Remontiko

Privacy Policy of remontiko.bg

Last Updated: 02.07.2026

We, ПРАЙМ СЪРВИСИС БЪЛГАРИЯ ЕООД (hereinafter referred to as the "Controller", "we", or "us"), Company ID (EIK) 208203570, with registered address at: България, гр. София (1407), р-н Лозенец, ул. Кишинев 5А, ет. 1, take the protection of the personal data of visitors to our website remontiko.bg (hereinafter referred to as the "Site") seriously.

This Privacy Policy explains what personal data we collect, how we use it, and what your rights are concerning it, in accordance with the General Data Protection Regulation (GDPR) and the applicable Bulgarian legislation.

1. What Personal Data We Collect

We collect personal data that you voluntarily provide to us, as well as data collected automatically when using the Site.

A) Data provided by you via the contact form or the calculator: When you fill out the inquiry form, we collect the following data:

  • Name (so we know how to address you);
  • Email address (to reply to you);
  • Phone number (for contact and arranging site inspection details);
  • Project parameters, if you used the calculator (property type, area, finish level);
  • Other information you choose to include in the message field.

B) Data collected automatically (Cookies and Analytics): When you visit the Site, we may automatically collect technical information through cookies and similar technologies. This may include: IP address, browser type, operating system, pages viewed, and time spent on the Site. Analytics data is collected only after your consent (see the Cookie Policy).

2. Why We Collect Your Data (Purposes and Legal Basis)

We process your personal data for the following purposes:

  • Processing inquiries and matching you with a contractor: To answer your questions, arrange a site inspection, and connect you with a suitable vetted partner contractor. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Improving the Site (analytics): For traffic analysis and optimizing user experience. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Security and abuse prevention: To protect the Site from spam and malicious requests. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • Legal compliance: Where processing is necessary to comply with a legal obligation, e.g. accounting requirements once a contract is concluded (Art. 6(1)(c) GDPR).

3. Who We Share Your Data With

We do not sell or trade your personal data for marketing purposes.

A) Partner contractors (recipients). Remontiko is an intermediary that connects you with a vetted contractor. To process your inquiry substantively, we share the contact details and project description you provide with one partner contractor selected for your case, so they can prepare an offer and contact you. The legal basis matches the purpose of your inquiry — taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

B) Processors (service providers acting on our behalf). To operate the Site, we use trusted providers that process data on our instructions under a contract:

  • Vercel — hosting, CDN, storage of uploaded files, and abuse protection (global infrastructure, EU by default);
  • Neon — managed database where inquiries are stored (EU region);
  • Resend — sending email notifications for new inquiries (USA);
  • Sentry — technical error tracking (EU);
  • Google Analytics — web analytics, only after your consent (USA).

Data may also be accessible to accounting/legal advisors where necessary and within the limits of the law.

4. International Data Transfers

Some of the providers above (e.g. Resend, Google) may process data outside the European Economic Area (EEA). In such cases the transfer is carried out with appropriate safeguards under GDPR — typically the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

5. Data Security and Retention

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. Data is processed via an encrypted connection (HTTPS/SSL) and stored in a secure database.

We retain data only for as long as necessary for the relevant purpose:

  • Inquiries without a concluded contract: up to 12 months after the last communication, then deleted or anonymized;
  • Inquiries that led to a contract: for the duration of statutory limitation and accounting requirements (typically up to 5–10 years);
  • Error logs (Sentry): approximately 90 days;
  • Analytics data (Google Analytics): up to 14 months by default.

6. Your Rights

Under GDPR, you have the following rights:

  • Right of access to your personal data that we process;
  • Right to rectification of inaccurate data;
  • Right to erasure ("right to be forgotten") when there is no legal basis for continued processing;
  • Right to restriction of processing and right to data portability;
  • Right to object to processing based on legitimate interest;
  • Right to withdraw your consent at any time (e.g. for analytics cookies), without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, contact us at: contact@primeservices.bg. We respond within one month.

7. Right to Lodge a Complaint (Art. 77)

If you believe we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority:

Commission for Personal Data Protection (CPDP)
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Email: kzld@cpdp.bg
Website: www.cpdp.bg

8. Data Protection Officer (DPO)

We have not designated a Data Protection Officer, as our activity does not meet any of the conditions under Art. 37(1) GDPR (we are not a public authority, we do not carry out large-scale systematic monitoring, nor large-scale processing of special categories of data). Data-related requests are handled via the contact email above.

9. Children

The Site is not directed at persons under 18, and we do not knowingly collect data from children. If we learn that we have received such data without a proper basis, we will delete it.

10. Automated Decision-Making

We do not carry out automated decision-making producing legal effects concerning you, nor profiling within the meaning of Art. 22 GDPR. Calculator estimates are indicative only and do not replace a human decision.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the last-updated date shown.

12. Contact

If you have any questions about this Privacy Policy, you can contact us:

ПРАЙМ СЪРВИСИС БЪЛГАРИЯ ЕООД
Email: contact@primeservices.bg