PERSONAL DATA
Personal data
Controller: Симеон Петков Ценов, an individual, Vratsa, Bulgaria. Contact: office@cenovdigital.com.
What data and why
When you contact me through the form, by email, phone or Viber, I receive your name, email or phone number and what you write about your project. I use it only to reply, prepare a proposal and, if we agree, for the project itself.
Legal basis
I process the data because you send it to get a reply or a proposal, i.e. before and for entering into a contract (Art. 6(1)(b) GDPR). The anti-spam check on the form is my legitimate interest in protecting my inbox from automated messages (Art. 6(1)(f)).
How long I keep it
An enquiry that does not lead to a contract is kept for up to 12 months and then deleted. If we work together, I keep the correspondence for the project and support period, and contracts and payment documents for as long as the law requires.
Who else sees it
I do not sell or share your data for advertising. It only passes through the services the website and communication depend on: Web3Forms (delivers form messages), hCaptcha (anti-spam check), Google Analytics (visit statistics, only if you consent), Google (the office@cenovdigital.com inbox) and the website's hosting provider. Some of these providers may process data outside the EU; they describe their safeguards in their privacy policies.
Your rights
You can ask to see, correct or delete your data, or to restrict or object to its processing. Email office@cenovdigital.com and I will reply within 30 days. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg).
Anti-spam protection
The form loads hCaptcha from an external provider, which processes technical browser/network data to distinguish people from automated submissions. See the hCaptcha privacy policy. If the check cannot load, use email or phone.
hCaptcha privacy policyFor a browser-side submission limit, localStorage stores only attempt timestamps under tsenov-form-attempts-v1, without names, email addresses or enquiry text. Only timestamps from the last 15 minutes count. Expired entries are ignored and replaced on the next accepted attempt; the last stored record remains until replaced or browser data is cleared. This is a supplementary browser limit, not a server firewall.