Privacy
1. Controller
The controller for the processing of personal data in connection with this website is: RE CALLS EOOD, ul. Petar Enchev 15, floor 2, apartment 2, 9000 Varna, Bulgaria
Registered in the Commercial Register of the Republic of Bulgaria, EIK 207045434, VAT No. BG207045434.
Represented by its Manager, Reinhold Ernst. E-mail info@re-calls.de.
For rapid and direct contact you may use the e-mail address given above or the contact form on this website; enquiries are answered promptly.
No data protection officer has been appointed; the conditions of Art. 37 GDPR are not met. Data protection enquiries are answered personally by the Manager at the address above.
2. No cookies, no storage on your device
This website sets no cookies - neither its own nor those of third parties, neither session cookies nor strictly necessary ones. Nor does it use any comparable technique for storing information on your device or gaining access to information already stored there: no localStorage, no sessionStorage, no IndexedDB, no fingerprinting.
In particular, the site contains no tracking or advertising pixels, no social media plugins, no embedded third-party content such as videos or maps, no externally loaded fonts, no content delivery network, no captcha service, no booking or chat tools, and no analytics tool that works with cookies, scripts or storage on your device.
No consent banner is therefore displayed: there is nothing to consent to (§ 25(2) TDDDG; Art. 4b of the Bulgarian E-Commerce Act (ZET)).
This statement concerns cookies and storage on your device only. Personal data are nonetheless processed, to the extent described in the following sections. The access statistics compiled by the hosting provider from the server log files are described in section 4.
3. Visiting the website and server log files
When you open the website, your browser transmits technically necessary data to the server on which the site is stored. These are recorded in server log files: IP address, date and time of access, the address requested, the transfer status, the volume of data transferred, and browser and operating system details.
The purpose is to deliver the website, ensure its technical functioning and detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and uninterrupted operation of the site.
We do not ourselves analyse these log files, do not export them and do not combine them with other data. We do not attribute them to you as an individual. The hosting provider does, however, compile aggregated access statistics from them; see section 4.
Log files concerning visitors to the website are stored by the hosting provider for a maximum of seven days and are then deleted.
4. Server-side access statistics
The hosting provider compiles statistics on the use of the website from the server log files. What is shown are aggregated figures: the number of page views and visits, the addresses requested, the referring page, and the operating system and browser used.
The analysis takes place entirely on the provider’s server. It sets no cookies, loads no script into your browser and stores nothing on your device; it draws solely on the records that arise in any event when the page is requested. No consent under § 25 TDDDG is required for this - that provision presupposes access to your terminal equipment, which does not occur here.
The purpose is to establish whether and to what extent the website is used. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in having basic knowledge of the reach of our own website. No user profiles are created, no recognition across several visits takes place, and no data are passed to third parties for advertising purposes.
The function forms part of the hosting package and is provided by the hosting provider.
The data processing agreement with the hosting provider provides for a maximum retention period of seven days for log files concerning visitors to the website, and of twelve months for other log data, including the aggregated statistical values derived from them. The values shown are aggregated and do not permit any conclusion as to an individual visitor.
You may object to this processing under Art. 21 GDPR on grounds relating to your particular situation. Please write to the address given in section 1.
5. Contact form
You may send us an enquiry using the form on this website. We collect the details you enter: company, name and e-mail address - these three are mandatory - and, optionally, your function and telephone number, the subject you select and your free text.
The message is forwarded directly to a mailbox of the controller. It is not stored in a database and not written to the web server; the website operates neither a database nor a content management system.
The purpose is to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry serves the initiation of a contractual relationship, and otherwise Art. 6(1)(f) GDPR, our legitimate interest being the handling of business enquiries.
The tick box in the form records your having read this privacy policy. It is not consent within the meaning of Art. 6(1)(a) GDPR and does not constitute a separate legal basis.
Enquiries that do not lead to a contractual relationship are deleted six weeks after the correspondence ends. Where an enquiry leads to a contract, retention follows the contractual and statutory periods.
6. Recipients and processors
Personal data are not sold and not passed to third parties for advertising purposes. The following recipients have access, in each case only to the extent technically required:
- STRATO GmbH, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany - hosting of the website and operation of the e-mail services, on the basis of a data processing agreement under Art. 28 GDPR;
- „BRAND DESIGN" EOOD, EIK 207641555, Varna, Bulgaria - creation of the website. Following handover of the website to the controller there is no access to visitor data.
7. Transfers to third countries
The controller itself transfers no personal data to countries outside the European Union or the European Economic Area. The servers on which the website is held are located within the European Union.
For certain technical services the hosting provider engages service providers established outside the European Union. For the hosting used here this concerns the scanning of the webspace for malicious software, which is performed by a service provider in the United States. That transfer is safeguarded by the standard contractual clauses adopted by the European Commission under Art. 46(2)(c) GDPR. The current list of sub-processors is available from the hosting provider.
8. Your rights
You have the right to obtain access to the personal data concerning you (Art. 15 GDPR), to request their rectification (Art. 16), erasure (Art. 17) or the restriction of processing (Art. 18), and to receive your data in a structured, commonly used and machine-readable format (Art. 20).
Where processing is based on Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object at any time on grounds relating to your particular situation.
An informal message to the address given under section 1 is sufficient. We answer within one month of receipt; where a request is particularly complex this period may be extended, and we will inform you of that within the first month.
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. As the controller is established in Bulgaria, the competent authority is:
Commission for Personal Data Protection (Комисия за защита на личните данни) 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
E-mail: kzld@cpdp.bg · Website: www.cpdp.bg · Office hours: 9.00–17.30
You may also address the supervisory authority of your habitual residence or place of work.
10. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. No scoring or evaluation of visitors is carried out.
11. Whether provision is required
Providing your data is neither required by law nor by contract. Without the fields marked as mandatory, however, we cannot deal with your enquiry.
12. Status and amendments
This privacy policy is as at 15 September 2026. We will amend it as soon as the processing described here changes - in particular if third-party content, an analytics tool or any other service requiring consent is added at a later date.