Menu

Privacy Policy

PRIVACY AND PERSONAL DATA PROTECTION POLICY OF KONSULTANTI.BG

Last updated: 15.06.2026

This Privacy Policy describes how "AI Logic Solutions" Ltd. collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR), the Personal Data Protection Act (PDPA), and the Electronic Commerce Act (ECA).

1. Controller Details

The controller of personal data is "AI Logic Solutions" Ltd., UIC 207233308, with registered seat and address of management: Sofia, postal code 1592, Druzhba 1 residential complex, bl. 195, entrance D, floor 1, apt. 63.

  • Contact email: info@konsultanti.bg
  • Phone: +359877701044, +359876449942

2. Definitions

  • Personal data: Any information relating to an identified or identifiable natural person ("data subject").
  • Processing: Any operation or set of operations performed on personal data (collection, recording, storage, consultation, etc.).
  • Controller: A natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Information society services: Services normally provided for remuneration, at a distance, by electronic means.

3. Categories of Data, Purposes and Legal Grounds

We process the following categories of data for the following purposes:

  • Registration and profile management: Name, email, phone, password.
    Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
  • Provision of consulting services and bookings: Data on professional experience (for Consultants), appointment history, content of inquiries.
    Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
  • Payments and invoicing: Bank card data (processed directly by Stripe), personal identification number (for individuals' invoices only), address.
    Legal basis: Legal obligation (Art. 6(1)(c) GDPR in connection with the Accountancy Act).
  • Marketing and newsletters: Email address.
    Legal basis: Explicit consent (Art. 6(1)(a) GDPR).
  • Security and technical support: IP address, device data, log files.
    Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) to ensure the functionality and security of the Platform.

4. Retention Periods

  • Profile data: Until deletion of the profile by the User or 2 years after the last activity.
  • Accounting documents: 10 years pursuant to the requirements of the Accountancy Act.
  • Marketing data: Until consent is withdrawn.
  • Data provided without legal basis: Deleted or returned within one month from becoming aware of it.

5. Transfer of Data to Third Countries

In connection with the use of the Stripe payment service, personal data may be transferred to third countries (the USA). This transfer is carried out in compliance with Chapter V of the GDPR, using Standard Contractual Clauses (SCCs) approved by the European Commission, or based on adequacy decisions.

6. Cookies

The Platform uses cookies to ensure its operation.

  • Strictly necessary: Required for the site to function (e.g., session, login). No consent required.
  • Analytical and functional: Allow us to analyze traffic and improve services. Used only after your explicit consent (opt-in) via the cookie banner.
  • Marketing: Used for advertising and similar purposes only after consent via the cookie banner.

You can manage cookie preferences at any time via Cookie Settings in the footer (or Privacy Center). Logged-in users can also opt out of promotional emails in the Privacy Center; transactional emails (bookings, payments, security) are unaffected.

7. Your Rights

As a data subject, you have the following rights:

  • Right of access: To obtain confirmation as to whether your data is being processed.
  • Right to rectification: To request correction of inaccurate data.
  • Right to erasure ("right to be forgotten"): When the ground for processing no longer applies.
  • Right to restriction of processing: In cases specified by law.
  • Right to data portability: To receive your data in a machine-readable format.
  • Right to object: To processing based on legitimate interest.
  • Right to withdraw consent: At any time, without affecting the lawfulness of processing carried out up to that point.
  • Right to lodge a complaint: With the Commission for Personal Data Protection (Sofia 1592, 2 "Prof. Tsvetan Lazarov" Blvd.; www.cpdp.bg).

8. Specific Provisions

  • Age of consent: The Platform is not intended for persons under 14 years of age. Consent for information society services by persons between 14 and 18 years of age is given personally, while for those under 14 it is given by a parent/guardian.
  • Identification: When submitting a request to exercise rights, the Administrator may require additional information to confirm your identity.