Privacy
policy
How we collect, use and protect your data
Overview
We respect your privacy and are committed to protecting it. This Privacy Policy explains how VA Software Solutions ("we", "us", "our") collects, uses, shares and protects your personal data when you use this website, and the choices you have. This policy is designed to comply with applicable laws of the European Union and the Republic of Bulgaria.
Data controller
The data controller for this website is VA Software Solutions, registered in Bulgaria. For privacy enquiries, or to exercise your rights, please contact us.
What data we collect
- Contact form data — name, email, company (optional) and the message you submit, used to respond to your enquiry.
- Careers application data — if you apply for a role, we may process your name, contact details, CV and information you provide in your application to evaluate candidacy.
- Usage and device data — with your consent, Microsoft Clarity collects usage patterns such as pages viewed and basic interactions. Our hosting may process IP address and user‑agent for security and operational purposes. See the Cookie Policy for details.
How and why we use your data
- To respond to enquiries and provide information you request.
- To operate, maintain and improve our website and services.
- To ensure security, prevent abuse and diagnose issues.
- To comply with legal or regulatory obligations.
Legal bases under GDPR
- Consent — for optional analytics cookies (Microsoft Clarity).
- Legitimate interests — to run and secure the website, and to respond to your enquiries and applications.
- Legal obligation — where we must retain or disclose information to comply with law.
Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including responding to enquiries, evaluating applications, maintaining records and meeting legal requirements. Analytics data retention follows Microsoft Clarity’s settings. Cookie lifetimes are listed in the Cookie Policy.
Sharing and processors
We do not sell your personal data. We may share it with trusted service providers who act as processors (e.g., hosting, analytics with consent) under appropriate data protection agreements, and with authorities where required by law.
International transfers
Where personal data is transferred outside the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions, as required by EU law.
Your rights
Subject to EU and Bulgarian law, you have the right to request access, rectification, erasure, restriction, objection, and data portability. You may withdraw consent for analytics at any time using the control.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or your local supervisory authority.
Cookies and analytics
We use necessary cookies for the site to function and optional analytics cookies with your consent. See our Cookie Policy for details on categories, purposes, and how to manage preferences.
Security
We implement reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure.
Changes
We may update this policy from time to time. Updates will be posted on this page with a revised “Last updated” date.
Contact
Questions or requests about this policy? Please contact us.
Last updated: September 2025