Privacy Policy

Last updated: 8 October 2026

This privacy policy explains what personal data we collect, why we collect it, who we share it with, and what rights you have. We try to keep it short and clear. If something is not clear, write us at [email protected].

Who we are

This website and the services described on it are operated by Federer90 EOOD, a company registered in Bulgaria with company number 206957220 ("Business in Bulgaria", "we", "us").
We are the controller of your personal data under the EU General Data Protection Regulation (GDPR) and Bulgarian data protection law.
Contact for all privacy questions: [email protected]

What data we collect

When you visit the website
Technical data such as your IP address, browser type, device, pages visited and time of visit. Some of this is collected through cookies, and only with your consent where consent is required (see "Cookies" below).
When you contact us
Your name, email address, phone number if you give it, your country, and the information you write in your message about your business and plans.
When you become a client
To provide our services and to meet our legal obligations, we may collect: identity documents (passport or ID card), date of birth, nationality, home address, contact details, information about your business, ownership and planned activity, information about the source of funds, bank and tax details, and documents about companies you own. If you use our immigration support, we may also need information about your family members, residence and travel history.
We only ask for what is needed for the service you request.

Why we use your data and on what legal basis

To answer your inquiry and prepare an offer. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
To provide our services, such as company registration, bank account preparation, accounting coordination, VAT and residence permit support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
To meet legal obligations, including anti-money laundering checks, identification of clients and beneficial owners, and keeping records as required by Bulgarian law. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
To keep the website secure and working well, and to protect our legal rights. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
To measure website use and our advertising, through Google Analytics and Google Ads. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
We do not sell your personal data, and we do not make decisions about you based only on automated processing.

Who we share your data with

We share personal data only when needed to provide the service or when the law requires it:
Notaries, lawyers, accountants and other independent professionals we work with on your case.
Banks, when you ask us to help with a bank account application.
Public authorities, such as the Registry Agency (Commercial Register), the National Revenue Agency, migration authorities and other institutions, when a filing is part of the service.
Translators and apostille services, when documents need translation or legalisation.
Service providers who support our work, such as website hosting ([hosting provider]), email ([email provider]), and Google (Analytics and Ads, only with your consent).
All of them receive only the data they need, and our service providers process it only on our instructions.

Transfers outside the EU

Some service providers, for example Google, may process data outside the European Economic Area, including in the United States. In these cases the transfer is protected by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission's Standard Contractual Clauses.

How long we keep your data

Inquiries that do not lead to a contract: up to [12] months after our last contact, then deleted.
Client files: for the time of our cooperation and after that for as long as the law requires. Anti-money laundering records are kept for at least 5 years after the end of the business relationship, and accounting documents for the periods set by the Bulgarian Accountancy Act.
Analytics data: according to the retention settings of Google Analytics, at most [14] months.
When data is no longer needed, we delete it or make it anonymous.

Cookies

Necessary cookies are always active. They keep the website secure, make forms work and remember your cookie choice.
Analytics cookies (Google Analytics) and advertising cookies (Google Ads) are used only if you accept them. You can choose each type separately and change your choice at any time through "Cookie preferences" at the bottom of every page. Your choice is remembered for six months.

How we protect your data

We use secure connections (HTTPS), access controls and trusted service providers. Client documents are shared only with the people who need them for your case. No system is 100% secure, but we take reasonable technical and organisational measures to protect your data.

Your rights

Under the GDPR you have the right to:
access the personal data we hold about you,
ask us to correct data that is wrong or incomplete,
ask us to delete your data, when there is no legal reason for us to keep it,
ask us to restrict the processing of your data,
receive your data in a common electronic format (data portability),
object to processing based on our legitimate interests,
withdraw your consent at any time, without affecting the processing done before.
To use any of these rights, write us at [email protected]. We will answer within one month. We may ask you to confirm your identity first.
You also have the right to file a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg), or with the data protection authority in the EU country where you live or work.

Children

Our website and services are for adults. We do not knowingly collect personal data from people under 18, except for data about family members that a client gives us for a residence permit application.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. For important changes we will inform our clients directly.