Personal Data Protection Policy (Privacy Policy)

of Nido Consulting EOOD
Last updated: 22.04.2026

I. Introduction

This Policy governs the manner in which Nido Consulting EOOD, UIC 203687224, with registered office and management address: Sofia (1407), Lozenets District, Lozenets residential area, 19 Belomorski Prohod St., fl. 1, ap. 3, represented by Yordan Abadzhiev (the “Controller”), collects, uses, stores, and protects the personal data of individuals, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.

By using the website www.nido.bg, the user confirms that they are familiar with this Policy.
When consent is required (e.g., for marketing or cookies), it is provided explicitly through the relevant mechanisms on the site.

II. Controller Contact Information

  • Name: Nido Consulting EOOD
  • UIC: 203687224
  • Address: Sofia, Lozenets District, 19 Belomorski Prohod St., fl. 1, ap. 3
  • Representative: Yordan Abadzhiev
  • Email: nido@nido.bg
  • Phone: 02/421 96 46

III. Categories of Data Subjects and Personal Data

We process personal data for:

  • Website visitors;
  • Persons who have sent an inquiry via a contact form;
  • Persons who have subscribed to an email newsletter;
  • Business partners and contractors.

Possible data categories include:

  • Name
  • Email address
  • Phone
  • Inquiry content
  • IP address
  • Site behavior data (via Google Analytics and Meta Pixel)

IV. Purposes and Legal Grounds for Processing

Purpose Data Grounds Period
Response to inquiry Name, email, phone Pre-contractual relations (Art. 6(1)(b)) Up to 12 months
Customer communication Contact details Legitimate interest (Art. 6(1)(f)) Up to 2 years
Newsletter Email Consent (Art. 6(1)(a)) Until unsubscribed
Web analysis IP, behavior Legitimate interest (Art. 6(1)(f)) Up to 14 months
Marketing Email, behavior Consent (Art. 6(1)(a)) Until withdrawn

V. Consent

When processing is based on consent:

  • It is provided explicitly (via a checkbox or banner);
  • It can be withdrawn at any time;
  • Withdrawal is as easy as giving it.

Withdrawal can be performed via:

  • the newsletter unsubscribe link;
  • cookie settings;
  • email to the controller.

VI. Processing of Children’s Data

The site is not intended for persons under 14 years of age.
We do not intentionally collect data from children. If identified, it is deleted immediately.

VII. Automated Decision-Making

The Controller does not apply automated decision-making or profiling under Art. 22 GDPR.

VIII. Recipients and Processors

Data may be provided to:

  • Hosting providers and IT support
  • Marketing agencies
  • Google LLC (Analytics, Ads)
  • Meta Platforms Inc. (Facebook, Instagram, Pixel)

Recipients can be both personal data processors and independent controllers, where applicable.

Contracts have been concluded with all processors in accordance with Art. 28 GDPR.

IX. Cookies and Analysis

The site uses:

  • Google Analytics
  • Meta Pixel

for analysis and marketing.

Their use is controlled via a consent banner.
Details are available in the Cookie Policy.

The site does not use device fingerprinting or hidden tracking technologies.

X. Data Security

We apply measures such as:

  • SSL encryption
  • Restricted access
  • Passwords and system protection
  • Security log files (IP, time, browser)

XI. Transfer Outside the EU

Transfer to the USA via Google and Meta is possible.
The following are applied:

  • Standard Contractual Clauses (SCC)
  • Additional technical measures

XII. Rights of Data Subjects

You have the right to:

  • access your data
  • rectify data
  • request erasure
  • restrict processing
  • object to processing
  • object to direct marketing (unconditionally)
  • receive your data (portability)
  • file a complaint with the CPDP – www.cpdp.bg

Contact: nido@nido.bg

XIII. Security Breaches

In case of a breach:

  • we notify the CPDP within 72 hours
  • we notify the affected persons in case of high risk

XIV. Retention Periods

  • Inquiries: up to 12 months
  • Marketing: until withdrawal
  • Analytical data: up to 14 months

Data is deleted after the expiry of the period.

XV. Changes

The Policy may be updated.
The current version is always on the site.

XVI. Related Documents

This policy is related to:

  • General Terms and Conditions
  • Cookie Policy

Approved by the Manager of Nido Consulting EOOD

Effective date: [date]