Privacy Policy

1. General Provisions

This Privacy Policy governs the manner in which PENTA CYBER SERVICES OOD (the “Company”, “we”, “us”) processes the personal data of visitors to and users of the website.

This Policy has been prepared in accordance with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act, and the applicable European and Bulgarian legislation.

By using this website, you accept the terms of this Policy.

2. Controller of Personal Data

PENTA CYBER SERVICES OOD
UIC (EIK): 207946973
Registered office and address of management:
Burgas, Meden Rudnik residential district, bl. 69, entr. 2, fl. 6, apt. 40
E-mail: info@pentacyberservices.com

3. What Personal Data We Process

Depending on the manner in which you use the website, we may process:

• name
• company
• position/job title
• telephone
• e-mail address
• the content of messages sent
• IP address
• information about the browser used
• operating system
• date and time of the visit
• technical logs necessary for the security of the website

We do not process special categories of personal data through the website, unless such data are provided voluntarily by you and their processing is necessary for a specific service.

4. For What Purposes We Use Personal Data

Personal data are processed solely for:

• responding to enquiries received
• providing requested information
• preparing offers
• communication with clients
• performance of contractual relations
• protection and security of the website
• prevention of abuse
• compliance with legal obligations
• protection of the legitimate interests of the Company

5. Legal Basis for the Processing

Processing is carried out on the basis of:

• Article 6(1)(b) GDPR — performance of a contract
• Article 6(1)(c) GDPR — legal obligation
• Article 6(1)(f) GDPR — legitimate interest
• Article 6(1)(a) GDPR — consent, where such is required

6. Retention Period

Personal data are stored only for the period necessary to achieve the purposes for which they were collected, as well as in accordance with the applicable statutory retention periods.

Once the basis for processing lapses, the data are erased or anonymised.

7. Recipients of Personal Data

Where necessary, personal data may be provided to:

• providers of IT services
• providers of hosting services
• accounting and audit firms
• public authorities, where required by law
• other persons only where a legal basis exists

We do not sell or provide personal data to third parties for marketing purposes.

8. Security

PENTA CYBER SERVICES OOD applies appropriate technical and organisational measures for the protection of personal data, including:

• encrypted connection (HTTPS)
• access control
• secured information systems
• backup
• logging
• protection against unauthorised access
• periodic security monitoring

9. Your Rights

Every data subject has the right:

• of access to their personal data
• to rectification
• to erasure (the “right to be forgotten”)
• to restriction of processing
• to object to processing
• to data portability
• to withdraw consent given, where the processing is based on consent

To exercise these rights, you may contact us at:
info@pentacyberservices.com

10. Complaints

If you consider that the processing of your personal data infringes the applicable legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection.

11. Cookies

The website uses technically necessary cookies which ensure its normal functioning.

Where analytical or other non-essential cookies are used, they will be activated only after your explicit consent.

12. Changes to This Policy

PENTA CYBER SERVICES OOD reserves the right to amend this Privacy Policy in the event of changes to the legislation, the services provided, or the manner of processing of personal data.

The current version will always be published on the website.

Date of last update: 1 July 2026

Translation notice. This document is an English translation of the Bulgarian-language original ("ПОЛИТИКА ЗА ПОВЕРИТЕЛНОСТ" на интернет сайта на "ПЕНТА САЙБЪР СЪРВИСИС" ООД, последна актуализация 01.07.2026 г.), provided for convenience only. In the event of any discrepancy between the two versions, the Bulgarian original shall prevail.