GDPR Compliance Statement
DiPiGi Ltd. is committed to safeguarding user privacy and complying with the European Union General Data Protection Regulation (GDPR).
1. Data Controller Contact Information
DiPiGi Ltd. acts as the Data Controller for personal data provided through dipigi.com, dipigi.bg, telephone calls, or other direct communications. You can contact us at:
- Address: Lazur 76, 8000 Burgas, Bulgaria
- Email: office@dipigi.com
- Phone: +359 877 25 6944
2. Lawful Basis for Processing
We may process your name, email address, phone number, service of interest, and message when you use our contact form. The applicable lawful basis depends on the context and may include taking steps at your request before entering into a contract or handling a business inquiry. We will request consent where it is required for a separate purpose.
- Pre-contractual steps: To respond to a request for information, discuss a project, or prepare for a potential service agreement.
- Business correspondence: To review and respond to inquiries and maintain related communications.
3. Your Rights as a Data Subject
Under Chapter III of the GDPR, you have rights regarding your personal information, including:
- Access: Request copies of your personal data held by us.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, where applicable.
- Restriction: Request that we restrict processing of your data.
- Data portability: Request transfer of your data to another organization, where applicable.
- Withdraw consent: Withdraw consent at any time where processing is based on consent.
You may also have the right to object to or request restriction of processing and to lodge a complaint with your local data-protection supervisory authority.
4. Data Security & Retention
We implement technical and organizational security measures, including HTTPS encryption, to help prevent unauthorized access, loss, or disclosure of personal data. Contact-form submissions are sent to our office email so that we can respond; email and infrastructure providers may process the information as needed to deliver and store those communications. Data is retained only as long as necessary to fulfill the purposes for which it was collected or to comply with statutory legal retention requirements.