PERSONAL DATA PROTECTION POLICY

General provisions

This Personal Data Protection Policy governs the manner in which:

ONITEL EOOD
UIC: 115604356
Address: 15 Rayko Daskalov Street, Plovdiv, Bulgaria
Email: office@emt.bg
Telephone: +359 32 211 074

hereinafter referred to as the “Controller”, processes, stores and protects the personal data of the users of the website www.emt.bg

The Policy has been drawn up in accordance with:

Regulation (EU) 2016/679 (GDPR);
the Personal Data Protection Act;
applicable Bulgarian and European legislation.
What personal data we collect

The Controller may collect the following categories of data:

2.1. Identification data

first name and surname;
company;
address;
email address;
telephone number.

2.2. Data relating to accounting services

financial and accounting documents;
employee data;
tax and social security data;
bank details;
information necessary for the performance of the services.

2.3. Technical data

IP address;
browser and device;
cookies;
logs and information on the use of the website.
Purposes of processing

Personal data is processed for the following purposes:

provision of accounting services;
communication with clients;
preparation of quotations and contracts;
issuing of invoices and accounting documents;
compliance with statutory obligations;
improvement of the services and of website security;
marketing communication, subject to express consent.
Legal basis for processing

The Controller processes personal data on the following grounds:

performance of a contract;
legal obligation;
legitimate interest;
express consent of the data subject.
Retention period

5.1. Personal data is retained for as long as necessary to fulfil the purposes for which it was collected.

5.2. Accounting and tax documents are retained in accordance with the requirements of Bulgarian legislation.

5.3. Upon expiry of the statutory retention periods, the data is deleted or anonymised.

Disclosure of data to third parties

The Controller may disclose personal data to:

state authorities and institutions, where there is a legal basis;
banks and payment operators;
hosting and IT providers;
software and cloud service providers;
couriers or subcontractors, where necessary.

In the case of card payments, data is processed through Stripe, and the Controller has no access to bank card details.

Protection of personal data

The Controller applies appropriate technical and organisational measures to protect personal data against:

unauthorised access;
loss;
misuse;
destruction;
unlawful disclosure.
Users’ rights

Every user has the right:

to access their personal data;
to rectification of inaccurate data;
to erasure (the “right to be forgotten”);
to restriction of processing;
to object to processing;
to data portability;
to withdraw their consent at any time.

Users may exercise their rights by contacting:
[Contact email]

Cookies

The website uses cookies for:

normal functioning;
traffic analysis;
improving the user experience;
marketing purposes.

Users may manage or disable cookies through their browser settings.

Reports and complaints

Where a user suspects that their rights in relation to personal data have been infringed, they have the right to lodge a complaint with:

The Commission for Personal Data Protection

or via its official website:

The Commission for Personal Data Protection

Amendments to the Policy

The Controller is entitled to update this Policy at any time. The current version is published on the website.

Contact

Company: Onitel EOOD
Email: office@emt.bg
Telephone: +32 211074
Address: 15 Rayko Daskalov Street, Floor 3, Plovdiv, Bulgaria

Last updated

Last updated: 30 June 2026