Privacy Policy

1. Who we are (data controller)

The controller responsible for your personal data is Oddwox Ltd. (Одуокс ЕООД), a company registered in the Republic of Bulgaria under UIC 208934664 (VAT BG208934664), with its registered office at 19 Maragidik Street, 8000 Burgas, Bulgaria, trading as "Oddwox".

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. For any question about this policy or your data, contact us at info@oddwox.com.

2. The personal data we collect

Contact form — when you submit the form on our site, we collect the name, email address, company (optional) and message you provide.

Call bookings — when you book a call, our scheduling provider collects the details you enter, such as your name, email address and the time slot you select.

Technical data — our hosting provider automatically processes limited technical information (such as your IP address, browser type and the pages you request) in server logs, to deliver the site securely. We do not operate advertising or analytics tracking on this site.

3. Why we use your data and our legal basis

To respond to your enquiry and to prepare for and hold the call you request — legal basis: steps taken at your request prior to entering a contract and/or performance of a contract (Article 6(1)(b) GDPR), supported by our legitimate interest in communicating with people who contact us (Article 6(1)(f)).

To keep our website secure and functioning — legal basis: our legitimate interest in the security and integrity of our site (Article 6(1)(f)).

To keep business and accounting records — legal basis: compliance with our legal obligations (Article 6(1)(c)).

4. Do you have to provide your data?

Providing your data is voluntary. However, if you do not provide the information requested in the contact form or booking, we will not be able to respond to your enquiry or schedule a call with you.

5. Automated decision-making

We do not make decisions about you based solely on automated processing, and we do not carry out profiling.

6. Cookies

Our site does not set advertising or analytics cookies. When you choose to book a call, our scheduling provider may set strictly necessary cookies required to operate the booking widget.

7. Who we share your data with

We share your data only with the service providers that help us run the site and respond to you, acting as our processors under written terms and only on our instructions: Web3Forms (contact-form delivery), Cal.com (call scheduling) and Cloudflare (website hosting and content delivery).

We may also disclose data where required by law or to establish, exercise or defend legal claims. We never sell your personal data or share it for third-party advertising.

8. International data transfers

Some of our providers may store or process data outside the European Economic Area (for example, in the United States). Where this happens, the transfer is protected by appropriate safeguards under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can request a copy of the relevant safeguards using the contact details above.

9. How long we keep your data

We keep enquiry and booking data only for as long as necessary for the purpose for which it was collected — generally up to 24 months after our last contact — and longer only where required to meet legal or accounting obligations, after which it is securely deleted.

10. How we protect your data

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricting access to the people who need it to do their work.

11. Your rights

Under the GDPR you have the right to: be informed about our processing; access your personal data; have inaccurate data corrected; have your data erased; restrict processing; object to processing based on legitimate interests; data portability; and, where processing is based on consent, to withdraw that consent at any time without affecting earlier processing.

To exercise any of these rights, email us at info@oddwox.com. We will respond within one month, as required by the GDPR.

12. Complaints

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Bulgarian supervisory authority: the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria — email kzld@cpdp.bg, website www.cpdp.bg. We would, however, appreciate the chance to address your concern first.

13. Children's privacy

Our site and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The current version always appears on this page, and the date at the top shows when it was last revised. Material changes will be clearly indicated.