Privacy policy
Last updated: 7 October 2026
We collect only the data we need to answer your enquiry and look after your system. This page explains what it is, why we use it, how long we keep it and what rights you have.
Text in square brackets will be filled in with the company's details.
Data controller
[Company name], company ID [Company ID (EIK)], registered at [Registered address], represented by [Managing director].
For any question about personal data: office@activesolar-energy.com, +359 988 705 460.
What we collect
From the enquiry, request and calculator forms:
- name, phone, email, town
- delivery address and company, if you give them
- your message and any equipment you selected
- your calculator inputs and result
- a referral code
- how you reached the site (for example a Facebook ad), if the link shows it
- technical information at submission (IP address, browser) for spam protection
From the client portal: your account details, sites, installed equipment with serial numbers and warranties, documents, the history of work done, fault reports with photos, requests and referrals.
Why we use it and on what basis
- to answer your enquiry and prepare a quote: steps taken at your request (Art. 6(1)(b) GDPR)
- to run your portal account, warranties and servicing: Art. 6(1)(b) GDPR
- to send service emails (confirmations, fault status, service reminders): Art. 6(1)(b) and (f) GDPR
- to meet accounting and tax obligations: Art. 6(1)(c) GDPR
- to see which ad or link brought you to us: legitimate interest (Art. 6(1)(f) GDPR)
- only if you accepted Meta cookies: to measure our ads with the Meta Pixel and send Meta hashed data from your enquiry (see "Ad measurement"): your consent (Art. 6(1)(a) GDPR)
- to protect the site from abuse: legitimate interest (Art. 6(1)(f) GDPR)
We don't send marketing newsletters and we never sell data.
How long we keep it
- enquiries that did not lead to work: up to 24 months after the last contact
- portal account and system data: while the account is active and until the last warranty expires
- accounting records: as long as the Bulgarian Accountancy Act requires
- security logs: up to 90 days
Who else processes the data
We use trusted providers that process data only on our instructions:
- Neon (Neon Inc.): the database that stores enquiries and accounts
- Cloudinary (Cloudinary Ltd.): storage of photos and documents
- Resend (Resend Inc.): email delivery
- Vercel (Vercel Inc.): website hosting
Some providers are outside the EU. Transfers rely on standard data protection clauses approved by the European Commission or an adequacy decision.
Ad measurement (Meta)
Only if you accepted Meta cookies, when you send an enquiry we pass to Meta Platforms Ireland Ltd. (Dublin, Ireland): your phone number and, if you gave them, your email and town, hashed (encoded with SHA-256, not in readable form); your IP address and browser; the identifiers from the _fbp and _fbc cookies; the type of enquiry and the page it was sent from. Meta matches them against its own data and shows us how many enquiries came from our Facebook and Instagram ads. We don't send your name, message or address.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time from "Cookie settings" at the bottom of every page. Withdrawal applies from then on. Without consent your enquiry is handled as usual and nothing is sent to Meta.
We and Meta are joint controllers for collecting and transmitting this data. Meta's further processing follows its own privacy policy (facebook.com/privacy/policy). Meta may transfer data to the US under the EU–US Data Privacy Framework.
Your rights
You have the right:
- to access your data
- to have it corrected
- to have it erased
- to restrict processing
- to data portability
- to object to processing based on legitimate interest
- to withdraw consent at any time
Write to us at office@activesolar-energy.com. We reply within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).
Security
The site runs over HTTPS only. Portal passwords are stored hashed, never in readable form. Only our own team can access the data.
Changes
When this policy changes we update this page and the date at the top. For a significant change we'll email customers who have an account.