This Privacy Policy explains how ItPilot collects, uses and protects personal information when you visit our website or contact us through the available contact form.

Last updated: 4 August 2026

1. Who We Are

This website is operated under the name ItPilot by Tsvetozar Denchev, an individual based in Varna, Bulgaria.

For the purposes of the General Data Protection Regulation (GDPR), Tsvetozar Denchev is the data controller responsible for the personal information processed through this website.

If you have any questions concerning this Privacy Policy or the processing of your personal data, you can contact us at:

Email: contact.itpilot@gmail.com
Location: Varna, Bulgaria

1. Personal Information We Collect

We may collect personal information that you voluntarily provide when you contact us through the website’s contact form or communicate with us by email.

Depending on the information you choose to provide, this may include:

• Your name
• Your email address
• Your telephone number, if provided
• The company or organisation you represent, if provided
• The service you are interested in
• The subject and content of your enquiry
• Any other information included in your message

Please do not submit sensitive personal information through the contact form unless it is strictly necessary for your enquiry.

The website may also automatically collect limited technical information, such as your IP address, browser type, device type, date and time of access, requested pages, referring website and server log information. This information may be processed for website operation, security, troubleshooting and protection against abuse.

1. How We Use Your Information

We may use the personal information you provide in order to:

• Receive, review and respond to your enquiry
• Communicate with you about the services in which you have expressed an interest
• Understand your requirements and suggest a suitable IT solution
• Prepare a proposal or take steps requested by you before entering into an agreement
• Provide requested services and maintain business communication
• Protect the website against spam, misuse, fraud and security threats
• Diagnose technical problems and improve the website
• Comply with applicable legal obligations
• Establish, exercise or defend legal claims

We do not use information submitted through the contact form for unrelated marketing purposes without an appropriate legal basis.

1. Legal Basis for Processing

We process personal data only when a valid legal basis applies. Depending on the circumstances, the legal basis may be:

• Taking steps at your request before entering into a contract – when you ask for information, a consultation, a proposal or a service
• Performance of a contract – when processing is necessary to provide an agreed service
• Legitimate interests – when necessary to respond to business enquiries, maintain the security and proper operation of the website, prevent abuse or manage our communications
• Consent – when you have freely given consent, including for optional cookies or similar technologies where consent is required
• Legal obligation – when processing is necessary to comply with applicable law

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

1. Contact Form and Email Communication

When you submit the contact form, the information you enter is sent to the website administrator so that your enquiry can be reviewed and answered.

Your message may be transmitted and stored through the website’s hosting infrastructure and the email services used to receive and manage communications.

Providing personal information through the contact form is voluntary. However, we may be unable to respond to your enquiry if you do not provide sufficient contact information.

Submitting an enquiry does not automatically create a contractual relationship between you and ItPilot.

1. Cookies and Similar Technologies

This website uses cookies and similar technologies that may be necessary for its operation, security and functionality.

Where required by law, optional cookies and external services will not be activated before you provide consent through the cookie banner. You may accept, reject or change your cookie preferences at any time through the available cookie settings.

More detailed information about the cookies and services used on this website, their purposes and duration is available in our Cookie Policy (EU).

1. Sharing of Personal Data

We do not sell or rent your personal information.

Personal data may be shared only when necessary with trusted service providers that support the operation of the website and our communication services. These may include:

• Website hosting and infrastructure providers
• Email and communication service providers
• Website maintenance, security or technical support providers
• Professional advisers, where reasonably necessary
• Public authorities, courts or regulatory bodies, where disclosure is required by law

These recipients may process personal data only to the extent necessary to perform their services or meet applicable legal requirements.

1. International Data Transfers

Some technology or communication providers may process data outside Bulgaria or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will rely on an appropriate legal safeguard where required, such as an adequacy decision, Standard Contractual Clauses approved by the European Commission or another lawful transfer mechanism.

1. Data Retention

Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected.

General enquiries submitted through the contact form or by email will normally be retained for up to 12 months after the last relevant communication, unless:

• A longer period is necessary for an ongoing business relationship
• The information is required for the performance of a contract
• A legal obligation requires longer retention
• The information is necessary for the establishment, exercise or defence of legal claims
• You request deletion and no lawful reason requires continued retention

Technical server logs may be kept for a shorter period determined by the hosting and security configuration of the website.

When personal data is no longer required, it will be deleted, anonymised or securely disposed of where reasonably possible.

1. Data Security

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or misuse.

However, no website, email system or method of transmission over the internet can be guaranteed to be completely secure. You should therefore avoid sending confidential, financial or highly sensitive information through the general contact form.

1. Your Rights Under the GDPR

Subject to the conditions and limitations provided by applicable law, you may have the right to:

• Request information about how your personal data is processed
• Request access to the personal data held about you
• Request correction of inaccurate or incomplete personal data
• Request deletion of your personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Withdraw your consent at any time where processing is based on consent
• Request your personal data in a structured, commonly used and machine-readable format, where the right to data portability applies
• Lodge a complaint with a competent data protection supervisory authority

To exercise any of these rights, contact us at contact.itpilot@gmail.com. We may request reasonable information to verify your identity before responding.

1. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Bulgaria, the supervisory authority is:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Website: https://cpdp.bg

You may also contact the competent data protection authority in the EU or EEA country where you live, work or believe that an infringement has occurred.

1. Automated Decision-Making

We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

1. Third-Party Links

The website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, security or content of external websites.

We encourage you to review the privacy policy of each external website before submitting personal information.

1. Children’s Privacy

This website and its services are intended for business and professional enquiries and are not specifically directed at children.

We do not knowingly collect personal information from children through the website. If you believe that a child has submitted personal information, please contact us so that we can review and, where appropriate, delete it.

1. Changes to This Privacy Policy

We may update this Privacy Policy when the website, its services, the technologies it uses or applicable legal requirements change.

The current version will always be published on this page, and the “Last updated” date at the top will indicate when the policy was most recently revised.

1. Contact Us

For questions about this Privacy Policy, the processing of your personal data or the exercise of your GDPR rights, please contact:

Цветозар Денчев
ItPilot
Varna, Bulgaria
Email: contact.itpilot@gmail.com