Skip to Content

Privacy policy

Effective from the date of its publication on the website.

1. Who we are

The controller of personal data is Fixpoint BG EOOD, UIC 200137862, registered office: 1 Baba Iliytsa St, 1612 Sofia, Bulgaria. Contact us about personal data at office@fixpoint.bg, phone +359 888 233 967.

2. What data we collect

  • Contact data from the website forms: name, company, email, phone, content of the request.
  • Data about customers and their representatives: name, position, email, phone, billing details.
  • Data about system users: name, email, login data and actions in the system.
  • Technical data when you visit the website: IP address, browser type, cookies (see the Cookie policy).

3. Why we use them and on what legal basis

  • Replying to requests and arranging demos – based on your consent and on steps taken before entering into a contract (Art. 6(1)(a) and (b) GDPR).
  • Performance of the contract: providing the service, support, invoicing – Art. 6(1)(b).
  • Accounting and tax obligations – Art. 6(1)(c).
  • System security and prevention of abuse – legitimate interest, Art. 6(1)(f).

4. Data we process on behalf of our customers

Data that our customers enter into their Fixpoint instances (for example about their customers, employees and suppliers) is processed by us as a processor, only on the customer’s instructions and under a data processing agreement that forms part of the Terms and conditions.

5. How long we keep data

  • Requests not followed by a contract – up to 12 months.
  • Contract data – for the term of the contract and up to 5 years after it.
  • Accounting documents – 10 years, as required by the Bulgarian Accountancy Act.
  • Data in the customer’s instance – up to 30 days after the contract ends, after which it is deleted.
  • Backup copies – 7 days, or longer if the customer has chosen extended retention.

6. Who we share data with

With our hosting provider The Three Ltd. (servers in Bulgaria), our accountant, and public authorities where the law requires it. We do not sell personal data and do not transfer it outside the European Economic Area.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent at any time. We reply within one month. You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection, www.cpdp.bg.

8. Security

We use an encrypted connection, separate databases for each customer, role-based access control, daily backups and a change log.

9. Changes

We may update this policy. The current version is always on this page, with its effective date.