Legal

Privacy Policy

Last updated: June 2025

1. Who We Are

Marktional Web is a trading name of Marktional, a web design and development service based in Bulgaria. We operate the website at web.marktional.com.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

We are the data controller for the personal data collected through this website.

2. What Personal Data We Collect

We collect the following categories of personal data:

  • Contact information - your name, email address, phone number, and business name, provided when you submit our contact form.
  • Message content - any information you choose to include in your enquiry message.

We do not collect any special categories of personal data (such as health information, ethnic origin, or political opinions), and we do not knowingly collect data from individuals under the age of 16.

3. How We Collect Your Data

  • Contact form - when you submit an enquiry through our website contact form, we collect the information you provide directly.
  • Cookies - our website uses cookies to remember your cookie preferences. We do not currently use analytics or other non-essential cookies. Please refer to our Cookie Policy for a full list of cookies in use.

4. Why We Collect Your Data and Our Legal Basis

Under the GDPR, we must have a lawful basis for processing your personal data. We process your data for the following purposes:

  • To respond to your enquiries - when you contact us via our form, we use your name, email, and message details to respond. Our lawful basis is legitimate interests (Article 6(1)(f) GDPR) - we have a legitimate business interest in communicating with prospective clients.
  • Analytics cookies - we do not currently use analytics or other non-essential cookies. If we introduce them in future, we will rely on your consent (Article 6(1)(a) GDPR) obtained through our cookie consent mechanism, and you will be able to withdraw consent at any time.

5. How Long We Keep Your Data

  • Enquiry data (contact form submissions) - retained for up to 2 years from the date of your enquiry, after which it is securely deleted. If we enter into a client relationship, we may retain relevant correspondence for the duration of that relationship and for a reasonable period afterwards for legitimate business purposes.
  • Cookie preference data - retained for 12 months, after which you will be asked to confirm your preferences again.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data with third parties for marketing purposes. We share data only where necessary with the following service providers:

  • Vercel Inc. (website hosting) - our website is hosted on Vercel's infrastructure. Vercel may process data such as IP addresses in server logs as part of providing hosting services. Vercel provides appropriate safeguards for international data transfers.

We may also disclose personal data where required by law, by court order, or to comply with regulatory obligations.

7. Your Rights Under GDPR

Under the GDPR and Bulgarian data protection law, you have the following rights in relation to your personal data:

  • Right of access - you have the right to request a copy of the personal data we hold about you (a Subject Access Request).
  • Right to rectification - you have the right to ask us to correct personal data that is inaccurate or incomplete.
  • Right to erasure - you have the right to request that we delete your personal data where there is no longer a legitimate reason for us to hold it.
  • Right to restrict processing - you have the right to ask us to pause the processing of your personal data in certain circumstances.
  • Right to data portability - where processing is based on consent or contract, you have the right to receive your data in a structured, commonly used, machine-readable format.
  • Right to object - you have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to withdraw consent - where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

8. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us by email at web@marktional.com. Please include your name and enough information to allow us to identify your data.

We will respond to all legitimate requests within one calendar month. If your request is complex or we receive a high volume of requests, we may extend this by a further two months, and we will notify you if this is the case.

We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on the request.

9. Right to Complain to the CPDP

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), Bulgaria's supervisory authority for data protection.

  • Website: cpdp.bg
  • Phone: +359 2 915 3580

We would appreciate the opportunity to address your concerns before you contact the CPDP, so please contact us first at web@marktional.com.

10. Cookies

Our website uses cookies to enable certain functionality. We do not currently use analytics cookies. For full details of the cookies we use, their purpose, duration, and how to manage them, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acknowledgement of the updated policy.

12. Data Controller Details

The data controller responsible for your personal data is:

For any data protection enquiries, please contact us at the email address above.

13. Legal Bases for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

  • Contractual necessity (Article 6(1)(b)): Processing required to fulfil a contract with you or take pre-contractual steps at your request - for example, responding to enquiries and delivering services.
  • Legitimate interests (Article 6(1)(f)): Processing for our legitimate business interests, such as improving our website and services, where these interests are not overridden by your rights and freedoms.
  • Consent (Article 6(1)(a)): Where we seek your consent - for example, for non-essential cookies if we introduce them in future. You may withdraw consent at any time via our Cookie Settings.
  • Legal obligation (Article 6(1)(c)): Where processing is required to comply with a legal obligation, such as responding to lawful requests from public authorities.

14. International Data Transfers

Our website is hosted on Vercel, whose infrastructure is operated from servers in the United States and other countries. When you visit our website, your data may be transferred to and processed in countries outside the EU/EEA.

Such transfers are covered by the European Commission's Standard Contractual Clauses and other safeguards permitted under the GDPR where applicable. Vercel maintains compliance with GDPR data protection standards. For more information, see Vercel's Privacy Policy.

By using this website, you acknowledge that your data may be processed in these locations under appropriate safeguards.

15. Data Protection Compliance

We comply with the GDPR and the Bulgarian Personal Data Protection Act (Закон за защита на личните данни), under the oversight of the Commission for Personal Data Protection (CPDP).

If you have a concern about how we handle your data, you have the right to complain to the CPDP at cpdp.bg or by calling +359 2 915 3580.

16. Electronic Marketing

The EU ePrivacy Directive, as implemented under Bulgarian law (Electronic Communications Act), sits alongside the GDPR and gives people specific privacy rights in relation to electronic communications.

We do not send marketing emails, text messages, or automated calls without your prior consent. If you contact us via our enquiry form and indicate an interest in our services, we may follow up on your specific enquiry - this does not constitute unsolicited marketing.

You can withdraw any marketing consent at any time by contacting us at web@marktional.com.

17. Cookies Under the ePrivacy Directive

The ePrivacy Directive requires that we obtain your informed consent before storing or accessing non-essential cookies on your device. We comply with this requirement through our cookie consent system, which:

  • Presents you with a clear choice before any non-essential cookies are set.
  • Records your consent choice in your browser's localStorage.
  • Does not load any analytics or other non-essential cookies until you have given consent (we do not currently use any).
  • Allows you to change or withdraw your consent at any time via the "Manage Preferences" option on the cookie banner.

Strictly necessary cookies (which are essential for the website to function) do not require consent under the ePrivacy Directive and are set regardless of your preference. For full details of every cookie we use, see our Cookie Policy.