How we protect your personal data

1. General Information

Coding Turtles ("we", "our company") is committed to protecting the privacy of your personal data. This privacy policy explains how we collect, use, store, and protect the information we receive from you when using our website and services.

This policy complies with the General Data Protection Regulation (GDPR) and Bulgarian data protection legislation.

2. Data Controller

The data controller is:

3. What Data We Collect

We collect the following types of personal data:

• Identification data: first name, last name, email address, phone number
• Business information: company name, position, business needs
• Technical data: IP address, browser type, operating system, cookie data
• Usage data: pages you visit, visit time, actions on the site
• Communication data: content of messages you send us

4. How We Collect Data

We collect personal data in the following ways:

• Directly from you: when you fill out forms, contact us, or order services
• Automatically: through cookies and similar technologies when visiting the site
• From third parties: from social networks, partners, or public sources (only with your consent)

5. Purposes of Processing

We use your personal data for the following purposes:

• Providing the services you requested
• Communication and responding to your inquiries
• Improving our services and website
• Sending information about new services (only with your consent)
• Compliance with legal obligations
• Protection of our legitimate interests

6. Legal Basis

We process your personal data based on:

• Consent: for marketing communications and cookies
• Contract performance: for providing services
• Legitimate interests: for improving services and communication
• Legal obligation: for compliance with legal requirements

7. Data Sharing

We may share your data with:

• Service providers: hosting, email services, analytics (Google Analytics)
• Legal authorities: when legally required
• Business partners: only with your explicit consent

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

8. Retention Period

We retain your personal data:

• Client data: 7 years after contract completion
• Marketing data: until consent withdrawal
• Technical data: 24 months
• Contact data: 3 years after last communication

9. Your Rights

Under GDPR, you have the following rights:

• Right of access: to receive a copy of your personal data
• Right to rectification: to correct inaccurate data
• Right to erasure: to request deletion of your data
• Right to restriction: to restrict processing
• Right to portability: to receive data in a structured format
• Right to object: to object to processing
• Right to withdraw consent: to withdraw your consent at any time

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. We use SSL encryption, secure servers, and regular backups.

11. Cookies

Our website uses cookies for:

• Providing basic functionality
• Traffic analysis (Google Analytics)
• Improving user experience

You can manage cookies through your browser settings.

12. Policy Changes

We reserve the right to update this privacy policy. For material changes, we will notify you via email or through a notice on our website.

13. Contact

For questions about this policy or to exercise your rights, please contact us:

You have the right to file a complaint with the Commission for Personal Data Protection at: Sofia 1592, Prof. Tsvetan Lazarov Blvd. № 2.