Assisto Labs

Privacy Policy

We respect your privacy. This policy explains what we collect, why we collect it, and how you can exercise your rights.

Last updated: 2026-02-07

1. Controller

Controller: Assisto Labs LTD (Асисто Лабс ЕООД)

UIC (Bulgaria): 208676460

Registered address: Bulgaria, Burgas Province, Pomorie 8200, 3 Tsar Asen Street

Email: [email protected]

2. What we collect

  • Contact data: information you submit via forms (name, email, message, and any details you include).
  • Security/abuse signals: basic technical data used to protect the site (e.g., rate limiting, bot protection, fraud prevention signals). This may include IP address and request metadata.
  • Analytics data (optional): only if you consent to analytics cookies. We use Google Analytics 4 (GA4) to understand aggregated usage and improve the website.
  • Cookies: strictly necessary cookies for basic site functionality; analytics cookies only if you consent.

3. Purposes and legal bases

Responding to inquiries

Purpose: to respond to messages and provide requested information. Legal basis: our legitimate interests in communicating with interested parties, and—where applicable—steps prior to entering a contract.

Security and abuse prevention

Purpose: to protect the website and our systems from spam, fraud, and abuse. Legal basis: our legitimate interests in ensuring security and service integrity.

Analytics (only with consent)

Purpose: to understand website performance and improve content and user experience. Legal basis: your consent. You can withdraw consent anytime via the “Manage Cookies” link in the footer.

4. Who we share data with

We share personal data only when necessary to operate the website and respond to your request, including:

  • Service providers supporting our hosting, email delivery, and security.
  • Google (GA4) only if you consent to analytics cookies (Google acts as a processor for analytics data under its terms).

We do not sell personal data.

5. International transfers

Some service providers (e.g., Google Analytics) may process data on servers outside the EU/EEA. Where applicable, transfers are protected by recognized safeguards such as Standard Contractual Clauses (SCCs) and additional measures where required.

6. Data retention

  • Contact messages: kept as long as needed to handle the request and maintain reasonable business records (typically up to 12 months, unless a longer period is necessary for legal obligations).
  • Security logs: retained for a limited period necessary for protection and incident investigation.
  • Analytics data: retained according to GA4 settings and only if you consent.

7. Your rights

Depending on your situation, you may have the right to request access, correction, deletion, restriction, objection, and data portability. You can also withdraw consent at any time (for analytics).

To exercise your rights, contact: [email protected].

8. Complaints to the supervisory authority

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

CPDP: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. · Website: cpdp.bg

9. Cookies

We use essential cookies required for the website to function. Analytics cookies are used only if you consent. You can change your preference anytime via the “Manage Cookies” link in the footer.

10. Changes

We may update this policy as our products and legal requirements evolve. The latest version will always be published on this page.

This policy is provided for transparency purposes and does not constitute legal advice.