Effective: August 6, 2026
This policy explains how personal data is processed when using nakov.artwebdesign.eu. It applies to visitors to the website as well as to individuals who contact us through the contact channels listed on the site.
1. Data Controller
The data controller is Attorney Ivelin Nakov, address: Burgas 8000, 26 Georgi Kirkov St., phone: +359 879 814 358, e-mail: legal@nakov.eu.
2. What Data Do We Process?
Depending on how you use the site, we may process:
- information you voluntarily provide in response to an inquiry—name, email address, phone number, the content of your message, and details regarding the specific case;
- technical data — IP address, browser type and settings, device, operating system, date and time of the visit, and server log data;
- data about your use of the site when you have consented to the use of analytics or marketing cookies.
Please do not send sensitive data or documents through the website unless it is necessary for a specific legal consultation and has been agreed upon with us.
3. Objectives and Legal Basis
We process data to respond to inquiries and take steps to enter into or fulfill a contract; to comply with legal obligations; to protect the website and prevent abuse; and to analyze and improve the website when you have given your consent. The legal bases are Article 6(1)(b), (c), (e), and (a) of the GDPR, depending on the specific case.
4. Cookies, Google Analytics 4, and Google Ads
The website uses a consent banner that allows you to accept, decline, or customize cookie categories. Essential cookies are necessary for the website to function and to remember your choices. Functional cookies may be used for the embedded Google Maps feature.
We plan to use Google Analytics 4 (GA4) via Google Site Kit to track website traffic and usage. GA4 is activated only after you consent to analytical cookies. If it is activated in the future Google Ads, its tags, remarketing, and conversion tracking will be enabled only after separate consent for marketing cookies has been given.
Google may process data such as IP addresses, cookie identifiers, device information, and visit data. Google acts as either a data controller or a data processor, depending on the service used. More information: Google Privacy Policy.
You can change your selection at any time via the cookie banner. Refusal or withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.
5. Recipients and Transfers Outside the EEA
Data may be disclosed only when necessary to hosting and technical support providers, analytics and advertising service providers (including Google), as well as to competent authorities where there is a legal basis for doing so. When data is transferred outside the European Economic Area, appropriate safeguards are applied, including standard contractual clauses where applicable.
6. Storage Periods
Inquiries are retained for the period necessary to respond to them and for follow-up communication, unless a longer period is required by law or contract. Technical logs are retained for a limited period necessary to ensure the security of the website. Data from GA4 is retained for the period specified in the relevant service settings. Your cookie preferences are retained for up to 365 days or until you change them.
7. Your Rights
Under the GDPR, you have the right to access, rectify, erase, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent. To exercise any of these rights, please write to legal@nakov.eu. You also have the right to file a complaint with the Personal Data Protection Commission: www.cpdp.bg.
8. Security
We implement reasonable technical and organizational measures to protect data. However, the transmission of information over the Internet cannot be guaranteed to be completely secure.
9. Policy Changes
We may update this policy in response to changes in our services, technologies, or applicable regulations. The current version is always posted on this page.
