Privacy policy

Who we are

The controller of the personal data described in this policy is Palamed, a business-automation studio based in Sofia, Bulgaria. Palamed decides what data this site collects and why.

Reach the controller through the contact page linked at the end of this policy. If you need our registered company details in writing — legal name, company number and registered address — ask through the same form and we will send them.

Data we collect

We collect personal data in three ways:

• Contact form — the name, company, email address, phone number, and inquiry text you submit when you write to us.
• Newsletter — the email address you provide when subscribing to our newsletter.
• Analytics — basic usage data about visits to this site, such as pages viewed, approximate location, and device and browser type.

How we use your data

We use this data only to:

• Answer your inquiry and follow up on it.
• Send you the newsletter you subscribed to.
• Understand how the site is used so we can improve it.

We do not sell personal data, and we do not use it for purposes beyond those listed here.

Legal basis

We process contact-form data on the basis of taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Newsletter data is processed on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time. Analytics data is processed on the basis of your consent (Art. 6(1)(a)), collected through the cookie banner before any analytics cookie is stored. You can change or withdraw that choice at any time via Cookie settings in the footer; declining leaves the site fully usable.

Retention

We keep contact inquiries for as long as needed to handle them, and for a reasonable period afterwards. Newsletter email addresses are kept until you unsubscribe. Analytics data is retained in aggregated form.

Third parties

We use a small number of service providers to run this website: Vercel (hosting), Formspree (contact and newsletter form processing) and Google Analytics (usage measurement, only with your consent). They process data on our behalf, under data-processing agreements, and only as far as needed to provide their service. Where a provider is located outside the EEA, transfers rely on recognized safeguards such as standard contractual clauses.

Your rights

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted where there is no reason for us to keep it.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest, and to direct marketing at any time.

You also have the right to lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection.

Privacy requests

To exercise any of these rights, reach us through the contact page. We respond to privacy requests within one month.