Privacy Policy

Effective date: 01.01.2025

This privacy policy aims to inform you about how Strive 4BG Ltd. collects, processes, and protects personal data obtained through this website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Bulgarian Personal Data Protection Act, and applicable secondary legislation.

I. Data Controller

• Company name: Strive 4BG Ltd.

• UIC (Bulgarian company ID): 202430216

• Registered office and business address: Sofia, Ovcha Kupel II, bl. 43, entrance B, apt. 23, Bulgaria

• Legal representative: Petyo Miltonov Tankov

• Contact email: office@strive4.bg

II. Legal Grounds for Data Processing

We process your personal data on the following legal grounds:

1. Article 6(1)(a) GDPR – based on your explicit consent;

2. Article 6(1)(b) GDPR – when processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract;

3. Article 6(1)(c) GDPR – for compliance with a legal obligation;

4. Article 6(1)(f) GDPR – based on our legitimate interests, where such interests are not overridden by your rights and freedoms.

III. Categories of Personal Data Collected

We may collect and process the following categories of personal data:

• Full name

• Email address

• Phone number

• IP address

• Your preferences relating to real estate inquiries

• Data collected via cookies and other tracking technologies

IV. Purposes of Processing

Your personal data will be processed for the following purposes:

1. Handling inquiries related to real estate properties;

2. Sending offers and scheduling property viewings;

3. Maintaining communication and responding to your requests;

4. Providing newsletters and promotional content, subject to your prior consent;

5. Improving the website’s functionality and customizing content via data analytics (e.g., cookies, logs).

V. Categories of Data Recipients

We may share your personal data with:

• Internal staff of Strive 4BG Ltd.;

• External service providers (e.g., IT support, hosting companies, legal and accounting consultants), under a data processing agreement pursuant to Article 28 GDPR;

• Competent public authorities, only when required by law (e.g., under court order or statutory obligations).

VI. Transfers of Personal Data Outside the EU/EEA

We do not transfer your personal data outside the European Union (EU) or European Economic Area (EEA). Should such a transfer become necessary, it will be carried out in compliance with Articles 46–49 GDPR, ensuring appropriate safeguards, such as Standard Contractual Clauses or a recognized adequacy decision by the European Commission.

VII. Data Retention Period

We retain your personal data:

• For the time necessary to fulfill the purpose of processing, but no longer than 5 years from the date of the last communication, unless a longer period is required by law;

• For accounting and tax-related data – 10 years, in accordance with the Bulgarian Accounting Act.

After the expiration of the retention period, the data is securely erased or anonymized.

VIII. Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as required by Article 32 GDPR, including but not limited to:

• SSL encryption of data transmissions;

• Restricted access to data by authorized personnel only;

• Physical storage of paper documents in locked cabinets;

• Regular review and updating of our data protection measures.

IX. Your Rights as a Data Subject

Under GDPR, you have the following rights:

1. Right of access – to obtain confirmation whether we process your data and to receive a copy of the data;

2. Right to rectification – to correct inaccurate or incomplete personal data;

3. Right to erasure ("right to be forgotten") – under specific conditions, such as unlawful processing or withdrawal of consent;

4. Right to restriction of processing – where the accuracy of the data is contested or the processing is unlawful;

5. Right to object – to processing based on legitimate interest or for direct marketing purposes;

6. Right to data portability – to receive your data in a structured, commonly used and machine-readable format and transmit it to another controller;

7. Right to lodge a complaint – with the competent supervisory authority.

Supervisory authority in Bulgaria:
Commission for Personal Data Protection (CPDP)

• Website: www.cpdp.bg

• Address: Prof. Tsvetan Lazarov Blvd. 2, Sofia 1592, Bulgaria

• Email: kzld@cpdp.bg

X. Withdrawal of Consent

Where processing is based solely on your consent, you have the right to withdraw it at any time. Upon withdrawal, we will cease processing the data based on that consent. Please note that withdrawing consent may affect our ability to provide some services.

XI. Automated Decision-Making / Profiling

We do not perform automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

XII. Amendments to This Policy

We reserve the right to update this Privacy Policy in accordance with legal or operational changes. Any amendments will be published on this website in a timely manner.