Privacy policy

1. Who we are

setupcompany.eu is operated by [Legal entity name] EOOD, a company registered in Bulgaria under unified identification code [UIC], with its registered address at [address], Gabrovo, Bulgaria. We are the data controller for the personal data described in this policy. Contact us at [email] for any privacy matter.

2. What we collect

We collect only what we need in order to respond to you and to deliver the services you engage us for.

3. Why we process it

To respond to enquiries and provide the roadmap discussed on a consultation call; to deliver the services you engage us for, including filings with Bulgarian authorities; to meet our own legal obligations, including anti-money-laundering identity checks; and to send you material you have specifically asked for, such as the Investment Brief or the newsletter.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

4. Legal bases

Depending on the processing, we rely on the performance of a contract with you, compliance with a legal obligation, our legitimate interests in operating and improving the service, or your consent — which you may withdraw at any time. Where consent is the basis, withdrawing it does not affect processing already carried out.

5. Who we share it with

To deliver our services we share what is necessary with the professionals engaged on your matter — Bulgarian law firms, accounting practices, notaries, sworn translators, banks, and where applicable immigration lawyers and real-estate agents. We also use service providers for email, hosting, scheduling and analytics, who process data on our instructions under written terms.

6. International transfers

Our clients are largely outside the European Economic Area, so correspondence and documents may be transferred to your country. Where we transfer data outside the EEA we rely on an adequacy decision or on standard contractual clauses with appropriate supplementary measures.

7. How long we keep it

Enquiries that do not become engagements are deleted after [period]. Engagement records are retained for the statutory period required by Bulgarian accounting and anti-money-laundering law, currently [period] from the end of the relationship. Newsletter subscriptions are kept until you unsubscribe.

8. Your rights

Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have data erased where we have no continuing basis to hold it, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent. Write to [email] and we will respond within one month.

9. Cookies

We use strictly necessary cookies to operate the site, and analytics cookies only where you have consented. The full inventory — name, purpose, duration and provider — is on the Cookie policy page, where you can also change your choices.

10. Complaints

If you are unhappy with how we have handled your data, please contact us first. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection, or with the supervisory authority in your own country of residence.

11. Changes to this policy

We update this policy when our practices or the law change. The date at the top of this page shows the current version. Material changes will be notified by email to anyone with an active engagement.