This Privacy Policy describes how Bytesmiths OOD (“Company”, “we”, “our”, or “us”) collects, processes and protects personal information when you visit the www.thebytesmiths.eu website (“Website”) or use our services.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws within the European Union (EU).
1. Data Controller
The controller responsible for storing and processing your personal data is:
BYTESMITHS OOD
- Registration Number: 206321851
- Address: 8A Gen. Stefan Toshev str., Sofia 1680, Bulgaria
- Email: info@thebytesmiths.eu
- Date protection officer: Adrian Angelov
2. Legal Basis
We collect and process personal data under the following lawful bases:
- Contract performance – providing our services or fulfilling our contractual obligations
- Legitimate interests – improving our services, securing our systems or communicating with our business contacts
- Consent – optional cookies or marketing activities, upon receiving your explicit consent
- Legal obligation – compliance with applicable law
3. Data We Collect
3.1. Information Provided by You
Depending on how you interact with us and the Website, we may collect your:
- Name
- Email address
- Phone number
- Information included in your enquiries and communications with us
- Information included in your Resume / Curriculum Vitae, strictly for recruitment and employment screening purposes resulting from your job application
3.2. Automatically Collected Information
When you use the Website, certain technical data may be collected automatically:
- Device information
- IP address
- Browser type and version
- Website and page activity and interactions, links clicked, time spent
- Website and cookie preferences
- Approximate location derived from IP address
4. Cookies and Similar Technologies
We use cookies and similar technologies to make the Website work, remember your preferences and understand how the Website is used.
- Necessary cookies: needed for core functions such as security and load balancing. These do not require consent.
- Preference cookies: remember preferences such as language.
- Analytics cookies: help us understand how visitors use the Website and optimize it. We use Google Analytics. Google may process analytics data in the US, but the data we send to Google Analytics does not contain personally identifiable information.
5. How We Use Your Data
We use the data collected through using the Website for the following purposes:
- Analyze and improve the Website and our services
- Keep the Website secure and prevent fraud
- Analyze Website traffic and domain rating
- Reply to your enquiries
- Process job applications
- Send newsletters or marketing communications, upon consent (you can withdraw at any time)
6. Third-Party Links
The Website may contain links to other websites or plug-ins that we do not control. We are not responsible for their privacy practices, and we encourage you to read their policies.
7. Data Sharing
We do not sell personal data.
7.1. Partners and Service Providers
Certain data may be shared with:
- Service providers, such as analytics, payment processing, search engine optimization (SEO)
- IT or customer support systems
These partners and service providers process data only under contractual obligations and in accordance with GDPR.
Data is shared on a strictly need-to-know basis: for the provision of the respective services, payment processing, issue resolution or customer support.
7.2. Authorities
Data may be shared with the authorities of the EU member states when legally required (e.g., court order, regulatory obligation). If legally required, we may transfer data outside of the EU in accordance with Chapter V of the GDPR.
8. Ads
We do not use personal identification and do not track your device or app usage for ad recommendations.
9. Marketing Communications
We may send business-related communications where permitted by applicable law.
We will ask for your consent before sending any marketing communications.
Recipients can unsubscribe from marketing communications at any time by using the Unsubscribe mechanism included in the communication or by contacting us.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
Retention periods may vary and are determined based on the nature of the data, legal obligations, dispute resolution needs and legitimate business purposes.
| Data Type | Retention |
|---|---|
| Website logs and analytics | Indefinitely, aggregated and anonymized |
| Website-originated messages / enquiries, including name, email and phone number of the originator | 12 months |
| Information included in job applicant’s Resume / Curriculum Vitae | Up to 3 months after recruitment decision |
When no longer needed, data is securely deleted or anonymized. Users can request earlier deletion of their data at any time, subject to legal or operational constraints.
11. User Rights
Under GDPR, users have the right to:
- Access their personal data
- Correct inaccurate information
- Request deletion of the personal data (right to erasure / “right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
- File a complaint with a supervisory authority, in particular in the EU member state of residence or place of alleged infringement
Requests can be sent to info@thebytesmiths.eu.
12. Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. These include encryption in transit (HTTPS/TLS), access controls, regular backups, staff training and security testing.
13. Child Age Restriction
The App is not intended for children under 16 years, and we do not knowingly collect their personal data. If you believe a child has disclosed personal data to us, please contact us and we will delete it.
14. Updates
We may update this Privacy Policy periodically. Revisions will be posted on the Website, with the corresponding version and date of the update.