Privacy and Cookie Policy

Your privacy is important to us. This policy explains what personal data we collect through legatus.tech, why we collect it and what your rights are.

Who we are

Legatus is a product of IBS Bulgaria, 4 Pimen Zografski Str., 1172 Sofia, Bulgaria, which operates this website and is the controller of the personal data described here. You can reach us through the details on our Contacts page.

What we collect and why

You choose what personal data you give us. This happens when you:

• Contact us. When you send one of the forms on this website (Talk to an expert, Get in Touch or the partnership form), we use your name, business email address, company, job title, phone number, country, company website (partnership form) and the content of your message to answer you and to follow up on your request. The form also records which form you used, the page you sent it from and your country (derived from your network address).
• Book a call in the calendar. The Talk to an expert page shows the calendar of meet.ibs.bg, a service of IBS Bulgaria. The details you enter when booking are processed by IBS Bulgaria to arrange the meeting.
• Ask for an offer or become a customer. We use your details to prepare and fulfil the order or contract, and to support the products and services you obtained from us.
• Agree to hear from us. If you have given your permission, we may contact you about our products, services and events. You can tell us at any time that you no longer want this.

We may combine the information you give us with information from other sources, to keep it accurate and complete.

Cookies and protection of the forms

This website does not set cookies for analytics or advertising, and that is why it does not show a consent banner.

• Visit statistics. We count visits with Cloudflare Web Analytics, which does not use cookies and does not build profiles of individual visitors.
• Form protection. The forms are protected against automated submissions by Cloudflare Turnstile, which may process technical data about your browser and may set a cookie needed for that check. To limit repeated submissions we keep, for one hour, a counter linked to a one-way hash of your IP address. We do not store the IP address itself.
• Calendar. When the meet.ibs.bg calendar loads, the service sets one technical cookie needed for the calendar to work.
• Fonts and search. Fonts and the site search load from our own server, not from third-party services.

Technical data

When you visit the website, our hosting provider processes technical data such as your IP address, the time of the request and the page requested. This is needed to deliver the pages and to keep the site secure.

Who receives your data

Your data is handled by our employees who need it for the purposes above, and by suppliers who process it on our behalf and under our instructions. We require our suppliers to protect it from unauthorized access, use and disclosure. We do not sell personal data.

How we protect it

We apply physical, administrative and technical safeguards to protect personal data from unauthorized access, use and disclosure. Our information security and privacy management systems are certified to ISO/IEC 27001 and ISO/IEC 27701.

How long we keep it

Enquiries sent through the forms are stored in the European Union and are deleted automatically 12 months after they are received.

Other personal data is kept for as long as it is needed for the purpose it was collected for, and as long as the law requires, for example to meet our legal obligations, resolve disputes and enforce our agreements.

Your rights

Under the General Data Protection Regulation you have the right to:

• ask what personal data we hold about you and receive a copy,
• have inaccurate data corrected,
• have your data erased or its processing restricted, where the law allows,
• object to processing, including to direct marketing,
• withdraw a consent you have given,
• receive your data in a portable format.

To use any of these rights, contact us through the details on our Contacts page. You also have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria.

Links to other websites

Our site links to other websites, including the sites of IBS Group and of our partners, and to social media. Each of them has its own privacy policy, and we are not responsible for how they handle your data.

Changes

We update this policy when the website or the law changes. The current version is always on this page, with the date of the last update.