Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) aims to inform you how The Sppot Ltd. (“we”, “our website”, “the controller”) collects, uses, stores, and protects your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Bulgarian Personal Data Protection Act.

We are committed to ensuring the confidentiality and protection of your personal data and to processing it only for lawful, transparent, and fair purposes.

2. Data Controller

The Sppot Ltd.
UIC: 204320996
Address: 9 Asen Yordanov Blvd., Slatina District, Sofia 1592, Bulgaria
Managing Director: Yavor Dimitrov Peshev
Email regarding personal data: office@the-sppot.com
Website: https://the-sppot.com/

3. Personal Data We Collect

  • First and last name
  • Email address
  • Phone number
  • Content of messages sent via the contact form
  • IP address and technical data related to website usage (browser type, device, etc.)
  • Data collected through cookies

We do not collect sensitive personal data unless explicitly necessary and voluntarily provided by you.

4. Purposes of Processing

  • Responding to inquiries sent through the website contact form
  • Organization of trainings, services, and events offered by The Sppot
  • Maintaining communication with current and potential clients
  • Sending news, offers, or information (only with explicit consent)
  • Improving website content and functionality
  • Compliance with legal and regulatory requirements

5. Legal Basis for Processing

  • Consent
  • Contractual obligation
  • Legal obligation
  • Legitimate interest

6. Data Retention

Your personal data is stored for the period necessary to fulfill the purposes for which it was collected or until you withdraw your consent (where processing is based on consent).

After this period, the data is securely deleted or anonymized.

7. Disclosure of Personal Data to Third Parties

Your personal data is not shared with third parties except when:

  • necessary for providing our services (hosting providers, accounting services, IT support)
  • required by law or competent authorities
  • you have given explicit consent

All external processors are obligated to comply with GDPR and ensure adequate protection.

8. Your Rights

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to objection
  • Right to data portability
  • Right to withdraw consent at any time

To exercise these rights, contact: office@the-sppot.com

9. Cookies

Our website uses cookies to ensure proper functionality and improve user experience.
Detailed information about cookie types, purposes, and management is available in our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or destruction.
Access is limited to authorized personnel who require it for their duties.

11. Complaints

Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: https://www.cpdp.bg
Phone: +359 2 915 35 18
Email: kzld@cpdp.bg

12. Policy Updates

This Policy may be updated periodically to improve data protection practices or reflect legal changes.
All updates will be published on this page.

Last updated: February 20, 2026