Privacy Policy

1. Who We Are

This Privacy Policy explains how personal data is collected and used through the website petkoff.co (the "Website").

The Website is operated by RokoMedia Ltd. ("Petkoff & Co.", "we", "us", "our"), a company registered in Bulgaria with company VAT number BG207142627 and registered address at Bratya Miladinovi Street 23.

"Petkoff & Co." is a trading name of RokoMedia Ltd. RokoMedia Ltd. is the data controller responsible for personal data collected through the Website.

For privacy-related questions or requests, contact us at: [email protected].

2. What Data We Collect

We collect only the data reasonably needed to operate the Website, respond to enquiries, and manage potential business relationships.

We may collect:

• Contact and enquiry data you submit voluntarily - such as your name, email address, company name, job title, website, and the contents of any message you send us through a contact form, email, or scheduling tool.
• Business communication data - such as records of communications with you if you contact us on behalf of a company or potential client.
• Technical and usage data - such as IP address, browser type, device information, pages visited, referring pages, approximate location, and time spent on the Website, collected automatically through cookies, analytics tools, server logs, or similar technologies.

We do not intentionally collect special categories of personal data, such as health data, ethnicity, political opinions, religious beliefs, or biometric data, through the Website.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to your enquiries and communicate with you about our services.
• To manage potential or existing business relationships.
• To operate, maintain, secure, and improve the Website.
• To analyze Website traffic and usage in aggregate.
• To protect our legal rights and prevent misuse of the Website.
• To comply with legal obligations.

4. Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR) applies, we process personal data on the following legal bases:

• Consent - for non-essential cookies, analytics, and marketing technologies where consent is required.
• Legitimate interests - to respond to business enquiries, communicate with potential clients, operate and improve the Website, secure our systems, and understand how the Website is used, balanced against your rights and interests.
• Legal obligation - where we must process data to comply with applicable law.
• Contract or steps before entering into a contract - where processing is necessary to discuss, enter into, or perform a business relationship with you or the company you represent.

5. Cookies and Analytics

The Website may use cookies and similar technologies for essential functionality, security, analytics, and performance measurement.

Essential cookies are used to operate the Website and cannot always be disabled without affecting functionality.

Non-essential cookies and analytics technologies are used only where permitted by law and, where required, with your consent.

We may use third-party analytics or tracking tools. These tools may collect technical and usage information about your visit.

You can control or disable cookies through your browser settings. If we use a cookie consent banner, you may also manage your preferences through that banner.

6. Sharing Your Data

We do not sell your personal data.

We may share personal data with:

• Service providers who help us operate the Website and our business, such as hosting providers, email providers, analytics providers, CRM/contact form providers, scheduling tools, and security providers.
• Professional advisers, such as accountants, lawyers, or compliance advisers, where necessary.
• Authorities, courts, regulators, or third parties where required by law or where necessary to protect our legal rights.

Where service providers process personal data on our behalf, we require appropriate confidentiality and data protection obligations.

Where personal data is transferred outside the European Economic Area, we take steps to ensure an adequate level of protection in accordance with applicable data protection law, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law.

Enquiry and business communication data is kept for as long as needed to handle your request, manage the business relationship, and maintain reasonable business records.

Technical and analytics data is retained for the period set by the relevant analytics or hosting provider, or for as long as reasonably needed for security and Website improvement.

When personal data is no longer needed, we delete it, anonymize it, or securely archive it where retention is legally required.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Object to certain processing.
• Request restriction of processing.
• Request data portability.
• Withdraw consent at any time, where processing is based on consent.

To exercise your rights, contact us at the email listed above.

You also have the right to lodge a complaint with your local data protection authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP / КЗЛД): cpdp.bg.

9. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Third-Party Links

The Website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal data to them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent version.

We encourage you to review this Policy periodically. Where required by law, we will notify you of material changes or request your consent.

12. Contact