PRIVACY POLICY
WHEN USING THE WEBSITE
WWW.hype-SOFTWARE.COM
(Version No. 1/10.08.2026, effective from 10.08.2026)
Personal data controller:
Name: PRO SOFT AD
Company registration number: 207707051
Registered office and business address: 17 Borisova Street, floor 2, office 3, Ruse 7000, Bulgaria
Telephone: +359 2 450 00 05
Email address: [email protected]
Website: www.hype-software.com
Supervisory authority:
Name: Commission for Personal Data Protection
Registered office and business address: 2 Prof. Tsvetan Lazarov Boulevard, Sofia, Bulgaria
Correspondence address: 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, Bulgaria
Telephone: 02/91-53-519; 02/91-53-555; 02/91-53-583; 02/91-53-525
E-mail: [email protected]
Website: https://cpdp.bg/
Section I.
GENERAL PROVISIONS AND SCOPE
Article 1. (1) This Privacy Policy governs the Controller's processing of Website Visitors' personal data and data subjects' rights in connection with that processing.
(2) It applies to personal data collected through the Website, including the Enquiry Form, and data provided in enquiries by phone or email using the Website's contact details.
(3) The Website is exclusively informational and presentational. It does not register user accounts, provide Software access, conclude contracts, or process payments.
(4) This Privacy Policy does not apply to personal data processing connected with provision and use of the Software, which is governed by PRO SOFT AD's Privacy Policy for use of hype Software, published on the Website.
(5) Cookies and similar technologies are governed by the Cookie Policy published on the Website.
Article 2. For this Privacy Policy, the terms below have the stated meanings. All other terms follow the definitions in Article 4 of Regulation (EU) 2016/679:
1. „Controller“ means PRO SOFT AD, a joint-stock company registered and operating under the laws of the Republic of Bulgaria, entered in the Commercial Register and Register of Non-Profit Legal Entities maintained by the Registry Agency under company registration number 207707051.
2. „Personal data“ means the concept defined in Article 4(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protection of individuals regarding personal data processing and free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).
3. „Processing“ means the concept defined in Article 4(2) of Regulation (EU) 2016/679.
4. „Visitor“ means any individual accessing the Website or any part of it, or submitting a request or enquiry through the Website, by phone, or by email.
5. „Regulation“ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protection of individuals regarding personal data processing and free movement of such data, repealing Directive 95/46/EC.
6. „Software“ means the software product named hype Software, a software solution exclusively owned by the Controller.
7. „Website“ means the website at www.hype-software.com, owned by the Controller, with all its subpages, features, and content.
8. „Enquiry Form“ means the electronic form on the Website through which a Visitor can request a Software demonstration or send an enquiry to the Controller.
Section II.
PRINCIPLES OF PERSONAL DATA PROCESSING
Article 3. (1) The Controller processes Visitors' personal data lawfully, fairly, and transparently, respecting the principles and requirements of the Regulation and the Personal Data Protection Act.
(2) Personal data is collected for specific, expressly stated, legitimate purposes and is not processed incompatibly with them.
(3) Personal data processed is limited to what is necessary for its purposes.
(4) The Controller endeavours to keep personal data accurate and, where necessary, up to date.
(5) Personal data is retained no longer than necessary and processed with appropriate security, including protection against unauthorised or unlawful processing, accidental loss, destruction, or damage.
Section III.
CATEGORIES OF PERSONAL DATA PROCESSED
Article 4. (1) Through the Enquiry Form, the Controller processes the Visitor's name, phone number, email, business name, city, and message content if supplied.
(2) For phone or email enquiries, the Controller processes identification and contact details supplied by the Visitor and the content of the enquiry and subsequent communications.
(3) Website access may involve processing technical data, including IP address, browser type and version, operating system, device type, access date and time, pages visited, and referral source, under the terms and scope of the Cookie Policy.
(4) The Controller does not collect or process special categories of personal data under Article 9 of the Regulation. Unsolicited data of this kind is deleted where possible and processing discontinued.
(5) The Controller does not collect or store bank card or other payment instrument data because the Website does not process payments.
(6) Providing personal data is voluntary. Failure to provide data marked mandatory in the Enquiry Form prevents processing of the request or enquiry.
(7) The Website is not intended for persons under 18, and the Controller does not knowingly collect their personal data.
Section IV.
PURPOSES AND LEGAL BASES FOR PROCESSING
Article 5. The Controller processes Visitors' personal data for:
1. reviewing and handling demonstration requests and enquiries, including contacting the Visitor using the details provided;
2. taking steps at the Visitor's request before entering into a contract, including demonstrations, information, and quotations;
3. maintaining communication and providing requested information;
4. ensuring Website security, integrity, and normal operation, and preventing and detecting abuse or unlawful acts;
5. statistical analysis and improvement of the Website and content under the Cookie Policy;
6. fulfilling statutory obligations, including assisting inspections by competent authorities;
7. establishing, exercising, and defending legal claims.
Article 6. (1) Processing for Article 5 purposes relies on one or more of these legal bases:
1. steps at the Visitor's request before a contract or performance of a contract to which the Visitor is party: Article 6(1)(b) of the Regulation;
2. express consent: Article 6(1)(a), including non-essential cookies and commercial messages;
3. compliance with statutory obligations applicable to the Controller: Article 6(1)(c);
4. the Controller's legitimate interests: Article 6(1)(f), including communications with representatives, employees, and contact persons of legal entities, Website security, and establishing, exercising, or defending legal claims, provided these interests do not override data subjects' interests or fundamental rights and freedoms.
(2) Where processing relies on consent, Visitors may withdraw it at any time without affecting the lawfulness of prior processing.
(3) The Controller does not profile or make decisions based solely on automated processing that have legal or similarly significant effects on Visitors.
Section V.
PERSONAL DATA RECIPIENTS
Article 7. (1) Visitors' personal data may be provided to these categories of recipients:
1. hosting, data storage, security, and content delivery providers;
2. email and customer communication and contact management providers;
3. persons developing, supporting, or administering the Website;
4. accounting, legal, and consulting service providers;
5. competent public authorities where required by law.
(2) The Controller does not sell personal data or provide it to third parties for their independent commercial purposes.
(3) Transfers to recipients outside the European Economic Area require appropriate safeguards under Chapter V of the Regulation.
Section VI.
PERSONAL DATA RETENTION PERIOD
Article 8. (1) Data supplied through the Enquiry Form or an enquiry that does not lead to a contract is retained for 1 (one) year from the last communication with the Visitor.
(2) If a contract is concluded with the Visitor or the person they represent, processing and retention are governed by PRO SOFT AD's Privacy Policy for use of hype Software.
(3) Data processed on consent is retained until consent is withdrawn unless another legal basis exists.
(4) Data collected through cookies and similar technologies is retained for the periods specified in the Cookie Policy.
(5) The Controller retains data longer where necessary for statutory obligations or establishing, exercising, or defending legal claims, until the relevant periods expire.
(6) After the applicable retention period, data is erased or anonymised.
Section VII.
DATA SUBJECTS' RIGHTS
Article 9. (1) Regarding data processed by the Controller, Visitors have the following rights:
1. access to their personal data and information about its processing;
2. rectification of inaccurate and completion of incomplete data;
3. erasure where grounds under Article 17 of the Regulation exist;
4. restriction where grounds under Article 18 exist;
5. portability where processing is based on consent or contract and automated;
6. objection where processing relies on the Controller's legitimate interests;
7. withdrawal of consent at any time where processing relies on it;
8. complaint to the Commission for Personal Data Protection;
9. effective judicial remedy and compensation for damage from culpable infringement of the Regulation and/or Personal Data Protection Act.
(2) These rights are exercised by request to [email protected], through the Enquiry Form, or at the Controller's registered office. No specific form or template is required.
Article 10. (1) The Controller reviews and responds within 1 (one) month of receipt. Where necessary, considering complexity and number of requests, this may be extended by 2 (two) months, with notice to the Visitor.
(2) The Controller informs the Visitor of its response.
(3) If reasonably uncertain about the requesting person's identity, the Controller may request additional information necessary to confirm it.
(4) Requests are handled free of charge. For manifestly unfounded or excessive requests, including repetitive ones, the Controller may refuse to act or charge a reasonable fee.
Section VIII.
PERSONAL DATA SECURITY
Article 11. (1) The Controller applies appropriate technical and organisational measures against unauthorised or unlawful access, disclosure, alteration, loss, or destruction, considering the data's nature and risks to data subjects' rights and freedoms.
(2) Access is limited to persons who need it to perform their duties and are bound by confidentiality.
(3) For a breach potentially risking data subjects' rights and freedoms, the Controller notifies the Commission for Personal Data Protection within Article 33's deadline. Where high risk is likely, affected data subjects are also notified without undue delay.
Section IX.
FINAL PROVISIONS
Article 12. (1) The Controller may amend and/or supplement this Privacy Policy at any time, including due to changes in law, its activities, or Website operation.
(2) The current version is published on the Website and takes effect on publication unless otherwise specified.
(3) Where changes affect consent-based processing, the Controller requests new consent insofar as the Regulation requires.
Article 13. (1) Processing under this Privacy Policy is governed by the Regulation, the Personal Data Protection Act, and other applicable Bulgarian law.
(2) Questions, requests, and notices may be sent to [email protected], made by telephone on +359 2 450 00 05, or addressed to the Controller's registered office.