Last updated: 1 October 2026
1. Data Controller
"VIBO" Ltd, Company ID (EIK) 175060119, with registered seat and address: Vrazhdebna district, Yapadzha locality, Former Business Yard, 1839 Sofia, Bulgaria ("Vibo", "we").
For questions regarding the processing of personal data, you can contact us at:
- Email: office@vibo71.com
- Phone: 02 936 7702
- Address: Vrazhdebna district, Yapadzha locality, Former Business Yard, 1839 Sofia
2. What data we collect and why
2.1. The contact form
On the “Contacts” page the following data is collected: name (required), phone number (required), email address (required) and message (optional). Fields marked as required must be completed so that we can reply to your enquiry.
The data is sent directly to us by email — the form does not store messages in the website's database.
Legal basis: where the enquiry is a specific commercial enquiry (e.g. about delivery, distribution, partnership or a product), we process the data on the basis of taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Where the enquiry is of a general nature (a general question, feedback, etc.), we process the data on the basis of our legitimate interest in responding to enquiries addressed to us (Art. 6(1)(f) GDPR) — an interest which we consider does not disproportionately affect your rights, since the data is provided voluntarily by you with the clear purpose of receiving a reply.
2.2. Spam check (Akismet)
Messages submitted through the contact form are automatically checked for spam by the service Akismet, provided by Automattic Inc. (USA), before they reach us. For this purpose Akismet processes: the content of the message, the sender’s IP address, User-Agent (browser/device) and referrer (the page from which the form was submitted).
Since Automattic Inc. is a company in the USA, this processing involves an international transfer of data outside the EEA. According to Automattic’s official privacy policy, such a transfer is carried out on the basis of Standard Contractual Clauses (SCC) approved by the European Commission / the UK government with recipients outside the EEA. (Source: automattic.com/privacy.)
2.3. Cookies
The site does not set any non-essential cookies on its visitors — neither analytics, nor marketing, nor functional cookies tracking behaviour. No cookie consent banner is displayed because, under the current configuration, it is not technically required.
If we implement Google Analytics, Mailchimp, online orders/payments, or another tracking service in the future, this policy and the banner setting will be reviewed before they are activated.
2.4. Site search
Text entered in the search field is processed only to return results and is not stored permanently.
2.5. Technical server logs
Like any web server, the site’s hosting infrastructure automatically records technical logs for every visit (e.g. IP address, date and time of the request, requested address, status code, User-Agent) — a standard technical practice for security, error diagnostics and protection against abuse. These logs are managed by our hosting provider, “SuperHosting.BG” EOOD (EIK 131449987), and not by the WordPress site itself.
3. Who we share data with
- Akismet / Automattic Inc. — for spam checking of messages from the contact form (see section 2.2 for details and international transfer).
- “SuperHosting.BG” EOOD (EIK 131449987) — technical infrastructure on which the site is stored and processed, including the server logs under section 2.5.
- We do not use payment services (the site does not currently accept online payments) and we do not share data with third parties for marketing purposes.
4. Retention periods
Messages received through the contact form are kept for up to 12 months from receipt, unless the correspondence develops into a contractual relationship (e.g. a concluded delivery or partnership agreement) — in which case the data is kept for the term of the contract and the applicable statutory limitation/accounting period thereafter — or unless an applicable legal obligation requires longer retention.
5. Data security
The site is served over an encrypted HTTPS connection. Regular backups of the site's content are maintained. Access to the administrative panel is restricted to authorised persons with individual login credentials.
6. Your rights
Where applicable under the circumstances and applicable law, under the GDPR you may have the right to: access your data, rectification, erasure, restriction of processing, data portability and objection to processing. To exercise these rights, write to us at office@vibo71.com — we will review each request individually, taking into account applicable exceptions.
You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) if you believe we are processing your data in violation of the law.
7. Changes to this policy
We may update this policy if the way we process data changes. The date of the last update is stated at the beginning of the document.