IFKEES LTD, Skat Blvd. 1, fl. 5, ap. 13 E, Sveti Vlas 8256, Burgas, Bulgaria (EIK: 208715371, VAT: BG208715371), operates as data controller pursuant to GDPR Article 4(7).
This policy governs processing of personal data collected through the website knstn.com, including but not limited to contact form submissions. Processing is undertaken pursuant to Article 6(1)(a) GDPR (consent via form submission) and Article 6(1)(f) GDPR (legitimate interests in responding to inquiries and maintaining site security).
Upon submission of the contact form, the following personal data is collected: name, email address, project category, and message content. Processing duration is limited to the period necessary to respond to the inquiry, not exceeding six months unless extended by explicit user consent or legal obligation.
Cloudflare Web Analytics collects hashed IP addresses, device type, browser information, and page visit patterns. This service operates in compliance with GDPR requirements and does not utilize traditional HTTP cookies.
Cloudflare Turnstile may process device identifiers for form spam prevention. Processing is conducted by Cloudflare Ireland Limited subject to their Data Processing Agreement.
Contact form data is transmitted to forms.ifkees.com for processing and delivery. Analytics data is processed by Cloudflare, Inc. (US) and Cloudflare Ireland Limited (EU). Both processors maintain Standard Contractual Clauses pursuant to GDPR Chapter V. No data is shared with unaffiliated third parties or for commercial purposes.
Data subjects retain the following rights under GDPR Chapter III:
Exercise of these rights requires written request to office@ifkees.bg. Verification of identity may be required. Requests shall be processed within 30 days or such period as permitted by Article 12 GDPR.
Personal data is protected through encryption in transit (TLS 1.3), secure server infrastructure, and access controls limiting processing to authorized personnel. The data controller implements technical and organizational measures pursuant to Article 32 GDPR appropriate to the processing risk level.
Processing by US-based processors (Cloudflare, Inc.) is governed by Standard Contractual Clauses (EU 2021/914) and Cloudflare's participation in EU-US Data Privacy Framework. See https://www.cloudflare.com/en-gb/privacypolicy/.
Contact form data is deleted within 180 days of submission unless additional retention is required by law or authorized by the data subject. Analytics data is aggregated and anonymized within 30 days. Users may request immediate deletion via office@ifkees.bg.
This policy may be updated at any time. Continued use of the website constitutes acceptance of current policy terms. Material modifications shall be announced on this page.
Inquiries concerning data processing compliance may be directed to the Commission for Personal Data Protection (CPDP), Sofia, Bulgaria. See www.cpdp.bg.
office@ifkees.bg