PRIVACY POLICY

of “SYCONA” LTD

Last updated: October 2026

This Privacy Policy governs the manner in which “SYCONA” LTD collects, processes, stores, and protects your personal data when you use the website www.sycona.bg, enter into and execute contracts with customers and business partners, and fulfill statutory legal obligations.

This Policy has been prepared in full compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR) and the Bulgarian Personal Data Protection Act (PDPA).

1. DATA CONTROLLER DETAILS

Company Name: “SYCONA” LTD
UIC/VAT: 115799340
Registered Seat and Address: 12 Kuklensko Shosse Str., Plovdiv, Bulgaria
Phone: +359 32 674 800
E-mail: info@sycona.bg
Website: www.sycona.bg

2. DATA PROCESSING PRINCIPLES

We adhere to the following core data protection principles:

Lawfulness, fairness, and transparency;
Purpose limitation (collected only for specified, explicit, and legitimate purposes);
Data minimization (adequate, relevant, and limited to what is necessary);
Accuracy and keeping data up to date;
Storage limitation (kept no longer than necessary);
Integrity and confidentiality (ensuring appropriate security).

3. PERSONAL DATA WE COLLECT, PURPOSES AND LEGAL GROUNDS

Personal Data Category	Purposes of Processing	Legal Basis (GDPR)
First and Last Name	Identification of client/partner; Account registration and maintenance; Order fulfillment; Issuing accounting documents.	Performance of a contract (Art. 6(1)(b)); Legal obligation (Art. 6(1)(c)).
Contact / Delivery Address	Delivery of goods/services; Invoicing; Correspondence.	Performance of a contract (Art. 6(1)(b)); Legal obligation (Art. 6(1)(c)).
E-mail Address	Account/order confirmations; Customer communication; Sending system notifications.	Performance of a contract (Art. 6(1)(b)); Legitimate interest (Art. 6(1)(f)).
Phone Number	Operational communication regarding orders, clarifications, and deliveries.	Performance of a contract (Art. 6(1)(b)).
UIC / Tax Number / Company Details	Statutorily required data for invoicing and accounting purposes.	Legal obligation (Art. 6(1)(c) – Accountancy Act, VAT Act).
IP Address, Technical Data & Cookies	Website security maintenance; Traffic analysis; Functionality optimization.	Consent (Art. 6(1)(a)); Legitimate interest (Art. 6(1)(f)).

4. DATA STORAGE PERIOD

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal requirements:

User Account Data: Retained as long as the account remains active or until consent is withdrawn / the account is closed by the user.
Contractual Data: For the duration of the contract and for 5 (five) years following its termination (subject to statutory limitation periods for legal claims).
Accounting Documents (Invoices, Delivery Notes): 10 (ten) years, in accordance with the Bulgarian Accountancy Act and Tax and Social Insurance Procedure Code.
Data processed for Legitimate Interest: Until the expiration of the relevant statutory limitation period (up to 5 years) or until the final resolution of a legal dispute.

5. RECIPIENTS AND CATEGORIES OF THIRD PARTIES

In order to fulfill our obligations and provide our services, “SYCONA” LTD may transfer your personal data to the following categories of data processors:

Courier and Transport Companies (for delivery of goods);
IT, Hosting, and Software Providers (for website and system maintenance);
Accounting Agencies and Auditors (to comply with financial and tax regulations);
Banking and Payment Institutions (to process payments);
State and Public Authorities (National Revenue Agency, Ministry of Interior, Commission for Consumer Protection, Commission for Personal Data Protection, etc.), where required by law.

“SYCONA” LTD does not transfer your personal data to countries outside the European Union (EU) or the European Economic Area (EEA) without ensuring appropriate safeguards.

6. COOKIES

Our website uses cookies to ensure proper operation, analyze user traffic, and enhance user experience. Detailed information regarding the types of cookies used and how to manage your consent can be found in our [Cookie Policy].

7. YOUR RIGHTS UNDER THE GDPR

As a data subject, you have the following rights, which you may exercise at any time:

Right of Access: To obtain confirmation as to whether your data is being processed and receive access to it.
Right to Rectification: To request correction of inaccurate or completion of incomplete personal data.
Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data when grounds for processing no longer exist (unless we are legally obligated to retain it).
Right to Restriction of Processing: To request temporary suspension of data processing under certain conditions.
Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format or request transfer to another controller.
Right to Object: To object to processing based on legitimate interests or direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

How to exercise your rights?

You may submit a written request to our office address or send an email to info@sycona.bg. We will respond to your request free of charge within 1 month of receipt.

8. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that the processing of your personal data violates the GDPR or national legislation, you have the right to lodge a complaint with the supervisory authority in the Republic of Bulgaria:

Commission for Personal Data Protection (CPDP / КЗЛД)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 35 18
E-mail: kzld@cpdp.bg
Website: www.cpdp.bg

9. SECURITY MEASURES

“SYCONA” LTD implements appropriate technical and organizational measures (encryption, access control, firewalls, etc.) to ensure a level of security appropriate to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

10. POLICY UPDATES

This Policy may be updated periodically to reflect changes in legal requirements or our operational practices. Any changes will be published promptly on www.sycona.bg.