Privacy Policy
Last updated: 11 October 2026
This policy describes how Global One Ltd processes the personal data of visitors to the globalone.bg website and of the persons who contact us through it, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Bulgarian Personal Data Protection Act.
1. Data controller
Global One Ltd, Company ID 175293707, VAT BG175293707
Address: 9 Arch. Nikola Lazarov St., 1434 Sofia, Bulgaria
Email: office@globalone.bg
Phone: +359 889 23 22 21
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form / enquiry | Name, email, phone, company, subject and message text | Responding to the enquiry and preparing a quote | Art. 6(1)(b) GDPR – steps at the request of the data subject prior to entering into a contract |
| Customer portal (login) | Name, email, login details, company, documents and requests under the contract | Performance of a contract, access to invoices, tickets and contract documents | Art. 6(1)(b) and (c) GDPR |
| Warranty check | Device serial number and contact details, if you provide them | Checking warranty status and servicing | Art. 6(1)(b) GDPR |
| Visiting the website | IP address, browser, device, pages visited, date and time (server logs and cookies) | Security, abuse prevention, operation of the website | Art. 6(1)(f) GDPR – legitimate interest |
| Analytics cookies (Google Analytics) | Pseudonymised data about behaviour on the website | Statistics and improvement of the website | Art. 6(1)(a) GDPR – consent via the cookie banner |
Detailed information about the cookies we use is published in our Cookie Policy. You can withdraw your consent at any time from your browser settings.
3. Recipients of the data
We do not sell personal data. We share it only with:
- hosting and IT infrastructure providers processing the data on our behalf and under our instructions;
- Google Ireland Ltd. (Google Analytics) – only with consent to analytics cookies;
- manufacturers and service partners – for warranty or servicing of equipment we supplied;
- public authorities, where the law obliges us.
When data is transferred outside the European Economic Area (for example to Google) we rely on the European Commission’s standard contractual clauses or an adequacy decision.
4. Retention period
- Enquiries via the contact form – up to 12 months after the end of the communication, if no contract follows.
- Contract and invoice data – for the term of the contract and 10 years after its end under the Accountancy Act and the Tax and Social Security Procedure Code.
- Server logs – up to 12 months.
- Analytics data – for the period stated in the Cookie Policy (up to 26 months).
5. Your rights
As a data subject you have the right to:
- access your personal data and obtain a copy (Art. 15 GDPR);
- rectification of inaccurate data (Art. 16);
- erasure (“right to be forgotten”) where the conditions of Art. 17 are met;
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, write to us at office@globalone.bg. We will reply within one month. If you believe your rights have been infringed, you may lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
6. Security
We apply appropriate technical and organisational measures to protect the data – encrypted connection (HTTPS), access control, backups and restriction of access to the employees who need it.
7. Automated decision-making
We do not use personal data for automated decision-making or profiling with legal effects on you.
8. Changes to this policy
We may update this policy when our services or the law change. The current version is always published on this page with the date of the last update.