Privacy Policy

1. Data Controller

The controller of your personal data is:

TOLAV EOOD

UIC (EIK): 202940824

VAT: BG202940824

Registered address: ul. Tazha 21, entr. A, fl. 3, ap. 6, Kazanlak 6100, Bulgaria

Email: sales@tolav.net

Phone: +359 89 998 7744

2. What Personal Data We Collect

When you use our contact form, we collect the following information:

• First and last name
• Email address
• Phone number (if provided)
• Subject and message content

We may also collect technical data automatically through cookies and similar technologies, such as your IP address, browser type, and pages visited. For details, please see our Cookie Policy.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• Responding to your inquiries – to reply to messages submitted through our contact form (legal basis: your consent, Art. 6(1)(a) GDPR).
• Preparing quotations – to provide you with a quote based on your specifications (legal basis: pre-contractual measures, Art. 6(1)(b) GDPR).
• Website functionality and analytics – to ensure the proper functioning of our website and to analyze its usage (legal basis: legitimate interest, Art. 6(1)(f) GDPR).

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above. Contact form submissions are retained for up to 12 months unless a business relationship is established, in which case applicable commercial record-keeping periods apply.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties. We may share data with trusted service providers who assist in operating our website (e.g., hosting provider), subject to contractual obligations to protect your data. We may also disclose data when required by law or to comply with legal obligations.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access – to request a copy of the data we hold about you
• Right to rectification – to request correction of inaccurate data
• Right to erasure – to request deletion of your data
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time

To exercise any of these rights, please contact us at sales@tolav.net. We will respond within 30 days.

7. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection of the Republic of Bulgaria (CPDP) at www.cpdp.bg.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.