Privacy and cookies

• No registration. We receive an email address and name only if you write to us through the contact form.
• No tracking, advertising or analytics cookies, and no third-party tracking scripts.
• Like any website, the hosting provider logs technical request data (such as the IP address) to operate and protect the site.

• Operator: НК-ГРУП ООД
• Company ID (EIK): 206493160
• VAT number: BG206493160
• Address: България, гр. Пловдив (4023), район Тракия, ж.к. Тракия 220, ет. 3, ап. 10
• Email: developer@nkgroupltd.eu

For questions and requests about personal data, write to developer@nkgroupltd.eu.

Each page request is processed by the hosting provider’s servers (GoDaddy): IP address, date and time, requested URL, browser and device (user agent) and referring page. This is needed to deliver the page, for security (e.g. protection against attacks) and to find errors. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in keeping the site running and secure. These logs are kept for a short period set by the provider and are not used for profiling or advertising.

The language (Bulgarian or English) is chosen from your browser setting and the page address; no cookie is stored.

The public site sets no cookies. Cookies are used only in the admin area, to sign administrators in. They are strictly necessary and need no consent (Bulgarian Electronic Communications Act, Art. 4a), which is why there is no cookie banner.

When you send a message through the contact form, we store in our database: your email, your name (if given), the topic, the text, the site language and the page you came from. We also store a one-way cryptographic fingerprint (hash) of your IP address — not the address itself — only to limit spam (up to 5 messages an hour). If you email us, we process your address and message.

We use this only to reply. Only the site’s administrators can access it. Legal basis: legitimate interest in answering enquiries (GDPR Art. 6(1)(f)). Messages are deleted automatically after 2 years, or earlier if you ask.

The price data we store contains retailer names and shop addresses as published by KZP under the Euro Introduction Act. Where a retailer is a sole trader (ET), the business name may include a natural person’s name. The site shows only the retailer’s name and the city — to make clear whose prices are presented — and no addresses. Legal basis: legitimate interest and the public interest in price transparency (GDPR Art. 6(1)(f)); the data is already public. If this concerns you, you may object — write to us and we will consider the request.

• GoDaddy — website hosting (server: САЩ (Аризона) / USA (Arizona)). The server is outside the EU, so technical request data and messages sent through the form pass through the US. The transfer relies on standard contractual clauses and/or the EU–US Data Privacy Framework. Privacy policy
• Supabase Inc. — database (Франкфурт, ЕС / Frankfurt, EU). It holds the price data, administrator accounts and contact-form messages. Privacy policy

We do not sell or share data with third parties for marketing.

You have the right of access, rectification, erasure and restriction, to object to processing based on legitimate interest, and to data portability where applicable. We reply within one month. You may lodge a complaint with the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.

If the way we process data changes, we will update this page and the date at the top. See also the terms of use.