Privacy Policy

This privacy policy describes how 3MG Bonev EOOD collects, uses and protects its customers' personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act.

1. Personal data collected

1.1. Identification data:

• First name, surname or company name
• Email address
• Telephone number
• Delivery address
• UIC/personal identification number (EGN) (where required for invoicing)

1.2. Technical data:

• IP address and time of the request, recorded in the server logs when a form is submitted
• Browser type and operating system

1.3. Data from the website forms:

• Contact form: name, email, telephone (optional), subject and message
• Newsletter: email address and date of subscription

The website does not use analytics, advertising or tracking cookies. See the cookie policy.

1.4. Project data:

• 3D files and models
• Technical specifications
• Communications relating to projects

2. Purposes of processing

2.1. Performance of a contract:

• Processing and fulfilling orders
• Communicating with customers
• Delivering products and services
• Invoicing and accounting operations

2.2. Legal requirements:

• Accounting and financial reporting
• Tax obligations
• Archiving of documents

2.3. Legitimate interests:

• Improving our services
• Technical maintenance of the website
• Website security and abuse prevention (for example, automated spam)

3. Legal basis

We process personal data on the following grounds:

• Performance of a contract - to provide our services
• Consent - for marketing communications (optional)
• Legal obligation - for accounting and archiving
• Legitimate interest - to improve our services

4. Sharing of data

Your personal data may be shared with:

• Amazon Web Services EMEA SARL - website hosting and delivery of the messages sent through the forms (servers in Frankfurt, Germany)
• Google - receipt of email correspondence (Google Workspace)
• Courier companies - for delivery of orders
• Accounting firms - for financial reporting
• Banks - for processing payments
• Public authorities - where required by law

We do not sell or rent personal data to third parties for marketing purposes.

5. Retention period

• Contractual data: 5 years after the end of the relationship
• Accounting documents: 10 years (statutory requirement)
• Marketing consents: until consent is withdrawn
• Technical logs (IP address): up to 90 days, for security
• Contact form messages: until the enquiry and the related correspondence are concluded
• Newsletter subscription: until you unsubscribe
• 3D files: deleted after completion of the project (unless otherwise agreed)

6. Your rights

Under the GDPR you have the following rights:

• Access - to obtain a copy of your personal data
• Rectification - to correct inaccurate data
• Erasure - to request erasure under certain conditions
• Restriction - to restrict processing
• Portability - to receive your data in a structured format
• Objection - to object to processing
• Withdrawal of consent - at any time

To exercise your rights, please contact us at info@3mgbonev.com

7. Security measures

We apply appropriate technical and organisational measures to protect your data:

• Encryption of data in transit
• Access restricted to authorised persons only
• Regular backups
• Anti-virus protection and firewalls
• Staff training in data protection

8. Changes to this policy

We reserve the right to update this policy. Significant changes will be communicated via the website or by email. The latest version is always available on our website.

Complaints and contact

For questions about the processing of personal data:
Email: info@3mgbonev.com
Phone: +359 885 636 868

You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) (www.cpdp.bg)