This Privacy Policy describes the way in which "DERIVA - SOLAR SYSTEMS" EOOD collects, uses, stores and protects the personal data of website visitors. derivasolar.com, its subdomains, and its associated pages.
The policy also applies when a visitor contacts us via a contact form, inquiry form, telephone or email.
We process personal data responsibly and in accordance with applicable law, including Regulation (EU) 2016/679 - General Data Protection Regulation, hereinafter referred to as the "GDPR", and the Personal Data Protection Act.
The personal data administrator is:
„"DERIVA - SOLAR SYSTEMS" EOOD
UIC: 207087419
Trade brand: DERIVA SOLAR
Headquarters and address of management: Grokhotno village, Devin municipality, Smolyan region, PK 4815
Correspondence address: Devin, 3 Tsvetan Zangov Street
Phone: +359 894 673 738
Email: derivasolar@gmail.com
Website: derivasolar.com
For all questions related to personal data protection, you can contact us at the specified email address.
Depending on how you use the site or contact us, we may process different categories of personal data.
When you submit an inquiry, we may process:
When you submit an inquiry for a photovoltaic system, we may process information such as:
When the inquiry is made on behalf of a company or is related to the need to issue an invoice, we may process:
Information about a legal entity does not, in itself, constitute personal data. However, when the information identifies a specific individual, such as an owner, manager, or contact person, it is processed as personal information.
When visiting the site, limited technical data may be automatically processed, such as:
We process personal data only when it is necessary for a specific purpose and there is an applicable legal basis.
We use the data provided to respond to questions submitted through the site, by phone or by email.
The processing is necessary to take action at your request prior to entering into a contract or to respond to an inquiry.
We use the contact details and site information to assess the possibilities for building a photovoltaic system and prepare an appropriate proposal.
The processing is necessary to take pre-contractual steps at your request.
We may use the data to contact you in connection with a submitted inquiry, an ongoing project, proposal or contract.
The basis may be taking pre-contractual actions, performing a contract, or a legitimate interest in maintaining normal business communication.
When you commission a service, we use the necessary data to organize, execute, and document the project.
The processing is necessary for the performance of a contract.
When it is necessary to issue invoices or other accounting documents, we process the required data in fulfillment of legal obligations.
If necessary, we may store and use correspondence, contractual documentation and other relevant information to establish, exercise or defend legal claims.
We may use limited technical data to ensure the normal operation, security and protection of the site against abuse.
When the option to subscribe to a newsletter is activated on the site, we send informational or marketing messages only after explicit voluntary consent.
Providing personal data in the inquiry forms is voluntary. Without the minimum required information, we may not be able to respond or prepare a suitable proposal.
We do not send advertising or informational messages by email without an applicable legal basis.
When a visitor voluntarily subscribes to a newsletter, consent can be withdrawn at any time via the unsubscribe link in the relevant message or by email to derivasolar@gmail.com.
The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.
The site may use cookies and similar technologies.
These cookies are necessary for the proper functioning, security and basic features of the site.
When using tools for statistics, visit analysis, personalization or marketing, the relevant optional cookies should only be activated after prior consent of the visitor.
The visitor must have the opportunity to accept, refuse or change their choice through cookie settings.
Detailed information about specific cookies, their providers, purposes and storage periods may be published on a separate "Cookie Policy" page or in the consent management panel.
We do not sell personal data.
When necessary for the operation of the site or the provision of services, information may be made available to a limited circle of recipients, such as:
We provide only the necessary amount of information and require appropriate data protection from those who process it on our behalf.
When using certain technology providers, data may be processed outside the European Economic Area.
Where applicable, we take the necessary safeguards under the GDPR, including using applicable adequacy decisions, standard contractual clauses or other appropriate safeguards.
We store personal data only for the period necessary for the relevant purpose.
Data from inquiries that have not led to a contractual relationship are usually stored for up to 12 months after the communication has ended, unless there is a good reason for a longer period.
Data related to a contract, completed project, offer, invoice or other accounting document is stored for the applicable legal periods.
Newsletter data is stored until consent is withdrawn.
Technical logs are stored for the period necessary for security, diagnostics and normal operation of the site.
When necessary for the defense of legal claims, certain information may be retained until the expiration of applicable statutes of limitations.
After the relevant period has expired, the data is deleted, anonymized or destroyed in a secure manner.
Under the terms of applicable law, you have the right:
To exercise your right, send a request to:
We may request additional information only when necessary to confirm the identity of the applicant and to protect the data from unauthorized access.
When you believe that your personal data is being processed unlawfully, you have the right to file a complaint with:
Personal Data Protection Commission
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Email: kzld@cpdp.bg
Website: cpdp.bg
Before filing a complaint, you can contact us so that we can clarify the matter. The Commission's contact details are published on its official website.
We do not use personal data provided through the site for fully automated decision-making that produces legal consequences or significantly affects the visitor.
We implement reasonable technical and organizational measures to protect information against unauthorized access, misuse, loss, alteration or destruction.
Access to personal data is granted only to persons for whom this is necessary in connection with their duties.
The site may contain links to external sites, maps or social media profiles.
We are not responsible for the content or privacy practices of third parties. We recommend that you familiarize yourself with the terms and policies of the respective platforms.
We may update this Privacy Policy in the event of changes to the site, the technologies used, the services, or applicable legislation.
The current version is published on this page with the date of the last modification indicated.
Last updated: June 9, 2026.
