Privacy Policy

Effective date: 24 June 2026

This Privacy Policy governs the manner in which “IV – 2000” Ivan and Ivan EOOD, hereinafter referred to as the “Company”, “we”, “us” or the “Controller”, processes personal data when you use the website iv2000-bg.com, hereinafter referred to as the “Website”.

The Company respects your right to personal data protection and processes personal information in accordance with applicable Bulgarian and European legislation, including Regulation (EU) 2016/679 – the General Data Protection Regulation.

1. Data Controller Information

“IV – 2000” Ivan and Ivan EOOD
Address: 97 Kretsko Shose Street, Mezdra, Bulgaria
Telephone: +359 895 69 35 31
E-mail: iv2000factory@yahoo.com
Website: iv2000-bg.com

For questions regarding the processing of personal data or to exercise your rights, you may contact us at the e-mail address listed above.

2. What Personal Data Do We Process?

Depending on how you use the Website, we may process the following categories of data:

2.1. Data Provided Through the Contact Form

When you submit an enquiry through the Website, we may process:

  • first and last name;
  • telephone number;
  • e-mail address;
  • the content of your enquiry;
  • information you voluntarily include in your message, such as dimensions, project details, site address, photographs, drawings or technical requirements.

2.2. Technical Data

When you visit the Website, technical data necessary for its operation and security may be processed, including:

  • IP address;
  • device type, browser and operating system;
  • date and time of visit;
  • pages visited;
  • system and security log data;
  • information related to preventing misuse, spam and technical attacks.

2.3. Cookie-Related Data

With your consent, the Website may use analytical or marketing cookies. Further information is available in the separate Cookie Policy.

3. For What Purposes Do We Process Your Personal Data?

We process personal data only where necessary for a specific and lawful purpose, including:

  • receiving, reviewing and responding to your enquiry;
  • preparing a quotation, consultation or preliminary calculation;
  • communicating with you by telephone, e-mail or another method indicated by you;
  • taking steps prior to entering into a contract;
  • performing a contract where such has been concluded;
  • protecting the Website, preventing misuse and maintaining its security;
  • complying with legal obligations;
  • analysing and improving the Website where you have given consent for the relevant cookies.

4. What Is the Legal Basis for Processing?

Depending on the specific case, we process your personal data on one or more of the following grounds:

  • your consent – for example, for optional analytical or marketing cookies;
  • taking steps prior to entering into a contract – when you submit an enquiry for a quotation, project, service or product;
  • performance of a contract – where a contract has been concluded between you and the Company;
  • compliance with a legal obligation – where the law requires the storage or disclosure of certain information;
  • legitimate interest – to ensure the security of the Website, protect against misuse, provide technical maintenance and protect the rights and legitimate interests of the Company.

Where processing is based on consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before it was withdrawn.

5. Is Providing Personal Data Mandatory?

The fields marked with an asterisk “*” in the contact form are required in order for us to receive and process your enquiry.

If you do not provide the necessary data, we may not be able to contact you or provide an accurate response, quotation or consultation.

6. How Long Do We Retain Your Data?

We retain your personal data only for the period necessary for the purposes for which it was collected.

  • Data from enquiries that do not result in a contract shall be retained for up to 12 months after the last communication, unless longer retention is necessary for the establishment, exercise or defence of legal claims.
  • Data related to a contract, order, delivery, installation or invoice shall be retained for the period required by applicable legislation and/or until the expiry of applicable limitation periods.
  • Technical logs shall be retained for a limited period necessary for security, technical support and investigation of potential incidents.
  • Data processed on the basis of consent shall be retained until consent is withdrawn, unless another legal basis exists for its retention.

7. With Whom May We Share Your Data?

Your personal data may be accessed, only where necessary, by:

  • employees or authorised persons of the Company;
  • hosting providers, technical support providers and Website maintenance providers;
  • e-mail service providers;
  • accounting, legal or other professional advisers, where necessary;
  • public authorities and institutions where required by law;
  • providers of analytical or marketing cookie services, only where you have given consent.

When we use external service providers, we require them to process personal data only for the specified purposes and subject to appropriate security measures.

8. Transfers of Data Outside the European Economic Area

As a rule, the Company does not intend to transfer personal data outside the European Union or the European Economic Area.

Such transfer may occur when using external services, for example analytics, advertising, hosting or communication platforms. In such cases, the transfer shall be carried out only where there is an applicable legal basis and appropriate safeguards for the protection of personal data.

9. Automated Decision-Making

The Company does not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

10. Your Rights

Under applicable legislation, you have the right to:

  • request access to the personal data we process about you;
  • request correction of inaccurate or incomplete data;
  • request erasure of data where the legal requirements are met;
  • request restriction of processing;
  • object to processing based on legitimate interest;
  • request data portability where applicable;
  • withdraw your consent at any time where processing is based on consent;
  • lodge a complaint with the Commission for Personal Data Protection;
  • seek judicial protection.

To exercise your rights, please send a request to: iv2000factory@yahoo.com.

We may request additional information to verify your identity where this is necessary to protect your personal data.

The Commission for Personal Data Protection is the supervisory authority in Bulgaria for matters related to personal data protection.

11. Security Measures

The Company takes reasonable technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised access, disclosure or use.

However, no system for transmitting or storing information over the internet can be completely secure. Therefore, we recommend that you do not send sensitive personal data, banking details, passwords or other information that is not necessary for your enquiry through the contact form.

12. Links to External Websites

The Website may contain links to external websites, including social media profiles.

The Company is not responsible for the content, security or privacy policies of such external websites. We recommend that you review their privacy policies before providing personal data.

13. Data of Persons Under 18 Years of Age

The Website is not intended for persons under 18 years of age, and the Company does not knowingly collect personal data from children through it.

If you believe that a child has provided personal data without the necessary consent of a parent or legal guardian, please contact us so that we can take the necessary action.

14. Changes to This Privacy Policy

The Company may update this Privacy Policy in the event of changes to its activities, the Website’s functionality, the technologies used or applicable legislation.

The current version will always be published on the Website. We recommend that you review it periodically.

15. Contact Information

For questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:

“IV – 2000” Ivan and Ivan EOOD
97 Kretsko Shose Street, Mezdra, Bulgaria
Telephone: +359 895 69 35 31
E-mail: iv2000factory@yahoo.com