This policy explains what personal data Denwave Ltd. („Денуейв“ ООД) processes when you visit denwave.org, send us an inquiry or commission a design, why we use it, how long we keep it and what your rights are. We process data in line with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
1. Who processes your data
- Denwave Ltd. („Денуейв“ ООД), company ID (EIK) 207723073, VAT No. BG207723073
- Registered office: 60 Kosta Lulchev St., entr. B, fl. 7, apt. 35, Slatina district, 1574 Sofia, Bulgaria
- Correspondence address: 8 Akademik Yordan Trifonov St., Studentski Grad, 1700 Sofia, Bulgaria
- Email: office@denwave.org, phone: +359 89 232 3748
The company is not required to appoint a data protection officer. For any questions about your personal data, please email us.
2. What data we collect
When you send an inquiry through the website form, by email or by phone: your name, phone and email, city and type of project, the description you send us, and the page the inquiry was sent from.
When you commission a design – the data needed for the contract, invoicing and the design itself: names or company name, billing details, property address and identifier, title documents, site plans, design permits, utility connection data, survey and architectural drawings and other documents you provide.
When you browse the website – technical data: IP address, browser and device type, pages visited and time of visit. It is recorded in the server and security logs. For overall visit counts we use Koko Analytics, a tool that runs entirely on our server, sets no cookies and shares no data with third parties. To avoid counting a visit twice, an anonymous identifier is derived from the IP address and browser; it changes every day and is not stored, and the IP address itself is not kept. If you consent to statistics cookies, data about your visit (pages viewed, device type, approximate location based on IP address) is also collected through Google Analytics.
We do not collect sensitive data and ask you not to include it in your inquiries.
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Replying to inquiries, preparing offers | (b) – steps taken at your request before entering into a contract |
| Carrying out the design, approvals by the municipality and water utility, project communication | (b) – performance of a contract |
| Invoicing and accounting | (c) – legal obligation (Accountancy Act, VAT Act) |
| Overall visit statistics without cookies (Koko Analytics) | (f) – legitimate interest |
| Visit statistics (Google Analytics) to improve the website | (a) – your consent given through the cookie banner |
| Website security, preventing abuse and spam | (f) – legitimate interest |
| Defending legal claims | (f) – legitimate interest |
We do not use your data for advertising, do not sell it and do not make automated decisions that affect you.
4. How long we keep data
- Inquiries that did not lead to a contract – up to 12 months after our last correspondence;
- Contracts, invoices and accounting records – for the periods required by the Accountancy Act (up to 10 years);
- Design documents – as long as needed to meet our obligations as designers and to defend possible claims, within the statutory periods;
- Technical logs – for a short period, usually up to 90 days;
- Cookies – for the periods listed in section 6.
5. Who we share data with
Your data is accessible only to the company staff working on your inquiry or project. We share it only where necessary with:
- the municipality, water utility and other approving authorities – for approvals of the design;
- designers of other project parts (architect, structural engineer, etc.) and subcontractors – as far as needed for the project;
- our accountant – for invoicing;
- technical service providers – website hosting and email, acting only on our instructions;
- public authorities – where required by law.
Some service providers (for example the email service) may process data outside the European Union. Such transfers rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework) or standard contractual clauses.
6. Cookies and external resources
| Cookie | Purpose | Duration |
|---|---|---|
pll_language | Remembers the selected language. Necessary for the website to work. | 1 year |
cmplz_* | Remember your choice in the cookie banner. Necessary. | 365 days |
_ga, _ga_* | Google Analytics – distinguish visitors for statistics. Set only if you accept statistics cookies. | up to 2 years |
wordpress_*, wp-settings-* | Only for users logged in to the website admin – not set for ordinary visitors. | session / 1 year |
The website loads Google Tag Manager, a tool that sets no cookies itself and starts Google Analytics only after you consent. Google Analytics data is processed by Google Ireland Ltd. and may be transferred to the USA under the EU–US Data Privacy Framework. To load the font and some images, your browser also connects to Google Fonts (fonts.gstatic.com) and Unsplash (images.unsplash.com), which receive your IP address. The office map link opens Google Maps – data is sent to Google only if you open it.
On your first visit we ask whether you accept statistics cookies. You can change your choice at any time with the „Manage consent“ button in the bottom corner of the page. Details on each cookie are in the Cookie policy. The website does not use advertising cookies.
7. Your rights
- access to your data and a copy of it;
- rectification of inaccurate data;
- erasure when there is no longer a reason to keep the data;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interest;
- withdrawal of consent where processing is based on consent.
To exercise your rights, email us at office@denwave.org. We reply within one month. You can also lodge a complaint with the Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg.
8. Security
The website runs entirely over a secure connection (HTTPS) and access to its admin area is restricted and protected. Project documents are accessed only by the people working on them.
9. Changes
We may update this policy when we change how we run the website or handle data. The current version is always on this page.
Last updated: 14 October 2026