Privacy notice
This notice explains what personal data this website collects, why we process it and what rights you have. It covers only the website.
Version 1, October 2026
Who we are
The controller of the personal data processed through this website is:
- Controller
- Kozloduy Ltd. („Козлодуй“ ООД)
- UIC
- 812212481
- Address
- 6 Salzata Str., Industrial & Logistics Park, 8000 Burgas, Bulgaria
- Phone
- +359 56 851 401
- office@kozloduiood.com
- Data protection contact
- Not appointed. For questions about your data, write to office@kozloduiood.com.
The company also has a general Personal Data Protection Policy (Bulgarian, 2018, PDF), which covers employees, clients and suppliers. This notice covers only the website.
What data the site collects
The site has no user accounts, no analytics, no advertising and no embedded content from third parties. You can read every page without giving us any personal data. We collect data in three cases.
Request for quotation form
When you send us a request through the RFQ form, we receive the data you enter: your name, company, email address, phone number (optional), project type, a description of the scope, quantities and required dates, and the drawings or documents you attach. The form is delivered to our company email. Our server sends it by email and does not keep a copy. To protect the form against abuse, the server keeps a one-way hash of your IP address for about one hour.
Server logs
The hosting provider keeps standard access logs: the IP address of your device, the time of the request, the page requested and the browser type. The logs are used only for the security and stability of the site.
Browser storage
The site uses the sessionStorage of your browser to remember the product type you chose for the RFQ form while you move between pages. The entry holds a technical key only and no personal data. Your browser deletes it when you close the tab.
Why and on what legal basis
We use the data from the RFQ form to prepare and send you a quotation, to ask you technical questions about the enquiry and to communicate with you about it afterwards. The legal basis is Article 6(1)(b) of the GDPR (steps taken at your request before entering into a contract) and, for enquiries sent on behalf of a company, Article 6(1)(f) (our legitimate interest in handling business enquiries).
Server logs are processed on the basis of Article 6(1)(f) of the GDPR (our legitimate interest in keeping the site secure).
We do not use the data for marketing and we do not make automated decisions about you.
Who receives the data
Enquiries are read by our engineering and sales staff who prepare the quotation. We do not sell personal data and we do not share it with third parties for their own purposes. The following service providers process data on our behalf:
- SuperHosting.bg hosts the website on servers in Bulgaria and keeps the server logs.
- Google Workspace provides our company email. Messages sent through the form and our correspondence with you may be processed on Google servers in the EU and in the United States. Transfers to the United States are covered by the EU-US Data Privacy Framework and by the standard contractual clauses in Google's terms.
- The Montserrat typeface is served from our own server. No font files, scripts or images are requested from third-party servers when you open the site.
We disclose data to public authorities only when the law requires it.
How long we keep it
We keep enquiries and their attachments for 12 months after our last contact with you. If a contract follows, the documents become part of the contract file and are kept for the documentation period required by Bulgarian accounting and tax law.
Server logs are kept by the hosting provider for 30 days. The entry in browser storage is deleted when you close the browser tab.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected;
- have your data erased where there is no legal reason for us to keep it;
- restrict processing in certain cases;
- receive the data you gave us in a machine-readable format (portability);
- object to processing based on our legitimate interest.
To exercise any of these rights, write to office@kozloduiood.com. We reply within one month. We may ask you to confirm your identity before we act on a request.
If you believe we process your data unlawfully, you may complain to the Commission for Personal Data Protection of Bulgaria (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg. You may also complain to the supervisory authority in the EU country where you live.
Links to other sites
The Quality page links to the TÜV Rheinland Certipedia database, where our certificates can be checked, and the Company page links to Google Maps. These and any other external sites have their own privacy policies, which apply as soon as you follow the link. We are not responsible for their content.
Changes to this notice
We will update this notice when the website or our processing changes. The current version is always published on this page with its version number and date.
Version 1, October 2026.
