Privacy Policy
Introduction
This site provides details on how we handle personal data. Personal data refers to any information related to an identified or identifiable natural person, as defined in Art. 4(1) of Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016, concerning the protection of individuals about personal data processing and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR). This includes your name, email address, mailing address, or phone number.
Data Controller
The entity responsible for processing your personal data, referred to as the Controller under the GDPR, is Habitat Creative Ltd. (hereafter “Habitat”) located at 10 Stefan Stambolov, Sofia, Bulgaria.
Contact Information for the Data Protection Officer
Our Data Protection Officer, Mr. Georgi Daskalov, can be reached via email at [email protected] or by mail at the above-mentioned Habitat address, marked “Data Protection Officer”.
Purpose and Legal Basis for Processing Personal Data
Personal data refers to any information related to an identified or identifiable natural person (referred to as ‘data subject’). This includes identifiers such as name, ID number, location data, online identifier, or one or more physical, physiological, genetic, psychological, economic, cultural, or social characteristics. Below we outline the purposes and legal bases for processing your personal data.
General Website Use
Our website can generally be used without providing personal data. However, some technical data is produced simply by browsing the site. When users visit our website, we save certain data in log files, including IP address, visit start and end time, data volume transferred, referring website address, browser version, and language. This processing is based on our legitimate interest under Article 6(1)(f) of the GDPR, aimed at ensuring the highest website quality, identifying frequently visited pages, resolving website structure issues, and general site administration, including generating anonymous statistics. This data is not linked to any specific person visiting our site.
Website Hosting
The website is hosted by Hetzner Online GmbH.
Contact via Mail and Email
When contacting us by mail or email, unrelated to our services or any contract, we process the personal data contained in the correspondence to address and resolve the issues raised. The legal basis for this processing is our legitimate interest under Article 6(1)(f) of the GDPR, enabling us to conduct ongoing correspondence related to our business activities.
Telephone Contact
When contacting us by phone for non-contractual matters, we may process your personal data to address your concerns. The legal basis is our legitimate interest under Article 6(1)(f) of the GDPR, allowing us to maintain ongoing communication related to our business activities.
Electronic Forms Contact
To use our electronic contact forms, you must provide necessary personal data for us to contact you and provide feedback. If you do not provide the required data, the form cannot be submitted. Optional fields can be completed at your discretion. The legal basis for processing depends on the nature of your correspondence. For contract-related inquiries, the legal basis is Article 6(1)(b) of the GDPR. For other inquiries, it is our legitimate interest under Article 6(1)(f) of the GDPR. Voluntarily provided data is processed based on your consent under Article 6(1)(a) of the GDPR.
Publishing Customer Feedback
With your consent under Article 6(1)(a) of the GDPR, we may publish feedback received from customers. We retain this data as long as we are interested in publishing it or until you withdraw your consent. We may also publish feedback anonymously.
Social Media and Industry Websites
As part of our promotional activities, we use external social media and industry websites, including ,Facebook, LinkedIn, and Clutch.
Website Activity Analysis
We use Google Analytics provided by Google Ireland Ltd. to generate statistics and analyze website usage for optimization and functionality monitoring. Google Analytics collects information about your website usage, typically transferred to a Google server in the USA and stored there. Due to IP address masking, your IP address is truncated before transmission. The anonymized IP address within Google Analytics is generally not combined with other Google data. The data collected is aggregated and not personal data. The information includes operating system and browser details, sub-pages visited, time spent on the site, navigation between tabs, and referring site.
To use Google Analytics, we have implemented a special code on our website. You can disable the Google Analytics code from our site using the cookie management mechanism or block it by installing a browser extension provided by Google. Google Analytics and Google Analytics 360 are ISO 27001 certified. For more details on data processing within Google Analytics, refer to Google’s explanation.
Links to External Websites
Our site contains links to other websites not owned by us. We are not responsible for their privacy practices. We recommend reviewing their privacy policies when visiting other sites.
Data Processing Duration
We process personal data as long as the purpose and legal basis for processing exist. Processing periods vary:
• For data processed based on consent, processing continues until consent is withdrawn.
• For data processed based on legitimate interest, processing continues until the interest is fulfilled or an effective objection is raised.
• For contract-related processing, data is processed for the contract term.
• Processing duration may also be determined by applicable laws requiring data retention.
The processing period may extend if necessary for legal claims or defense. After the processing period, data is irreversibly deleted or anonymized.
Recipients of Personal Data
We disclose personal data to third-party service providers, including:
• Providers managing, operating, securing, and maintaining information systems and hardware
• Entities providing accounting, marketing, advisory, printing, consulting, legal, recruitment, or postal services
• Email service providers, cloud software providers (mailing, invoicing, CRM, accounting systems)
• Instant messaging providers, including Facebook Messenger
• Other subcontractors accessing personal data while providing services
We may also disclose data to tax authorities for compliance purposes and to authorized authorities or entities with a legal basis for their request.
Your Rights
Under the GDPR, you have the right to:
• Access your personal data, including obtaining a copy
• Request correction of your personal data
• Request deletion of your personal data (right to be forgotten)
• Restrict the processing of your personal data
• Data portability (if processed under contract or consent)
• Object to data processing (including direct marketing and profiling)
• Lodge a complaint with the supervisory authority for data protection
• Withdraw consent for data processing (affecting future processing)
To exercise these rights or request more information, please contact our Data Protection Officer.
Obligation to Provide Personal Data
Providing certain data is necessary for contract performance or compliance with legal obligations. In other cases, providing data is voluntary.
Data Security
We strive to ensure high data security. Any security incidents should be reported to our Data Protection Officer. We use technical and organizational measures to protect personal data from unauthorized access, alteration, loss, or destruction. Personal data is stored in secure databases with restricted access to authorized individuals.
Cookies and Similar Technologies
By using our site, you consent to the use of cookies, which are small files stored on your device by our web server. Cookies help us display our website correctly, ensure site security, improve site performance, and customize site functionality. Cookies can be session-based (deleted when the browser is closed) or persistent (stored until deleted).
You can block cookies in your browser settings. Blocking cookies may affect site functionality. For details on changing cookie settings in popular browsers, see the following:
• Firefox
• Internet Explorer
• Google Chrome
• MS Edge
• Opera
Amendments to the Privacy Policy
This policy is regularly reviewed and updated as necessary. The current version is effective as of 25 June 2024. We reserve the right to amend this Privacy Policy as required by law or due to changes in our website technology.