Data controller
In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we provide you with the following information about the processing of your personal data.
- Company
- Agent Plus 7 EOOD
- Company ID (EIK)
- 208810200
- Address
- 77 Knyaz Boris I St., apt. 2, Sofia, Bulgaria
- info@codeseven.eu
What personal data we collect
We only collect the data needed to provide our services:
Data you provide to us
- Registration data: name, email address, password (hashed)
- Billing data: name, company, address, company ID/VAT number
- Communication: messages from contact forms, support tickets
- Quote requests: project description, budget, timeframe
Automatically collected data
- Technical: IP address, browser, operating system, screen resolution
- Behavioural: pages visited, session duration, clicks
- Cookies: session, preferences, analytics (with your consent)
Payment data
We do not store card data. Payments are processed entirely by Stripe (PCI-DSS Level 1 certified).
Purposes of processing
- Performance of a contract – delivery of products, support, invoicing
- Account management – managing your user account and licences
- Communication – replying to enquiries, support tickets
- Marketing – email newsletter (only with express consent)
- Analytics – improving the site (anonymised data)
- Security – protection against fraud and abuse
- Legal obligations – accounting, taxes (10 years)
Legal bases (Art. 6 GDPR)
- Art. 6(1)(b) – Performance of a contract (orders, licences)
- Art. 6(1)(c) – Legal obligations (invoices, accounting)
- Art. 6(1)(f) – Legitimate interest (security, analytics)
- Art. 6(1)(a) – Express consent (newsletter, marketing cookies)
Retention periods
- Account data: until you delete your account
- Invoices and accounting: 10 years (required by the Bulgarian VAT Act)
- Support communication: 3 years after closure
- Marketing data: until consent is withdrawn
- Cookies: from 1 day to 12 months, depending on the type
- Server logs: 90 days
International transfers
Some partners process data outside the EU/EEA. Protection is ensured through:
- Standard Contractual Clauses (SCCs) of the European Commission
- The EU-US Data Privacy Framework
- Appropriate technical and organisational measures
Your rights (Art. 15–22 GDPR)
- Right of access – a copy of your data
- Right to rectification – correction of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability – export in a machine-readable format
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) (cpdp.bg)
To exercise your rights, write to info@codeseven.eu. We reply within 30 days.
Data security
- SSL/TLS encryption of all connections (HTTPS)
- Bcrypt password hashing
- Regular security updates
- Daily backups
- Real-time monitoring and intrusion detection
- Principle of least-privilege access to data
Changes to this policy
We may update this policy. We will notify you of material changes by email and/or on the site.
Contact
For privacy questions:
- info@codeseven.eu
- Phone
- +359 888 123 456
- Supervisory authority
- CPDP