message us
[ legal ]

Privacy policy.

Last updated: 20 October 2026

1. Who we are

StrateonX EOOD (СтратеонИкс ЕООД), a single-member limited liability company registered in the Bulgarian Commercial Register, UIC (ЕИК) 208404751, VAT number BG208404751. Registered address: 82 Dimitar Dimov St., apt. 805, 8018 Burgas, Bulgaria. Email: [email protected].

StrateonX EOOD is the controller of the personal data described in this policy. This policy applies to strateonx.com and to enquiries you send us through it.

2. What we collect

  • Contact form. Your name, your email address or Telegram username, your company (optional) and your message. With each submission we also record your IP address and the time, to block spam and abuse.
  • Direct messages. Whatever you choose to send us by email, Telegram or WhatsApp, together with the contact details those services show us.
  • Technical data. When you open a page, our web server and our CDN (Cloudflare) process your IP address, browser type, the page requested, the referring page and the time. This is needed to deliver the site and keep it secure.
  • Browser storage. The site saves two small items in your browser: your cookie banner choice and the counters of the "Where does your plan break?" tool. They stay on your device and are not sent to us. See the cookie policy.

We do not use analytics, advertising or tracking tools on this site, and we do not buy or sell personal data.

3. Why we use it and on what legal basis

  • To answer your enquiry and prepare a proposal: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
  • To perform a contract with you or your company: Art. 6(1)(b) GDPR.
  • To keep the site and the form secure and free of spam: our legitimate interest (Art. 6(1)(f) GDPR).
  • To meet accounting and tax obligations for clients: legal obligation (Art. 6(1)(c) GDPR).
  • Any future analytics or marketing cookies: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Who receives it

We share personal data only with providers that help us run the site and our communication, and only as far as they need it:

  • Cloudflare, Inc. (USA): content delivery and security for the site.
  • Our hosting provider: the server that runs the site is located in the Netherlands (EU).
  • Google: business email (Google Workspace) and the web fonts on the site (Google Fonts), which means your browser sends your IP address to Google when it loads the fonts.
  • Telegram and WhatsApp (Meta): only if you choose to contact us there. Form messages sent through the Telegram option are delivered to us through a Telegram bot.
  • Authorities, courts or advisers (such as our accountant), where the law requires it or to protect our legal rights.

5. Transfers outside the EU

Some providers above may process data outside the European Economic Area, including in the USA. Where they do, the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.

6. How long we keep it

  • Enquiries that do not lead to a contract: up to 12 months after our last exchange.
  • Client correspondence and documents: for the term of the contract and then as long as Bulgarian accounting and tax law requires (up to 10 years for accounting records).
  • Web server logs: up to 14 days. Technical logs of form submissions: up to 90 days.

7. Your rights

You may ask us for access to your data, its correction or deletion, restriction of processing, a copy in a portable format, or object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time. Write to the email above; we reply within one month.

You also have the right to complain to the Bulgarian supervisory authority: Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or to the authority in the EU country where you live or work.

8. Other points

  • We do not make decisions about you based solely on automated processing.
  • The site is intended for businesses and is not directed at children under 16.
  • We protect data with encrypted connections (HTTPS), restricted server access and limited retention.

9. Changes

We may update this policy. The date at the top shows the current version.