavectis.com]

Full details are in our imprint.

Visiting this website

When you open a page, your browser sends technical information to the server so the page can be delivered. This includes your IP address, the date and time, the page requested, the referring page, and your browser and operating system. These details are recorded in server logs.

We use them only to deliver the website and keep it secure, for example to detect and stop attacks. The legal basis is our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR). We do not combine this data with other sources or use it to identify you.

Hosting

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, which processes the data above on our behalf under a data processing agreement. Vercel may process data in the United States. [Confirm before launch: transfers are covered by the EU–U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses in Vercel's data processing addendum.]

Server logs are kept for [log retention period on the hosting plan] and then deleted.

Fonts

The fonts on this website are stored on our own hosting. Your browser does not connect to Google or any other font provider when you visit.

Contacting us by email

If you email us, we process your email address, your name and anything else you include in your message. We use this information to reply, and where relevant to prepare or carry out an engagement.

The legal basis is the steps you ask us to take before entering into a contract, or the contract itself (Art. 6(1)(b) GDPR). For other enquiries, it is our legitimate interest in answering messages sent to us (Art. 6(1)(f) GDPR).

Our email is provided by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which processes it on our behalf under a data processing agreement. Google may also process data in the United States; [confirm: transfers are covered by the EU–U.S. Data Privacy Framework and the Standard Contractual Clauses in Google's data processing terms].

We delete your messages once your enquiry is fully dealt with, unless commercial or tax law requires us to keep them for longer.

Links to LinkedIn

This website links to our LinkedIn profile but does not embed any LinkedIn content. No data is sent to LinkedIn unless you click the link. After that, LinkedIn's own privacy policy applies.

Your rights

You have the right to:

• ask what personal data we hold about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16)
• have your data deleted (Art. 17)
• restrict how we process it (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on our legitimate interests (Art. 21)

To use any of these rights, email us at [hello@stavectis.com].

You can also complain to a data protection supervisory authority. The authority responsible for us is [if registered in Germany (Hesse): Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden. If registered in Bulgaria: Commission for Personal Data Protection, Sofia.]

Automated decisions

We do not make decisions about you by automated means, and we do not build profiles.

Changes to this notice

We will update this notice if the website or the way we handle data changes, for example if we add a contact form or analytics. The date at the top shows the latest version.