What we collect,and why.
This site collects very little: what you type into a form, the technical signals needed to keep it from being abused, and — only if you agree — anonymised analytics.
Controller
- Controller
- Assisto Labs LTD (Асисто Лабс ЕООД)
- UIC (Bulgaria)
- 208676460
- Registered address
- Bulgaria, Burgas Province, Pomorie 8200, 3 Tsar Asen Street
- [email protected]
What we collect
- Contact data — what you submit through a form on this site: your name, email, message, and any project details you choose to include.
- Security and abuse signals — basic technical data used to protect the site, including your IP address and request metadata, for rate limiting and bot protection.
- Analytics data — only if you consent to analytics cookies. We use Google Analytics 4 to understand aggregated usage with IP anonymisation enabled.
- Referral data — which site linked you here, any campaign tags in the address you arrived on, and the first page you opened. This is held in the page while you browse, and if you send us an inquiry it is included in that email as a single line, so we know which channel it came from. That happens whatever you choose about cookies, because it is part of the message you chose to send us. It is only saved in your browser between page loads if you consent to analytics cookies.
- Cookies — strictly necessary cookies for the site to function, plus analytics cookies only with your consent.
We do not run advertising trackers, we do not build profiles, and there is no account system on this website.
Purposes and legal bases
Responding to inquiries. To reply to your message and discuss a possible project. Legal basis: our legitimate interest in communicating with interested parties and, where applicable, steps taken prior to entering a contract.
Security and abuse prevention. To protect the site from spam, fraud and abuse. Legal basis: our legitimate interest in the integrity and availability of the service.
Analytics. To understand how the site performs and improve it. Legal basis: your consent, which you can withdraw at any time via the “Manage Cookies” link in the footer.
Who we share data with
We share personal data only where it is necessary to operate the site and answer your request:
- Service providers supporting our hosting, email delivery and bot protection, acting as processors on our instructions.
- Google, for Analytics 4, and only if you have consented to analytics cookies.
We do not sell personal data, and we do not share it for advertising purposes.
International transfers
Some providers (for example Google Analytics) may process data on servers outside the EU/EEA. Where that happens, transfers are covered by recognised safeguards such as Standard Contractual Clauses, with additional measures where required.
How long we keep it
- Contact messages: for as long as needed to handle the request and keep reasonable business records — typically up to 12 months, unless a longer period is required by law.
- Security signals: for the limited period needed for protection and incident investigation.
- Analytics data: according to the retention settings configured in GA4, and only where you consented.
Your rights
Depending on your situation you may request access to your data, its correction or deletion, restriction of or objection to processing, and data portability. You can withdraw analytics consent at any time without affecting processing carried out before the withdrawal.
To exercise any of these, write to [email protected].
Complaints
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd — cpdp.bg.
Cookies and browser storage
Essential cookies are required for the site to work. Analytics cookies are set only after you consent, and you can change that decision at any time through the “Manage Cookies” link in the footer.
The site also uses your browser’s session storage, which is cleared when you close the tab. If you start describing an idea on one page and continue on another, that text is carried across in session storage so you do not have to retype it; it is removed as soon as the inquiry is sent. It stays on your device and is never sent anywhere until you submit the form. Referral data is kept there too, but only once you have consented to analytics cookies.
Changes
We may update this policy as the site or the legal requirements change. The current version is always the one published on this page, with the date of the last update shown above.
This policy is published for transparency and does not constitute legal advice.
