Last updated: October 2026
This policy explains what personal data I collect on stefcheva.com, why, how long I keep it and what rights you have. I’ve written it to be readable, not to hide anything in legal language.
Who is responsible for your data
The controller of your personal data is Vyara Stefcheva, an independent marketing consultant registered in Bulgaria. For any question about your data, write to hello@stefcheva.com or use the contact form on this website.
What data I collect and why
When you send a message or request an audit
Through the forms on this website I receive your name, company, email address and, if you add them, your website, markets and message. I use this data only to reply to you, to prepare a quote or audit you asked for and to communicate with you about it.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and my legitimate interest in replying to enquiries (Article 6(1)(f) GDPR).
When you work with me
If we work together, I process the contact and billing details needed to deliver the service, issue invoices and meet my legal obligations. Legal basis: performance of a contract (Article 6(1)(b)) and legal obligations (Article 6(1)(c)).
When you leave a comment
If you comment on an article, the website stores your name, email address, the comment and your IP address, so comments can be moderated and spam can be filtered. Your email address is not published. Legal basis: legitimate interest (Article 6(1)(f)).
Website analytics
I use Google Analytics to understand how many people visit the website and which content is useful. Google Analytics uses cookies and collects data such as pages visited, approximate location, device and browser. It does not give me your name or email address. Analytics cookies are set only after you accept them in the cookie banner. Until then, Google receives only cookieless signals without identifiers (Google Consent Mode). You can change your choice at any time: Cookie settings. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Fonts and technical data
When you open the website, your browser connects to the hosting server and to Google Fonts, which means your IP address is transmitted to them so the pages and fonts can load. The hosting provider keeps short-term server logs for security. Legal basis: legitimate interest in a secure, working website (Article 6(1)(f)).
Who else receives your data
- My hosting provider, whose servers are located in a data centre in Bulgaria (EU). It stores the website, form submissions, website backups and email on my domain.
- Google Ireland Limited, for Google Analytics, Google Search Console and Google Fonts. Data may be transferred to the United States under the EU–US Data Privacy Framework.
- Google, when I reply to you from my Gmail account.
- Accountants and public authorities, only where the law requires it.
I don’t sell your data and I don’t use it for advertising profiles.
How long I keep your data
- Messages and audit requests that don’t lead to a collaboration: up to 2 years, then deleted.
- Data related to a contract and invoices: as long as Bulgarian accounting and tax law requires.
- Comments: as long as the comment is published.
- Analytics data: according to the retention period set in Google Analytics (no longer than 14 months).
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability and to withdraw your consent at any time. To use any of these rights, write to hello@stefcheva.com. I reply within one month.
If you believe your data is processed unlawfully, you can file a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or with the data protection authority in your country.
Changes to this policy
If I change how I process data, I’ll update this page and the date at the top.