Privacy Policy

Last updated: 29 January 2026

This Privacy Policy explains how Uzunova.eu and AI Compliance Layer (“we”, “us”, “our”) collect, use, store, and protect personal data when you visit our website www.uzunova.eu (the “Website”) or interact with our products and services.

We take data protection seriously and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Bulgarian data protection law.

1. Who Is the Data Controller

The data controller for the purposes of the GDPR is:

Elena Uzunova
Email: elena@uzunova.eu

2. What Data We Collect

We collect only the minimum personal data necessary to operate the Website and deliver our products.

2.1 Data You Provide Directly

Depending on how you interact with the Website, we may collect:

name;
email address;
billing and payment-related information (processed by third-party providers);
messages sent via contact forms or email;
purchase and download history.

We do not intentionally collect special category (sensitive) personal data.

2.2 Data Collected Automatically

When you visit the Website, we may automatically collect:

IP address;
browser type and version;
device information;
pages visited and actions taken;
referring URLs.

This data is primarily used for security, analytics, and website functionality.

3. Purposes and Legal Bases for Processing

We process personal data only where permitted under GDPR. The main purposes and legal bases are:

Purpose	Legal Basis
Website operation and security	Legitimate interest (Art. 6(1)(f))
Order processing and product delivery	Contract performance (Art. 6(1)(b))
Customer support and communications	Legitimate interest / Contract
Legal, tax, and accounting compliance	Legal obligation (Art. 6(1)(c))
Analytics and website improvement	Legitimate interest / Consent
Marketing emails (if applicable)	Consent (Art. 6(1)(a))

You may withdraw consent at any time where processing is based on consent.

4. Cookies and Similar Technologies

We use cookies and similar technologies to:

ensure proper website functionality;
improve performance and usability;
analyze traffic and usage.

Non-essential cookies are used only with your consent, where required by law.

Detailed information is available in our Cookie Policy.

5. Sharing of Personal Data

We do not sell personal data.

We may share personal data with trusted third parties only where necessary, including:

payment processors;
website hosting providers;
analytics providers;
email delivery services;
legal or accounting advisors (where required).

All third parties are contractually required to protect personal data and process it only on our instructions.

6. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA).

Where this occurs, we ensure appropriate safeguards, such as:

adequacy decisions by the European Commission; or
Standard Contractual Clauses (SCCs).

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including:

contractual obligations;
legal and tax requirements;
dispute resolution.

Retention periods vary depending on the type of data and applicable legal obligations.

8. Your Rights Under GDPR

You have the right to:

access your personal data;
request rectification or erasure;
restrict or object to processing;
data portability;
withdraw consent at any time;
lodge a complaint with a supervisory authority.

In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

unauthorized access;
loss;
misuse;
alteration or disclosure.

However, no online system can be guaranteed to be 100% secure.

10. Children’s Data

The Website and Products are not intended for children under 18.

We do not knowingly collect personal data from children.

11. Third-Party Links

The Website may contain links to third-party websites.

We are not responsible for the privacy practices or content of third-party sites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on the Website with a revised “Last updated” date.

13. Contact

If you have questions about this Privacy Policy or your personal data, contact: