Privacy Policy

1. Data Controller

CBES LTD (Cosmopolitan Business Engineering & Service)
Address: Lyubotrun 2, Lozenetz, Sofia, Bulgaria, 1407
Email: info@cbesltd.com
Phone: +359 895 152 296

We are committed to protect your privacy and handle your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website.

2. Information We Collect

2.1 Automatically Collected Information

When you visit our website, we automatically collect:

• IP Address (anonymized in compliance with GDPR)
• Browser type and version
• Operating system
• Device information (desktop, mobile, tablet)
• Pages visited and time spent on each page
• Referring website (if you arrived from another site)
• Date and time of visit
• Screen resolution and display settings

2.2 Information You Provide

When you contact us through our contact form, we collect:

• Name
• Email address
• Phone number (optional)
• Message content

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Analyze website traffic and user behavior
• Remember your cookie preferences
• Improve our website performance and user experience

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you accept cookies or submit the contact form
• Legitimate Interest: To analyze website traffic and improve our services
• Contract Performance: To respond to your inquiries and provide requested information

4. How We Use Your Information

We use the collected information for:

• Website Analytics: : Understanding how visitors use our site to improve user experience
• Communication: : Responding to your inquiries and providing customer support
• Service Improvement: : Identifying technical issues and optimizing website performance
• Business Development: : Understanding customer needs and improving our products/services
• Legal Compliance: : Meeting regulatory requirements and protecting our legal rights

5. Third-Party Services

5.1 Google Analytics

We use Google Analytics to analyze website traffic. Google Analytics uses cookies to collect information about your use of our website. This information is transmitted to and stored by Google on servers in the United States and other countries.

Data collected by Google Analytics includes:

• Pages visited and time spent
• Browser and device information
• Geographic location (country/city level only)
• Anonymized IP address

Important: We have enabled IP anonymization, which means Google Analytics anonymizes your IP address before processing. Google will use this information to evaluate your use of our website, compile reports on website activity, and provide other services relating to internet usage.

Learn more: Google Privacy Policy | Opt-out of Google Analytics

5.2 Data Transfer Outside the EU

Google Analytics may transfer your data to the United States. These transfers are protected by:

• Google's compliance with EU-US Data Privacy Framework
• Standard Contractual Clauses approved by the European Commission
• IP anonymization to minimize data transfer

6. Cookie Policy

6.1 Types of Cookies We Use

Necessary Cookies (Always Active)

• Cookie consent preferences
• Session management
• Security features

Analytics Cookies (Optional - Requires Consent)

• Google Analytics cookies (_ga, _gid, _gat)
• Duration: Up to 13 months
• Purpose: Website traffic analysis and user behavior insights

6.2 Managing Cookies

You can manage your cookie preferences at any time by:

• Clicking the "Cookie Settings" link in our website footer
• Adjusting your browser settings to block or delete cookies
• Using browser extensions to manage cookies

Note: Blocking necessary cookies may affect website functionality.

7. Data Retention

• Analytics Data: Retained for 13 months, then automatically deleted
• Contact Form Submissions: Retained for 3 years or until you request deletion
• Cookie Consent Records: Stored locally in your browser until you clear it

8. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

To exercise your rights, contact us at:
Email: info@cbesltd.com
We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS Encryption: All data transmitted to/from our website is encrypted
• Secure Servers: Data stored on secure, regularly updated servers
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Security Audits: Continuous monitoring for vulnerabilities
• Data Minimization: We only collect data that is necessary for our purposes

10. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will delete it.

11. International Data Transfers

As we use Google Analytics, your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. These transfers are protected by:

• Standard Contractual Clauses approved by the European Commission
• Google's participation in recognized data protection frameworks
• IP anonymization to minimize identifiable data transfer

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

Significant changes will be communicated through:

• A notice on our website homepage
• Updated cookie consent banner (if applicable)

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Bulgarian data protection authority: