1. Who We Are
e Decor ltd. Sofia, Bulgaria, BG207452580 Email: contact@extradata.io
For the purposes of GDPR, e Decor ltd acts as the "data controller" for personal data collected through our website and business relationships, and may act as a "data processor" when handling client data as part of our consulting and analytics services (governed separately by client contracts / Data Processing Agreements).
2. What Personal Data We Collect
Depending on how you interact with us, we may collect:
Information you provide directly:
Name, email address, phone number
Company name and job title
Messages, inquiries, or information submitted through contact forms
Information shared during consultations or project engagements
Information collected automatically:
IP address, browser type, device information
Website usage data (pages visited, time on site, referral source)
Cookies and similar tracking technologies (see Section 7)
Client project data: When providing services such as data integration, transformation, or analytics, we may process data on behalf of our clients. This data is handled according to the terms of the relevant service agreement or Data Processing Agreement (DPA), and is not used for our own purposes beyond delivering the contracted service.
3. How We Use Your Data
We use personal data for the following purposes:
To respond to inquiries and provide requested information
To deliver, manage, and improve our services
To communicate about projects, proposals, and ongoing engagements
To send updates, insights, or marketing communications (only with your consent, where required)
To maintain the security and functionality of our website
To comply with legal and regulatory obligations
4. Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
Consent — where you have explicitly agreed (e.g., subscribing to updates)
Contract — where processing is necessary to perform a service you've requested or a contract we've entered into
Legitimate interests — where processing supports our business operations in ways that don't override your rights (e.g., basic website analytics)
Legal obligation — where we're required to process data to comply with the law
5. How We Share Your Data
We do not sell personal data. We may share data with:
Service providers and subprocessors who support our operations (e.g., cloud hosting, data platforms such as Snowflake, Databricks, or AWS/Azure, email and communication tools) — each bound by contractual confidentiality and data protection obligations
Professional advisors (legal, financial) where necessary
Authorities where required by law, regulation, or legal process
Any subprocessors used to deliver client analytics or integration services will be disclosed as part of the relevant service agreement.
6. International Data Transfers
As some of our tools and service providers may store or process data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place for any such transfers, such as Standard Contractual Clauses (SCCs) or reliance on adequacy decisions recognized under GDPR.
7. Cookies
Our website may use cookies and similar technologies to:
Enable core website functionality
Understand how visitors use our site (analytics)
Improve user experience
You can control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, meet contractual obligations, or comply with legal requirements. Client project data is retained according to the terms agreed in the applicable service contract, and deleted or returned upon request or contract termination, unless otherwise required by law.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration — including access controls, encryption where applicable, and secure data handling practices consistent with the sensitivity of the data we process.
10. Your Rights Under GDPR
If you are located in the EU/EEA, you have the right to:
Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), where applicable
Restrict processing under certain circumstances
Object to processing based on legitimate interests or direct marketing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at [privacy@yourcompany.com]. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), or your local supervisory authority.
11. Children's Privacy
Our services are intended for businesses and professional use. We do not knowingly collect personal data from individuals under the age of 16.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision. Significant changes will be communicated where appropriate.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us at:
e Decor ltd. Sofia, Bulgaria, BG207452580 Email: contact@extradata.io