1. Controller
The controller of your personal data is TSBG Hosting Ltd., trading as BG Data Center, registered office ul. "Racho Dimchev" 8, 1000 Sofia, Bulgaria. For data protection matters, write to noc@bgdatacenter.com.
2. Data We Process
- Account data: name, company name, e-mail, telephone, address, tax and VAT number.
- Order and billing data: services purchased, amounts, payment method, invoice records.
- Payment data: transaction identifier and outcome. Card numbers never reach our servers; card details are collected in fields hosted by the payment provider.
- Technical data: IP address, browser information, session records, panel and server access logs.
- Support data: tickets, correspondence and attachments.
3. Purposes and Legal Bases
- Providing the service, managing the account and giving support — performance of a contract (Art. 6(1)(b) GDPR).
- Invoicing, accounting and tax obligations — legal obligation (Art. 6(1)(c)).
- Infrastructure security, abuse prevention and fraud detection — legitimate interests (Art. 6(1)(f)).
- Marketing messages and non-essential cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.
4. Retention
- Invoices and accounting records: ten years from the end of the financial year, under the Bulgarian Accountancy Act.
- Account data: three years after the contract ends, for the limitation period.
- Access and security logs: twelve months.
- Support correspondence: twenty-four months.
- Processing based on consent: until consent is withdrawn.
5. Recipients
We do not sell your data. It is shared, only so far as the service requires, with: payment institutions (Stripe, PayPal), our e-mail delivery provider, our accountants, data centre and carrier operators, and public authorities entitled by law to request it. Each processor is engaged under a contract meeting Article 28 GDPR.
6. Transfers Outside the EEA
Data is processed within the European Union as a rule. Where a service such as a payment provider requires a transfer outside the EEA, it is made on the basis of a European Commission adequacy decision or the Standard Contractual Clauses.
7. Your Rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent. Requests may be sent to noc@bgdatacenter.com and are answered within one month.
8. Right to Complain
If you are not satisfied with our response you may complain to the supervisory authority: the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria — cpdp.bg.
9. Security
We apply TLS in transit, access control at rest, encrypted storage of payment and integration keys, separation of privileges in the panel, and regular backups. A personal data breach is notified to the supervisory authority within seventy-two hours.
10. Cookies
The cookies this site sets, and how consent is managed, are described in the separate Cookie Policy.
11. Changes
Changes to this policy are published on this page; material changes are notified to registered customers by e-mail.