Privacy Policy
This policy explains what personal data are processed through the website, for what purposes and how you can exercise your rights.
Last updated: 23 July 2026
1. Data controller
The controller is „ЕТ-КО“ ООД, Occupational Health Service, contact address: 41a Burel St., Sofia, Bulgaria.
You can contact us by phone at 0888 691 803 or by email at stmetko@gmail.com.
2. Data processed through the website
- Full name, company and city/location when entered in the form.
- Phone number and email address for contact.
- Selected service, approximate number of employees and the content of the message.
- Minimal technical data for security and abuse prevention, such as a hashed IP identifier, date, service and sending status.
3. Purposes and legal grounds
- Responding to an inquiry and taking steps at your request before entering into a contract.
- Communication in connection with a requested service or consultation.
- Protecting the website and forms against automated spam and abuse on the basis of legitimate interest.
- Compliance with legal obligations where applicable.
4. Retention periods
Inquiries are kept for the period necessary to respond and for subsequent communication, normally up to 6 months after the correspondence ends, unless a contractual relationship or legal basis requires longer retention.
Technical security records are retained for a limited period, normally up to 30 days, unless an incident is identified or retention is necessary to protect a legal interest.
5. Recipients and data transfers
Data may be processed by hosting and email service providers to the extent necessary for technical operation. We do not sell personal data and do not provide them for advertising profiling.
The website is not designed to transfer data outside the European Economic Area through its own functionality. The external map opens only after you follow a separate link; the relevant provider’s terms then apply.
6. Sensitive and medical data
Do not send medical documents, diagnoses, Bulgarian personal identification numbers or other sensitive data through the general contact form. Where necessary, we will arrange a suitable secure method of transfer.
7. Your rights
- Right to information and access to personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure and restriction where the legal conditions are met.
- Right to object to processing based on legitimate interest.
- Right to data portability where applicable.
- Right to lodge a complaint with the Bulgarian Commission for Personal Data Protection.
8. Security
We apply appropriate technical and organisational measures, including HTTPS, form protection, rate limiting, CSRF tokens and minimisation of technical logs.
9. Changes to this policy
This policy may be updated when the website, services or applicable requirements change. The current version is published on this page.