Privacy First

Privacy Policy

Last Updated: November 17, 2025

1. Data Controller

Company Name: NC Software Engineering (ЕН СИ Софтуер Инженеринг)

Company Registration No.: 204919138

Address: Ilinden Complex, bl. 48, ent.2, apt. 6, Sofia, Bulgaria

Email: office@ncsofteng.com

Phone: +359 877 217746

2. What Data We Process

2.1 Clients

Data Collected:

  • Name and surname
  • Email address and phone
  • Billing information (Tax ID, address)
  • Project information and communications

Legal Basis: Contractual obligation

Retention: Up to 6 years after contract termination or until dispute resolution

2.2 Website Visitors

Data Collected:

  • IP address (anonymized)
  • Browser type and device
  • Pages you visit
  • Site interactions (clicks, scrolling)

Tools: Google Analytics 4, Microsoft Clarity

Legal Basis: Your consent (via cookie banner)

Retention: Up to 2 years (Google Analytics) or until consent withdrawal

More information: Cookie Policy

2.3 Contact Inquiries

Data Collected:

  • Name, email, phone
  • Message/inquiry

Legal Basis: Contractual obligation (processing inquiry)

Retention: Up to 1 year from last communication

2.4 Marketing

Data Collected:

  • Email address

Legal Basis: Legitimate interest (or consent for newsletter)

Retention: Until objection or 3 years from last activity

How to unsubscribe: Every email contains an "Unsubscribe" link

3. How We Use Data

We use personal data for:

  • Service delivery - fulfilling development and maintenance contracts
  • Communication - responding to inquiries, technical support
  • Billing - issuing invoices, accounting
  • Site improvement - analysis via Google Analytics and Microsoft Clarity
  • Marketing - information about new services (only with your consent or opt-out option)

4. Data Sharing

We share data only with:

  • Google (Google Analytics) - web analytics
  • Microsoft (Microsoft Clarity) - behavioral analysis
  • Accountants - legal requirement
  • Banks - for payments

All recipients ensure GDPR-compliant data protection.

5. Your Rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict processing
  • Object to processing (especially for marketing)
  • Withdraw consent at any time
  • Receive data in portable format

6. Data Protection

We implement technical and organizational measures:

  • SSL encryption on website
  • Restricted access to personal data
  • Regular backups
  • Protected servers

7. Data Retention

CategoryPeriod
Client data6 years after contract
Accounting data11 years
Analytics cookies2 years
Marketing data3 years or until objection
Contact inquiries1 year

8. Right to Complaint

You can file a complaint with:

Bulgarian Commission for Personal Data Protection (CPDP)

Organization: Bulgarian Commission for Personal Data Protection (CPDP)

Address: Sofia, "Prof. Tsvetan Lazarov" Blvd. No. 2

Email: kzld@cpdp.bg

Website: www.cpdp.bg

9. Updates

We may update this policy. Changes take effect after publication on the site.

10. Contact

For questions about your personal data:

Email: office@ncsofteng.com

Phone: +359 877 217746

This policy complies with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.