Privacy Policy

Privacy and Personal Data Protection Policy

Originally effective: 12 October 2022
Last updated: 20 July 2026

1. General information

This Privacy and Personal Data Protection Policy explains in a clear and accessible manner how Bulinvent EOOD collects, uses, stores and protects the personal data of visitors to bulinvent.com, persons who submit enquiries, and Bulinvent’s current and prospective clients.

When processing personal data, Bulinvent EOOD complies with Regulation (EU) 2016/679, commonly known as the General Data Protection Regulation or GDPR, the Bulgarian Personal Data Protection Act, and other applicable Bulgarian and European legislation.

We process personal data lawfully, fairly and transparently. We collect only the information necessary for specific and predetermined purposes and retain it for no longer than necessary.

This policy applies to:

• visitors to bulinvent.com;
• persons who contact us through the contact form, by email, by telephone or through another communication channel;
• current and prospective clients;
• representatives, employees and contact persons of corporate clients;
• applicants, right holders, inventors, authors, representatives and other persons whose personal data may be provided in connection with intellectual and industrial property services;
• persons who subscribe to newsletters, informational materials or marketing communications, where such options are offered.

2. Personal data controller

The controller responsible for the processing of personal data is:

Bulinvent EOOD
Unified Identification Code: 131214252
VAT number: BG131214252
Registered address: Block 66, Entrance B, Floor 2, Apartment 33, Manastirski Livadi-B, Sofia 1404, Bulgaria
Email: mail@bulinvent.com
Telephone: +359 888 682906

Contact person for personal data protection matters:

Miroslav Stoynov – Patents and Trade Marks Assistant
Email: mail@bulinvent.com

The person identified above is a contact person for matters relating to personal data protection, unless formally appointed as a Data Protection Officer under the applicable legislation.

3. Categories of personal data we process

Depending on how you use our website or services, we may process the following categories of personal data.

3.1. Identification information

This may include:

• full name;
• job title and professional capacity;
• name of the organisation represented;
• signature;
• information contained in powers of attorney, applications, declarations and other documents;
• information about applicants, right holders, inventors, authors and representatives;
• other identification information required for the provision of a particular service or compliance with a legal obligation.

Information relating exclusively to a legal entity, such as its company name, registration number, VAT number and registered address, does not in itself constitute personal data. However, such information may be connected with identifiable individuals representing the legal entity.

3.2. Contact information

This may include:

• postal address;
• email address;
• telephone number;
• website;
• company, organisation or employer;
• job title;
• preferred method of communication.

3.3. Enquiry and professional correspondence information

When you contact us, we may process:

• the content of your enquiry;
• the subject of the enquiry;
• emails and other correspondence;
• documents and attachments provided by you;
• information about inventions, patents, trade marks, industrial designs and other intellectual property rights;
• information concerning requested services, deadlines, instructions and actions taken;
• the history of our communications with you.

Please do not provide information through the contact form that is not necessary for us to review and respond to your enquiry.

3.4. Contractual, financial and payment information

When services are requested or provided, we may process:

• information about agreements and requested services;
• offers, invoices and payment information;
• bank and payment details;
• information required for accounting and tax purposes;
• information concerning official fees and other expenses;
• correspondence relating to payments and financial obligations.

3.5. Technical and website usage information

When you visit our website, the following information may be processed:

• IP address;
• browser type and version;
• device type and operating system;
• date and time of the visit;
• pages visited;
• the address of the page from which you accessed the website;
• technical and security logs;
• cookie-related identifiers;
• information about the cookie preferences you accepted or rejected.

Some of this information is processed automatically by the website server, hosting provider or website security systems.

3.6. Consent and marketing information

Where you have consented to receiving informational or marketing communications, we may process:

• your email address;
• the date and method by which consent was provided;
• your communication preferences;
• information about withdrawal of consent or unsubscription.

3.7. Special categories of personal data

We do not request or intentionally collect special categories of personal data through the website, such as information concerning health, racial or ethnic origin, religious beliefs or political opinions.

Where such information is provided in connection with a particular professional service and its processing is necessary, it will be processed only where an appropriate legal basis exists and suitable safeguards have been implemented.

4. Sources of personal data

In most cases, we receive personal data directly from you.

In connection with the services we provide, we may also receive personal data from:

• your employer or the organisation you represent;
• our clients and their employees or representatives;
• lawyers, industrial property representatives and other professional representatives;
• Bulgarian and foreign professional partners;
• the Patent Office of the Republic of Bulgaria;
• the European Patent Office;
• the European Union Intellectual Property Office;
• the World Intellectual Property Organization;
• courts and other competent Bulgarian, foreign or international authorities;
• publicly accessible registers and databases;
• publicly available professional and corporate sources.

Where personal data are received from another person, we process only the information necessary for the relevant service, legal obligation or legitimate interest.

5. Purposes and legal bases for processing

5.1. Reviewing enquiries and preparing proposals

We may use the information provided to:

• review and respond to your enquiry;
• determine whether we are able to accept a particular matter;
• perform a possible conflict-of-interest check;
• prepare a proposal, quotation or service terms;
• arrange a consultation or subsequent communication.

Legal basis: Taking steps at your request before entering into a contract and, where applicable, our legitimate interest in organising and documenting business communications.

5.2. Providing intellectual and industrial property services

We process personal data where necessary for:

• providing consultations;
• conducting searches and research;
• preparing and filing applications and other documents;
• protecting, maintaining and managing intellectual property rights;
• representation before Bulgarian, European and international offices and institutions;
• working with foreign representatives, lawyers, translators and other specialists;
• monitoring deadlines and official procedures;
• carrying out client instructions;
• communicating about the progress of a particular matter.

Legal basis: Performance of a contract or taking steps before entering into a contract.

5.3. Compliance with legal and professional obligations

We may process information for:

• accounting and tax reporting;
• issuing and retaining invoices and other accounting documents;
• identifying clients where required by law;
• responding to lawful requests from competent authorities;
• complying with obligations arising from applicable legislation and professional rules.

Legal basis: Compliance with a legal obligation.

5.4. Protection of our rights and legitimate interests

We may process personal data for:

• establishing, exercising or defending legal claims;
• collecting outstanding amounts;
• preventing fraud, misuse and violations;
• maintaining the security of the website, information systems and communications;
• maintaining records of professional correspondence and actions taken;
• demonstrating instructions received and services performed;
• managing professional risks and insurance claims.

Legal basis: The legitimate interests of Bulinvent EOOD in protecting its rights, property, information systems, professional activities and legal interests, as well as the rights and interests of its clients.

Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and fundamental freedoms.

5.5. Informational and marketing communications

Where you have provided explicit consent, we may use your email address to send news, information about services, invitations to events or other materials.

Legal basis: Your consent.

You may withdraw your consent at any time by using the unsubscribe method provided in the communication or by contacting us at mail@bulinvent.com.

Withdrawal of consent does not affect the lawfulness of processing performed before the consent was withdrawn.

5.6. Use of cookies

Necessary cookies may be used to ensure the proper functioning, security and basic settings of the website.

Analytical, functional or marketing cookies that are not strictly necessary are used only after consent has been provided through the consent-management platform.

Legal basis: Consent for non-essential cookies and legitimate interest or necessity for providing the requested service in relation to strictly necessary technologies.

Further information is available in our Cookie Policy.

6. Whether providing personal data is mandatory

Fields required for submitting an enquiry through the website are marked as mandatory or are technically necessary for the form to be submitted.

Where you do not provide the required information, we may be unable to:

• review and respond to your enquiry;
• verify your identity or authority to act;
• prepare a proposal;
• accept and carry out your instructions;
• provide the requested service;
• comply with an applicable legal or procedural obligation.

Providing information for marketing communications and non-essential cookies is voluntary.

7. Recipients of personal data

Depending on the circumstances, personal data may be disclosed to the following categories of recipients:

• employees and associates of Bulinvent EOOD who require access to the information;
• industrial property representatives, lawyers and other professional advisers;
• Bulgarian and foreign professional partners;
• translators, technical experts and other specialists whose involvement is necessary for the service;
• the Patent Office of the Republic of Bulgaria;
• the European Patent Office;
• the European Union Intellectual Property Office;
• the World Intellectual Property Organization;
• courts, administrative bodies and other competent authorities;
• hosting, email, technical-support, information-security and backup providers;
• cookie and consent-management service providers, including CookieYes;
• accountants, auditors, banks, insurers and payment-service providers;
• postal and courier service providers;
• public authorities where disclosure is required by law.

Access is limited to the information necessary for the relevant purpose.

Where a recipient processes personal data on our behalf, we take appropriate measures, including contractual requirements concerning confidentiality, security and processing in accordance with our instructions.

Bulinvent EOOD does not sell personal data.

8. Transfers outside the European Economic Area

Due to the international nature of intellectual property services, it may be necessary in certain cases to provide information to:

• foreign intellectual property representatives;
• professional partners;
• international organisations;
• competent foreign authorities;
• technology service providers located outside the European Economic Area.

Where personal data are transferred internationally, we apply an appropriate mechanism permitted by the applicable legislation, which may include:

• an adequacy decision adopted by the European Commission;
• standard contractual clauses;
• appropriate contractual, technical and organisational safeguards;
• an applicable exception permitted under Regulation (EU) 2016/679.

Where disclosure to a foreign representative or international institution is necessary for the performance of a requested service, only the information required for the relevant proceeding or action will be provided.

9. Retention of personal data

We retain personal data only for as long as necessary for the purposes for which they were collected, unless a longer period is required by law, professional obligations or the need to establish, exercise or defend legal claims.

As a general rule, we apply the following periods or criteria.

9.1. Enquiries that do not result in an engagement

Correspondence and information relating to general enquiries may be retained for up to two years after the communication has ended, unless longer retention is necessary because of a possible dispute, conflict-of-interest requirement, legal obligation or other justified circumstance.

9.2. Client and professional files

Documents and information relating to provided services and professional proceedings are retained for the duration of the client relationship and, following its termination, for the period necessary to:

• comply with legal and professional obligations;
• protect and maintain intellectual property rights;
• monitor deadlines and possible subsequent actions;
• demonstrate instructions received and services provided;
• establish, exercise or defend legal claims.

The applicable period may depend on the type of service, the relevant intellectual property right, the official proceeding, contractual obligations and applicable limitation periods.

9.3. Accounting and payment documents

Accounting, tax and payment documents are retained for the periods required under the applicable accounting and tax legislation.

9.4. Informational and marketing communications

Information used for sending marketing communications is processed until consent is withdrawn or the person unsubscribes.

Following unsubscription, we may retain the minimum information necessary to demonstrate withdrawal and prevent further communications from being sent without consent.

9.5. Technical and security logs

Technical and security logs are retained for a limited period necessary for the operation and security of the website, unless an incident, violation or misuse requires longer retention.

9.6. Cookie and consent information

Information concerning cookies and consent preferences is retained for the periods specified in the Cookie Policy and the cookie consent-management panel.

Following the expiry of the relevant period, personal data are deleted, destroyed, anonymised or restricted unless another applicable legal basis for retention continues to exist.

10. Confidentiality and security

Bulinvent EOOD implements appropriate technical and organisational measures to protect personal data against:

• unauthorised access;
• accidental loss;
• destruction;
• alteration;
• unlawful disclosure;
• unauthorised use.

Access to personal data is provided only to persons who require it for the performance of their employment, contractual or professional obligations and who are bound by confidentiality requirements.

We endeavour to maintain the security of our systems. However, no method of transmitting or storing electronic information can guarantee absolute security.

Where a personal data breach is identified, we take the actions required under the applicable legislation.

11. Your rights

Subject to the conditions provided under the applicable legislation, you have the following rights.

11.1. Right to information

You have the right to receive clear information about how we process your personal data.

11.2. Right of access

You have the right to obtain confirmation as to whether we process your personal data, information about the processing and, where applicable, a copy of the data.

11.3. Right to rectification

You have the right to request the correction of inaccurate personal data and the completion of incomplete information.

11.4. Right to erasure

Under the conditions established by law, you may request the erasure of your personal data.

The right to erasure is not absolute. We may refuse erasure where processing is necessary for compliance with a legal obligation, the performance of a professional task, or the establishment, exercise or defence of legal claims.

11.5. Right to restriction of processing

You may request the temporary restriction of processing in the circumstances provided by law.

11.6. Right to data portability

Where processing is based on consent or a contract and is carried out by automated means, you may have the right to receive personal data provided by you in a structured, commonly used and machine-readable format.

11.7. Right to object

You may object to processing based on our legitimate interests for reasons relating to your particular situation.

Where personal data are processed for direct-marketing purposes, you may object at any time. Upon receipt of such an objection, we will stop processing the data for that purpose.

11.8. Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

11.9. Right to lodge a complaint

You have the right to lodge a complaint with:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Boulevard
Sofia 1592
Bulgaria
Email: kzld@cpdp.bg

Additional information about lodging complaints is available on the official website of the Commission for Personal Data Protection.

Before lodging a complaint, you may contact us so that we can review and attempt to resolve the matter.

12. Exercising your rights

You may submit a request to:

Bulinvent EOOD
Email: mail@bulinvent.com
Address: Block 66, Entrance B, Floor 2, Apartment 33, Manastirski Livadi-B, Sofia 1404, Bulgaria

Your request should contain sufficient information to enable us to identify you and understand which right you wish to exercise.

Where necessary, we may request additional information to confirm your identity. This measure is intended to prevent personal data from being disclosed or altered without authorisation.

We will respond without undue delay and normally within one month of receiving the request. Where a request is legally or factually complex, or where a large number of requests have been received, the response period may be extended in accordance with the applicable legislation. You will be informed of any such extension.

Exercising your rights is generally free of charge. Where a request is manifestly unfounded, excessive or repetitive, we may apply the measures permitted by law.

13. Cookies

The website uses cookies and similar technologies.

Strictly necessary cookies provide essential functions such as security, preference storage and proper operation of the website.

Non-essential cookies are used only after you have provided consent, where such consent is required.

We use the CookieYes consent-management platform, through which you may:

• accept all cookies;
• reject non-essential cookies;
• select individual cookie categories;
• change or withdraw your preferences.

Detailed information concerning the cookies used, their providers, purposes and retention periods is available in the Cookie Policy and through the “Cookie Settings” panel.

14. Automated decision-making

Bulinvent EOOD does not carry out automated decision-making, including profiling, that produces legal effects concerning individuals or similarly significantly affects them.

Should such processing be introduced in the future, this policy will be updated and the affected individuals will be informed in accordance with the applicable legislation.

15. Personal data relating to children

The website and our professional services are not specifically directed at children.

We do not knowingly collect personal data relating to children through the website, unless such processing is necessary for a particular lawful service and the information has been provided by a parent, guardian, legal representative or another duly authorised person.

16. Links to third-party websites

The website may contain links to third-party websites, platforms or services.

Bulinvent EOOD does not control the privacy practices or content of external websites. We recommend reviewing their privacy policies before providing them with personal data.

17. Amendments to this policy

We may periodically update this Privacy and Personal Data Protection Policy to reflect changes in:

• applicable legislation;
• the services we provide;
• the technologies we use;
• the manner in which personal data are processed;
• requirements or guidance issued by competent authorities.

The current version will always be published on the website.

Where significant changes are made, we may provide an additional notification through an appropriate communication method.

18. Contact details

For questions about this policy or the manner in which we process your personal data, please contact:

Bulinvent EOOD
Email: mail@bulinvent.com
Telephone: +359 888 682906
Address: Block 66, Entrance B, Floor 2, Apartment 33, Manastirski Livadi-B, Sofia 1404, Bulgaria