Privacy Policy

1. Controller

The controller of your personal data is:

Company name

Edelweiss Software Group

Registered seat

Bulgaria

Email

edelweisslabssupport@gmail.com

For any question about your personal data, contact us at edelweisslabssupport@gmail.com.

2. Data we process

• Contact form data: name, email address and the content of your message.
• Data you send us directly by email.
• Technical data every web server receives on a visit: IP address, browser and device type, date and time of the request.

This website uses no cookies, analytics, tracking or advertising tools. Your browser only stores a temporary technical value (sessionStorage) that lets animations continue when you switch language. It contains no personal data and is deleted when you close the tab.

3. Purposes and legal bases

• Replying to your enquiry and taking steps at your request before a possible contract — Art. 6(1)(b) GDPR.
• Protecting the website and form against spam, automated requests and abuse — legitimate interest, Art. 6(1)(f) GDPR.
• Complying with legal obligations where they arise — Art. 6(1)(c) GDPR.

We do not use your data for marketing, do not sell it and do not share it with third parties for their own purposes. We do not carry out automated decision-making, including profiling.

4. Abuse prevention

To limit the number of requests from a single source, we temporarily use the IP address and the email address submitted in the form. We store them only as irreversibly hashed values for no longer than 1 hour. When enabled, Cloudflare Turnstile analyses technical browser signals to tell people from automated programs.

5. Recipients and processors

We use providers that process data on our behalf, only on our instructions and under appropriate contractual safeguards:

• Vercel Inc. — website hosting and form processing;
• Resend — delivery of enquiries to our inbox;
• Google (Gmail) — mailbox where we receive some of the enquiries;
• Cloudflare, Inc. — protection of the form against automated requests (Turnstile), when enabled;
• Upstash — temporary storage of the hashed values used for rate limiting, when enabled.

Some of these providers process data outside the European Economic Area, including in the United States. Such transfers rely on a European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission.

We may disclose data to public authorities only where the law requires it.

6. Retention

• Enquiries and correspondence — as long as needed to reply and for any follow-up cooperation, but no longer than 2 years after the last contact, unless the law requires a longer period.
• Hashed rate-limiting values — up to 1 hour.
• Technical server logs — for a short period set by the hosting provider.

7. Your rights

You have the right:

• to access the data we process about you;
• to have inaccurate data corrected;
• to erasure (the “right to be forgotten”);
• to restriction of processing;
• to data portability;
• to object to processing based on legitimate interest.

To exercise your rights, email us at edelweisslabssupport@gmail.com. We will reply without undue delay and within one month at the latest. We may ask for information to confirm your identity.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority in your EU country of residence.

8. Is providing data mandatory?

No. Providing data is voluntary, but without a name, email and message we cannot reply to your enquiry.

9. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), restricted access to data, validation and sanitisation of submitted information and protection against automated requests. No system is completely secure, but we take reasonable steps to prevent unauthorised access.

10. Changes

We may update this policy when the way the website works or the applicable law changes. The current version is always on this page, with the date of the last change. See also our Terms and Conditions.