Privacy Policy
Last updated: January 2026
1. Data Controller
The data controller responsible for processing your personal data is:
This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and other applicable data protection laws.
2. Data We Collect
We collect personal data in the following ways:
Information You Provide
- Contact Form: Name, email address, and message content when you submit an inquiry
- Consultation Requests: Name, email, and project details when requesting a consultation
Information Collected Automatically
- Analytics Data: Anonymous usage data including pages visited, time on site, and referral source (only with your consent)
- Technical Data: Browser type, device type, and general location (country level)
- Cookie Data: Cookie consent preferences stored locally
3. How We Use Your Data
| Data Category | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Contact form data | Respond to inquiries and provide quotes | Consent (Art. 6(1)(a) GDPR) | 2 years after last contact |
| Analytics data | Improve website and understand usage | Consent (Art. 6(1)(a) GDPR) | 26 months |
| Marketing tracking | Measure advertising effectiveness | Consent (Art. 6(1)(a) GDPR) | Until consent withdrawn |
| Cookie preferences | Remember your privacy choices | Legitimate interest (Art. 6(1)(f) GDPR) | 1 year |
4. Data Recipients & Third Parties
We share your data with the following categories of recipients:
| Service Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Telegram Bot API | Contact form message delivery | Various (encrypted) | End-to-end encryption |
| Umami Analytics | Privacy-focused website analytics | Self-hosted (EU) | No personal data collected |
| Meta Platforms (Facebook) | Advertising measurement (with consent) | USA | EU-US Data Privacy Framework, SCCs |
| Vercel | Website hosting | Global (Edge network) | DPA, SCCs |
We do not sell your personal data. Data is only shared with third parties as necessary to provide our services or when you have given explicit consent.
5. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure adequate protection through:
- EU-US Data Privacy Framework: For US-based providers certified under this framework
- Standard Contractual Clauses (SCCs): EU-approved contractual safeguards
- Adequacy Decisions: Transfers to countries deemed adequate by the European Commission
You can request a copy of the safeguards we use by contacting us at info@alexwebs.com.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. We categorize cookies into three types:
- Essential Cookies: Required for the website to function (always active)
- Analytics Cookies: Help us understand site usage (requires consent)
- Marketing Cookies: Used for advertising measurement (requires explicit consent)
Important: Marketing tracking (Meta Pixel) is only activated after you give explicit consent. No tracking scripts are loaded before consent is obtained.
For detailed information about specific cookies we use, please see our Cookie Policy.
You can manage your cookie preferences at any time by clicking the "Manage Cookies" link in our website footer.
7. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights:
- Right of Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data
- Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing (Art. 18): Limit how we use your data
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interests
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting lawfulness of prior processing
How to Exercise Your Rights
To exercise any of these rights:
- Send an email to info@alexwebs.com with your request
- Include sufficient information to verify your identity
- Specify which right(s) you wish to exercise
- We will respond within 30 days of receiving your request
There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee for manifestly unfounded or excessive requests.
8. Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In Bulgaria, this is:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
Sofia 1592, Bulgaria
Email: kzld@cpdp.bg
Website: www.cpdp.bg
You may also contact the supervisory authority in your country of residence if you are located in another EU member state.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption for all data in transit
- Secure hosting with reputable providers
- Limited access to personal data on a need-to-know basis
- Regular security updates and monitoring
While we strive to protect your data, no method of transmission over the Internet is 100% secure. If we become aware of a security breach affecting your personal data, we will notify you and the relevant authorities as required by law.
10. Children's Privacy
Our website and services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at info@alexwebs.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:
- We will update the "Last updated" date at the top of this page
- For material changes, we may notify you via email or a prominent notice on our website
- We will request new consent where required by law
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- Email: info@alexwebs.com
- Contact Form: alexwebs.com/#contact
We aim to respond to all privacy-related inquiries within 30 days.