Privacy Policy

1. General Provisions

This Privacy Policy governs the manner in which PENTA CYBER SERVICES OOD (the “Company”, “we”, “us”) processes the personal data of visitors to and users of the website.

This Policy has been prepared in accordance with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act, and the applicable European and Bulgarian legislation.

By using this website, you accept the terms of this Policy.

2. Controller of Personal Data

PENTA CYBER SERVICES OOD
UIC (EIK): 207946973
Registered office and address of management:
Burgas, Meden Rudnik residential district, bl. 69, entr. 2, fl. 6, apt. 40
E-mail: info@pentacyberservices.com

3. What Personal Data We Process

Depending on the manner in which you use the website, we may process:

name
company
position/job title
telephone
e-mail address
the content of messages sent
IP address
information about the browser used
operating system
date and time of the visit
technical logs necessary for the security of the website

We do not process special categories of personal data through the website, unless such data are provided voluntarily by you and their processing is necessary for a specific service.

4. For What Purposes We Use Personal Data

Personal data are processed solely for:

responding to enquiries received
providing requested information
preparing offers
communication with clients
performance of contractual relations
protection and security of the website
prevention of abuse
compliance with legal obligations
protection of the legitimate interests of the Company

5. Legal Basis for the Processing

Processing is carried out on the basis of:

Article 6(1)(b) GDPR — performance of a contract
Article 6(1)(c) GDPR — legal obligation
Article 6(1)(f) GDPR — legitimate interest
Article 6(1)(a) GDPR — consent, where such is required

6. Retention Period

Personal data are stored only for the period necessary to achieve the purposes for which they were collected, as well as in accordance with the applicable statutory retention periods.

Once the basis for processing lapses, the data are erased or anonymised.

7. Recipients of Personal Data

Where necessary, personal data may be provided to:

providers of IT services
providers of hosting services
accounting and audit firms
public authorities, where required by law
other persons only where a legal basis exists

We do not sell or provide personal data to third parties for marketing purposes.

8. Security

PENTA CYBER SERVICES OOD applies appropriate technical and organisational measures for the protection of personal data, including:

encrypted connection (HTTPS)
access control
secured information systems
backup
logging
protection against unauthorised access
periodic security monitoring

9. Your Rights

Every data subject has the right:

of access to their personal data
to rectification
to erasure (the “right to be forgotten”)
to restriction of processing
to object to processing
to data portability
to withdraw consent given, where the processing is based on consent

To exercise these rights, you may contact us at:
info@pentacyberservices.com

10. Complaints

If you consider that the processing of your personal data infringes the applicable legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection.

11. Cookies

The website uses technically necessary cookies which ensure its normal functioning.

Where analytical or other non-essential cookies are used, they will be activated only after your explicit consent.

12. Changes to This Policy

PENTA CYBER SERVICES OOD reserves the right to amend this Privacy Policy in the event of changes to the legislation, the services provided, or the manner of processing of personal data.

The current version will always be published on the website.

Date of last update: 1 July 2026

Translation notice. This document is an English translation of the Bulgarian-language original ("ПОЛИТИКА ЗА ПОВЕРИТЕЛНОСТ" на интернет сайта на "ПЕНТА САЙБЪР СЪРВИСИС" ООД, последна актуализация 01.07.2026 г.), provided for convenience only. In the event of any discrepancy between the two versions, the Bulgarian original shall prevail.