1. Data controller
The controller of personal data collected through max-commerce.com is [Registered company name], UIC [000000000], registered at [Registered address] (“Max Commerce”, “we”). For any privacy questions, email us at office@max-commerce.com.
2. What data we collect
- Contact form data: name, email, phone and company (optional), interests, budget and the content of your message.
- Technical data: IP address, browser and device type, date and time of your visit — logged automatically by our hosting provider for security purposes.
- Usage statistics (only with your consent): aggregated information about visits via Google Analytics — see section 6.
3. Purposes and legal bases
- Responding to your enquiry and preparing a proposal — based on your consent and on steps prior to entering into a contract (Art. 6(1)(a) and (b) GDPR).
- Website security and abuse prevention — based on our legitimate interest (Art. 6(1)(f) GDPR).
- Visit statistics (Google Analytics) — only based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Compliance with legal obligations — where required by law (Art. 6(1)(c) GDPR).
4. Retention
Enquiry data is kept for up to 24 months after our last communication, unless we enter into a contract — in which case statutory accounting and tax retention periods apply. Server logs are kept for up to 90 days.
5. Recipients
We do not sell or share your personal data with third parties for marketing purposes. Data may be processed by our hosting and email providers and — if you accept analytics cookies — by Google Ireland Ltd. (Google Analytics), acting as processors on our behalf under appropriate safeguards.
6. Cookies and Google Analytics
We use Google Analytics 4 (Google Ireland Ltd.) to get aggregated statistics about visits — which pages are viewed, on which devices and where visitors come from. It is switched on only after you accept analytics cookies in the banner. Until then no Google scripts are loaded and no cookies are set.
- _ga — distinguishes unique visitors; expires after up to 2 years.
- _ga_<ID> — keeps the session state; expires after up to 2 years.
Google may process data outside the EU under the EU-U.S. Data Privacy Framework. Your choice is stored in your browser's local storage (key “mc-consent”) — this is strictly necessary and needs no consent. You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. You may withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. To exercise your rights, email us at office@max-commerce.com.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
8. Security
We apply appropriate technical and organisational measures to protect your data — encrypted connections (HTTPS), restricted access and regular system updates.
9. Changes to this policy
We may update this policy from time to time. The current version is always published on this page together with the date of the latest change.