Privacy and Cookie Policy

Last updated: 13 October 2026

This policy explains what personal data is processed when you visit dyaksov.com, write to me through the forms on the site or use the calculator. It follows Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), the Bulgarian Personal Data Protection Act, the Bulgarian Electronic Communications Act (cookie rules) and the Bulgarian Electronic Commerce Act.

1. Who processes your data

The controller of your personal data is the owner of the website dyaksov.com (the “controller”, “I” or “me”). For any question about your personal data, you can reach me through the contact page. No data protection officer has been appointed, as the activities of the site do not require one under Article 37 GDPR.

2. What data I collect and why

Contact and consultation forms

When you submit a form, I process the data you enter yourself: name, email, phone, website, company and message. The IP address, the page the form was sent from and the date and time are recorded automatically.

• Purpose: to reply to your enquiry and, if you wish, to prepare a proposal or a consultation.
• Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in replying to messages I receive (Art. 6(1)(f) GDPR).
• Spam protection: the IP address is also used to limit the number of submissions. For this purpose it is kept only as a hash for 10 minutes (legitimate interest, Art. 6(1)(f)).

Comments

The blog no longer accepts comments. Older comments left before they were switched off are not shown publicly. You can ask for them to be deleted at any time.

eCommerce Profit Calculator

The calculator runs entirely in your browser. The numbers you enter are not sent to or stored on the server. If you use “Copy a link to this result”, the values are saved only in the link itself and are visible to anyone you share it with. If you choose to send me your result, the form rules above apply.

Analytics and advertising

With your consent (Art. 6(1)(a) GDPR and Art. 4a of the Bulgarian Electronic Communications Act), the site uses Google Analytics (through Google Tag Manager) for aggregated visitor statistics and Meta Pixel to measure the performance of ads on Facebook and Instagram. You can withdraw your consent at any time through the cookie settings button. This does not affect the lawfulness of processing carried out before the withdrawal.

Security and technical logs

The server and the site firewall record technical data (IP address, date and time, requested address, browser) to detect attacks and keep the site running properly. The legal basis is legitimate interest (Art. 6(1)(f) GDPR).

3. Cookies

Cookies are small text files that the site stores in your browser. On your first visit you will see a banner where you choose which categories to allow. Strictly necessary cookies do not require consent. All other cookies are used only if you allow them.

• Necessary: remember your cookie choice (dy_consent, kept for 6 months) and the site language (pll_language). The site cannot work properly without them.
• Analytics: _ga, _ga_*, _gid (Google Analytics). They show how many people visit the site and which pages they read. Duration: up to 2 years.
• Marketing: _fbp, _fbc (Meta Pixel). Used to measure ads and show more relevant ads. Duration: up to 3 months.

You can change or withdraw your choice at any time through the cookie settings (the link is also in the footer of every page) or by deleting cookies in your browser. When you withdraw consent, the analytics and marketing cookies are deleted.

To be able to prove the consent given (Art. 7(1) GDPR), I keep a record of your choice: a random ID stored only in the dy_consent cookie, the selected categories, the policy version and the date. The record contains no IP address or other data that could identify you and is deleted automatically after 3 years.

4. Who receives your data

Your data is never sold or shared with third parties for their own marketing. Only service providers that process data on my behalf and on my instructions (processors under Art. 28 GDPR) have access to it:

• the website hosting provider, with servers in the European Union;
• the email service provider through which I receive form messages;
• Google (Analytics, Tag Manager, fonts) and Meta (Pixel), only with your cookie consent where applicable;

Data may also be disclosed to public authorities where the law requires it.

5. Transfers outside the EU

Some of these providers (for example Google and Meta) may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).

6. How long data is kept

• Form enquiries: up to 2 years after our last communication, unless we enter into a contract. In that case the retention periods set by accounting and tax law apply.
• Older comments: until you ask for them to be deleted.
• Cookies: as listed in section 3.
• Technical logs: usually up to 90 days.

7. Your rights

Under the GDPR you have the right to:

• be informed about and access the data processed about you (Art. 15);
• have it corrected (Art. 16);
• have it erased, the so-called “right to be forgotten” (Art. 17);
• restrict its processing (Art. 18);
• receive your data in a structured, machine-readable format (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw your consent at any time where processing is based on consent (Art. 7(3)).

To exercise your rights, write to me through the contact page. I will reply without undue delay and within one month at the latest (Art. 12(3) GDPR). If you believe your rights have been infringed, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or with the supervisory authority in the country where you live.

8. Security

The site runs entirely over a secure connection (HTTPS). It uses a firewall, spam protection, restricted access to the admin area and regular backups. Even so, no method of transmission over the internet is completely secure, so please do not send sensitive information (such as passwords or bank details) through the forms.

9. Automated decisions and children

The site does not make automated decisions or carry out profiling that has legal effects on you. The site is not intended for people under 16 and does not knowingly collect their data.

10. Changes to this policy

This policy may be updated when the site or the law changes. The current version is always published on this page, and the date of the latest change is shown at the top.