Privacy Policy
PRIVACY POLICY
of the website of Andrey Novakov
Last updated: 10.16.2026
1. Introduction
This Privacy Policy describes how your personal data is collected, processed, stored, and protected when using the website [SITE URL] (hereinafter referred to as “the Website”). This document has been prepared in accordance with the requirements of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), the Law on Personal Data Protection (LPDP), and applicable Bulgarian legislation.
By using the Website, filling out forms, subscribing to the newsletter, or sending us a message, you confirm that you are familiar with this Policy.
2. Data Controller
The controller of the personal data collected through the Website is:
- Name: [CONTROLLER NAME]
- Mailing address: [ADDRESS]
- Email: [EMAIL ADDRESS]
- Phone: [PHONE NUMBER]
For questions related to the protection of personal data, you can contact us at the coordinates provided above.
3. What personal data we collect
Through the Website, we collect only the data that you voluntarily provide to us, as well as limited technical information necessary for the functioning of the site.
3.1. Data that you provide to us
- When subscribing to the newsletter: email address, and optionally – your name.
- When sending a message via the contact form: name, email address, phone (optional), content of the message.
- When commenting or participating in initiatives: name/pseudonym, email address, and the content of what you have sent.
3.2. Data collected automatically
- Technical data: IP address, browser type and operating system, language, date and time of visit, pages visited, referring page.
- Cookie data: according to the “Cookies” section below.
We do not knowingly collect special categories of personal data (e.g., data on political views, health status, ethnic origin, etc.) unless you voluntarily provide them in the content of a message to us.
4. Purposes and legal grounds for processing
We process your personal data for the following purposes and on the following grounds according to Art. 6 of the GDPR:
a) Sending an electronic newsletter
- Purpose: to inform you about news, initiatives, positions, and activities from the European Parliament and the work of Andrey Novakov.
- Legal basis: Your explicit consent (Art. 6, para. 1, point (a) of the GDPR), which you may withdraw at any time.
b) Processing of inquiries and feedback
- Purpose: to respond to your questions, suggestions, reports, or requests sent via the contact form or email.
- Legal basis: legitimate interest to respond to civic correspondence (Art. 6, para. 1, point (f) of the GDPR), and in certain cases – your consent.
c) Functioning and security of the Website
- Purpose: technical maintenance, protection against abuse, traffic analysis, content improvement.
- Legal basis: legitimate interest (Art. 6, para. 1, point (f) of the GDPR).
d) Compliance with legal obligations
- Purpose: fulfillment of obligations arising from applicable Bulgarian and European legislation.
- Legal basis: legal obligation (Art. 6, para. 1, point (c) of the GDPR).
5. Retention periods
We store your personal data only for as long as necessary to achieve the purposes for which it was collected and in accordance with applicable legislation:
- Newsletter subscribers: until withdrawal of your consent or termination of the newsletter.
- Correspondence (inquiries, messages): up to 2 (two) years after the completion of communication, unless a longer period is necessary for the protection of legal claims.
- Technical logs: up to 12 months.
- Cookies: according to the periods specified in the “Cookies” section.
After the expiration of the relevant period, the data is deleted or anonymized in a secure manner.
6. Data recipients and third parties
We do not sell or provide your personal data to third parties for advertising purposes. Access to the data may be granted to:
- The hosting service provider: Hostinger International Ltd., in the capacity of a data processor.
- Newsletter service provider: [NAME, e.g., Mailchimp / Brevo / other], if such is used.
- Technical partners: persons who maintain, develop, and administer the Website, bound by confidentiality obligations.
- Competent authorities: when required by law (court, prosecutor’s office, CPDP, etc.).
All data processors act only on our instructions and based on concluded contracts, guaranteeing the level of protection required by the GDPR.
7. Data transfer outside the EU/EEA
In principle, your data is processed within the territory of the European Union. In cases where we use providers processing data outside the EU/EEA (e.g., cloud services), this is done only in the presence of appropriate safeguards within the meaning of Art. 44–49 of the GDPR – standard contractual clauses approved by the European Commission, or a decision on an adequate level of protection.
8. Your rights
As a data subject, you have the following rights under the GDPR:
- Right to information about the processing of your personal data.
- Right of access to the personal data stored about you.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) under the conditions of Art. 17 of the GDPR.
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
- Right to lodge a complaint with a supervisory authority.
You can exercise your rights by sending us a request via email: [EMAIL ADDRESS]. We respond within one month of receiving the request.
Supervisory authority in the Republic of Bulgaria: Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., tel.: 02/91-53-518, email: kzld@cpdp.bg, website: www.cpdp.bg.
9. Cookies
The Website uses cookies and similar technologies to ensure its proper functioning and to improve the user experience.
- Strictly necessary cookies: ensure basic functions of the site and cannot be switched off.
- Functional cookies: remember your preferences (language, settings).
- Analytical cookies: help us understand how the site is used (e.g., through Google Analytics or similar).
- Marketing cookies: used only with your explicit consent.
Upon your first visit, you are given the opportunity to accept or refuse the use of cookies that are not strictly necessary. You can manage settings at any time through the cookie banner or your browser settings.
10. Data security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including encrypted connection (SSL/TLS), access control, and periodic security reviews.
In the event of a personal data security breach, we will take the necessary actions according to the GDPR, including notifying the supervisory authority and the affected persons, where applicable.
11. Data of persons under 16 years of age
The Website is not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If we determine that we have received data from a person under 16 without parent/guardian consent, we will delete it immediately.
12. Links to external websites
The Website may contain links to social networks (Facebook, X/Twitter, Instagram, YouTube) and other external sites. We are not responsible for the privacy policies of these third parties and recommend that you familiarize yourself with their respective policies.
13. Changes to the Privacy Policy
We reserve the right to update this Policy at any time. The current version is always available on this page. Material changes will be published on the Website and – where applicable – will be communicated to you by email.
14. Contacts
For any questions, requests, or complaints related to the processing of your personal data, you can contact us: