1. Who we are
This privacy policy applies to the website briaproject.bg/en and the services of BRIAPROJECT Ltd — architecture studio, UIC 204591875, registered in Veliko Tarnovo, Bulgaria ("we", "us", "our").
- Contact email for data protection matters: office@briaproject.bg
- Phone: +359 885 778 667
2. What data we process
a) When you send an enquiry via the contact form
We collect: first and last name, email address, phone number (optional), and information about your project (type, location, budget, timeline, description).
b) When you visit the site
We do not use tracking or advertising cookies. Our hosting provider may record standard technical logs (IP address, browser type, date and time of visit) for security and infrastructure purposes only.
c) When we enter into a contract
In addition to the above, we process: correspondence address, identifying details from the architectural task (plot address, cadastral identifier), and payment data from invoices issued — all necessary for performance of the contract and compliance with Bulgarian tax and accounting law.
3. Why we process your data
- To respond to your enquiry — processing based on your explicit consent and our legitimate interest in replying.
- To perform the design contract — processing based on contract (Art. 6(1)(b) GDPR).
- To comply with our legal obligations — tax, accounting and professional obligations (Chamber of Architects registration).
4. Legal basis
The legal basis depends on the stage of our relationship:
- Consent (Art. 6(1)(a) GDPR) — when you submit the contact form.
- Contract (Art. 6(1)(b) GDPR) — if we enter into a design agreement.
- Legal obligation (Art. 6(1)(c) GDPR) — for tax and accounting records.
- Legitimate interest (Art. 6(1)(f) GDPR) — for the administration of our correspondence and the security of our systems.
5. How long we retain your data
- If you sent an enquiry but we have not entered into a contract — up to 12 months from our last contact, after which data is deleted or anonymised.
- If we have signed a contract — for the duration of the project plus 5 years after completion (statute of limitations under Bulgarian Obligations and Contracts Act) or a longer period where required by the Accounting Act.
6. Whom we share data with
We do not sell and do not rent personal data. Limited sharing may occur with:
- Engineering sub-consultants working on the specific project — only to the extent strictly necessary.
- Accounting firms — for invoicing and tax reporting.
- Hosting and email providers — technical infrastructure (Google Workspace, Formspree, SuperHosting.bg).
- Authorities, when required by law (NRA, MoI, courts, DPA, etc.).
7. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erasure ("right to be forgotten") where there is no legal basis for continued processing.
- Restrict processing in certain cases.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on our legitimate interest.
- Withdraw consent at any time (does not affect lawfulness of prior processing).
To exercise any of these rights, write to office@briaproject.bg. We respond within 30 days of receipt of the request.
8. Complaints
If you believe that your data-protection rights have been violated, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP):
- Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
- Email: kzld@cpdp.bg
- Website: cpdp.bg
9. Changes to this policy
We may update this policy from time to time. The latest version is always available at briaproject.bg/en/privacy.html. Material changes are marked with a "Last updated" date at the top of the document.