This is a courtesy English translation of the Bulgarian original (Политика за поверителност). In case of any discrepancy, the Bulgarian version prevails.
Navia System DPK („Навиа Систем“ ДПК) (“Controller”, “We”, “Company”) takes the privacy of your personal data seriously. This privacy policy (“Policy”) contains information about the purposes of and the ways in which we use your personal data when you browse the RANVOT website with web address (URL): www.ranvot.com (“Website”) or send us an enquiry through it.
Please read this Policy carefully in order to understand how we collect, use, protect and process your personal data in accordance with the applicable legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Bulgarian Personal Data Protection Act (“PDPA”) and the applicable European legislation.
1. Definitions
- “Website”, “Site”: the web pages and related content accessible on the Internet under the domain name ranvot.com. The Website presents the Company’s three systems and its custom services (custom software and automation). It has no registration, user accounts or payments.
- “Personal data”: any kind of information relating to an identified or identifiable person.
- “Cookies”: small files that a site or service provider stores in the memory of your device through the browser you use (if you have allowed this).
- “Personal data controller”: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- “Personal data processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
- “User”: a person who browses the Website or sends an enquiry through the “Write to us” form.
2. Controller
The personal data controller under this Policy is the company Navia System DPK („Навиа Систем“ ДПК), entered in the Commercial Register at the Registry Agency with UIC (ЕИК) 208893566, with registered office and management address: 15 Odrin St., floor 4, Burgas 8000, Bulgaria.
Mekavia, Lerevi and Ninorai, the Company’s three systems, have their own websites and their own privacy policies. When you use one of them, your data is covered by the policy of the respective site: mekavia.com, lerevi.com or ninorai.com. This Policy covers only the ranvot.com Website, including enquiries sent through the “Write to us” form, even when you ask about one of the systems in them.
3. What data do we process and for what purposes?
We collect the information you provide when you fill in the “Write to us” form on the Website or when you write to us or call us, as well as technical data when you browse the Website. The mandatory fields of the form are marked as such and must be filled in, while the remaining ones are voluntary and are not mandatory to fill in. The Website has no registration, user accounts or payments, so it collects no data for them.
We may process the personal data listed in the table below for the purposes and on the legal basis stated, within the periods for their retention.
| Purpose | Personal data | Legal basis | Retention period |
|---|---|---|---|
| Answering an enquiry sent through the “Write to us” form and preparing an offer | first and last name; email; telephone number (optional); company (optional); what you need (the option chosen from the list in the form); message (optional); page and language from which the enquiry was sent | Your consent. Taking steps at your request prior to entering into a contract. | No longer than necessary to answer the enquiry, prepare an offer and follow up the related communication. If we enter into a contract after the enquiry, the periods in section 8 apply. |
| Protecting the form from spam and abuse | IP address from which the enquiry was sent | Legitimate interest. | Kept together with the enquiry and for the same period. |
| Access to and security of the Website | logs; IP address; device; browser; operating system | Legitimate interest. | No longer than necessary to achieve the purposes for which the data was collected. |
| Visit statistics (Google Analytics 4) | pages visited; where the visit came from; device and browser; clicks on the phone number, the email address and buttons; a form sent (without its content); IP address; cookie data | Your explicit consent (the “Statistics” category in the cookie banner). | Processed until you change your cookie preferences. The periods of the cookies themselves are in the Cookie policy. |
| Measuring our adverts on Facebook, Instagram (the Meta Pixel) and in ChatGPT (the OpenAI pixel), and showing adverts to people who visited the site | pages visited; whether an enquiry was sent or the phone number or email address was clicked; the click identifier from an advert; IP address; browser; cookie data | Your explicit consent (the “Advertising” category in the cookie banner). | Processed until you change your cookie preferences. The periods of the cookies themselves are in the Cookie policy. |
The statistics and advertising tools are loaded through Google Tag Manager. Until you allow “Statistics”, Google Analytics 4 neither sets nor reads cookies. The Meta and OpenAI pixels do not load at all until you allow “Advertising”. The details are in the Cookie policy.
4. How do we use the collected information?
Any information we collect from you may be used in the following ways:
- for answering your enquiry and preparing an offer for custom software, automation or one of the Company’s systems;
- for sending a confirmation to the email address you gave that the enquiry has been received;
- for protecting the form and the Website from spam, abuse and attacks;
- for technical support and information security;
- for fulfilling legal obligations;
- for improving the Website, only if we have switched on traffic measurement and you have consented to it.
5. Is your personal information disclosed to third parties?
The collected personal data is not sold, exchanged or in any other way transferred to third parties, except in the cases specified. The information may be provided to contractors, subcontractors and other trusted partners who work on assignment from us on the basis of contractual relations and under confidentiality agreements. These companies do not have the right to share this information independently.
Categories of third parties and services that the Website uses or may use:
- Hosting and storage: Hetzner Online GmbH (Germany, EU), the servers and database of the Website, where the received enquiries are also kept;
- Network security and traffic acceleration (CDN): Cloudflare, Inc., protection and acceleration of traffic to the Website;
- Email: the email service provider through which the Website sends us a notification of the enquiry and sends you a confirmation, and through which we reply to you;
- Traffic analytics: Google Analytics 4 and Google Tag Manager (Google Ireland Limited, Ireland), the statistics cookies only after your consent;
- Advertising on Facebook and Instagram: the Meta Pixel (Meta Platforms Ireland Limited, Ireland), only after your consent;
- Advertising in ChatGPT: the ChatGPT ads pixel (OpenAI Ireland Limited, Ireland), only after your consent.
The hosting, network security and email providers process the data only for running the Website and answering enquiries, on our instructions and under a duty of confidentiality. You can request an up to date list of the providers at [email protected].
Google, Meta and OpenAI also use the data from their tools for their own purposes, under their own policies: Google, Meta and OpenAI. For collecting data with the Meta Pixel and passing it to Meta we are joint controllers with Meta under Art. 26 GDPR. We are responsible for informing you and asking for your consent, and Meta is responsible for the further processing.
Information may be provided to law enforcement authorities if requested and where this is necessary for compliance with the law, with the Terms of use of the Website, or for the protection of the rights, property or safety of the Controller and of other persons. Any collected information that does not constitute personal data or does not contain classified information may be provided to third parties for marketing, advertising or other purposes.
6. Do we use cookies?
We use cookies for running the Website. Cookies usually do not contain information that personally identifies a user, but the personal data we store about you may be linked to the information stored in and obtained from cookies. The types of cookies are:
- Essential cookies. These are necessary for the normal running of the Website, for example to remember the chosen language and your cookie choice.
- Performance and functionality cookies. These are not mandatory, but they allow us to remember your preferences so that you do not need to enter information you have already provided every time.
- Advertising cookies. These use information about the way you use the Site, such as the pages you visit or the way you respond to advertisements. They are set only after your consent.
- Third-party cookies. These are stored by a domain different from the domain of the visited page, for example by traffic analytics tools. They are set only after your consent.
Without your consent the Website uses only essential cookies. The statistics cookies (Google Analytics) and the advertising cookies (the Meta and OpenAI pixels) are set only if you allow them in the cookie banner. Their full list is in the Cookie policy.
You can change your cookie preferences at any time by changing the settings of your browser. To block cookies in a specific browser, learn more here:
- Managing cookies in Google Chrome
- Managing cookies in Firefox
- Managing cookies in Microsoft Edge
- Managing cookies in Safari
- Managing cookies in Brave
Refusing cookies may lead to limited functionality of the Website.
7. How do we store and protect your personal information?
The Controller complies with the requirements of the PDPA and the GDPR regarding the collection, use and protection of personal data and applies all necessary technical and organisational measures recognised by the applicable data protection law in order to protect all data it may store or process. We store the data in the European Economic Area. The Website’s data, including the received enquiries, is stored on servers rented by us from Hetzner Online GmbH in Germany, and the backups are encrypted.
If you allow the statistics or advertising cookies, Google, Meta and OpenAI may transfer the data from their tools to the United States. The transfer is based on the European Commission decision of 10 July 2023 on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the standard contractual clauses approved by the European Commission. We transfer no other personal data outside the European Union.
In the event of a transfer of personal information and data outside the EU, we guarantee a high level of data protection through Standard Contractual Clauses (SCC) or other instruments recognised by the applicable law.
We apply appropriate measures to protect your personal data from accidental loss and unauthorised access, use, alteration or disclosure. Procedures are in place designed to protect the information from loss, misuse and unlawful disclosure. Although we work hard to protect your personal data, we cannot guarantee that our actions will prevent every unauthorised attempt to access, use or disclose personal data. If you believe that there is a threat to the security of your personal data, please contact us immediately using the contact details in section 13 of this Policy.
We apply additional information security measures, including access control, strict technical protection and reliable practices for the collection, storage and processing of the information. The processing of personal data is secured with modern technical means.
We use the information you provide to us only for the purposes in sections 3 and 4: to answer your enquiry, prepare an offer and keep up the related communication.
If you wish to access or change the personal data we hold about you, or request that we delete information about you, you can contact us at any time through the contact form on our Website or by sending an email to us at: [email protected]. Upon receipt of a request, we will block or delete all information we hold about you from our database, except the data we are obliged to keep by law.
Please note that we may retain the information you provide for the prevention of fraud or abuse, or for the fulfilment of other legal obligations, or where we believe we have a legitimate reason to do so. If you refuse to provide us with certain personal data, such as an email address, we may be unable to answer your enquiry.
8. Retention periods
We retain the data for a limited period of time for as long as we need it in order to fulfil the purposes for which we originally collected it, unless otherwise provided by law. We will retain and use the information that is necessary to comply with our legal obligations, resolve disputes and enforce our agreements, and some of the periods for this are:
- (a) enquiries sent through the form on the Website are retained for as long as necessary to answer them and follow up the related communication;
- (b) if we enter into a contract after the enquiry, the data needed for it is kept for the term of the contract, and information about the payments and transactions under it is retained for 10 years in accordance with accounting and tax laws and with the limitation periods for civil claims;
- (c) cookie data is kept for the periods stated in the Cookie policy.
9. Supervisory authority
The supervisory authority for personal data protection in Bulgaria is the Commission for Personal Data Protection (CPDP), with address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, and consumer telephone line: 02/91-53-555. More information about personal data protection can be found on the website of the CPDP at www.cpdp.bg.
10. Changes to the Privacy policy
Changes to the personal data privacy rules are published on the Website with the date of the last update reflected in them, as well as through communication with you where this is required by law. If you do not agree with the changes, you should stop using the Website.
11. Your rights
By virtue of the applicable legislation, you have the legally recognised right, free of charge, at any time to object to the processing of your personal data by sending an explicit request through the Website or to the following email address: [email protected].
You have the right to access the personal data we store about you, in a structured, commonly used and machine-readable format, by sending an explicit request to the following email address: [email protected].
You have the right to request the transfer of your personal data to another controller by sending an explicit request to the following email address: [email protected].
If part of the information we store about you is incorrect or inaccurate, you have the right to correct it by sending an explicit request to the following email address: [email protected].
You have the right to request the erasure of your personal data by sending an explicit request to the following email address: [email protected]. This does not apply to the personal data we are obliged to keep by law.
You have the right to request the restriction of the processing of your personal data with regard to individual operations of collecting, processing and sharing them, by sending an explicit request to the following email address: [email protected].
You have the right to request that third parties who have access to your data be notified of the restrictions, the erasure or the prohibition of processing of your data, so that those third parties delete all links to and copies of your personal data.
Where we process your data on the basis of your consent, you can withdraw it at any time with the same kind of request. Withdrawal does not affect the lawfulness of the processing before it. You also have the right to lodge a complaint with the CPDP (section 9).
We will respond to your request or inform you in writing of the actions taken in connection with the request within one month of receiving it. This period may be extended by two further months where necessary due to the complexity or the number of the requests, of which you will be duly notified.
12. Minimum age
The Website and the “Write to us” form are intended for businesses and for persons aged 18 or over. We do not knowingly collect personal data from minors.
13. Contact us
If you have any questions about this Policy, you can contact us using the contact details below:
Navia System DPK („Навиа Систем“ ДПК)
15 Odrin St., floor 4, Burgas 8000, Bulgaria
telephone: +359 878 466 939
email: [email protected]
Effective from 20 October 2026.