Privacy and cookies - Atlantis BG

Last updated: 07.11.2026

Atlantis BG Ltd. is the controller of the personal data described in this policy. Here we explain what data we process, why, how long we keep it and what your rights are. The policy follows Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and Bulgarian law.

This is a translation. If it differs from the Bulgarian version, the Bulgarian version applies.

1. Data controller

Name: Atlantis BG Ltd.
Company ID (EIK): 114130065
Registered office: Storgozia 61-G-7, Pleven, Bulgaria
Mailing address: Mladost 1, bl. 54, entr. 2, fl. 7, ap. 3AT, Sofia 1784, Bulgaria
Email: support@atlantis.bg
Phone: +359 2 974 88 55

2. Visiting this website

This website only provides information. It has no sign-up, no contact forms, no advertising, no analytics and no embedded content from other companies. Fonts and icons are served from our own server, so your browser does not connect to any third party when you visit.

Like any web server, ours records technical data about each request: IP address, date and time, the page requested, and the browser and operating system. We use it only to keep the site running and protected from abuse (legitimate interest, Article 6(1)(f) GDPR).

3. Cookies

This website does not use cookies, which is why it shows no consent banner.

If you press the light or dark theme button, your browser remembers the choice in its local storage so you do not have to set it on every page. The setting stays on your device, is never sent to us and is not used for tracking. You can remove it by clearing this site's data in your browser settings.

If we ever start using cookies, we will update this page and, where the law requires it, ask for your consent first.

4. What data we process

We provide services to companies and organisations. We process personal data only of the people who represent them or work with us on their behalf, and of anyone who writes to or calls us:

Enquiries: name, email, phone and the content of your message when you contact us.
Contracts: name, position and organisation, and a personal ID number only where the law requires it (for example for a power of attorney).
Contact and support: work phone, work email and position of the contact persons.
Technical data: IP addresses, device identifiers, access logs for our systems and traffic data needed for network security and the agreed service level (SLA).

5. Purposes and legal bases

We process data only on the bases in Article 6(1) GDPR:

Contract (point b): answering enquiries, concluding, performing and ending contracts for our services, technical support and fault repair with the people the client has authorised.
Legal obligation (point c): invoicing, accounting and tax control under the Accountancy Act and the VAT Act, and our duties as a provider of electronic communications networks and services under the Electronic Communications Act.
Legitimate interest (point f): protecting our network, servers and technical centre from attacks and abuse, day-to-day contact with the client's technical staff, and defending our rights in a dispute.

6. How long we keep data

Accounting records, including contracts and invoices: 10 years from 1 January of the year after payment.
Contact details: for the term of the contract and up to 5 years after it ends (the general limitation period for claims).
Traffic data: for the periods set by the Electronic Communications Act.
Web server and security logs: up to 6 months, unless the law requires longer.

7. Who we share data with

We do not sell, rent or share your personal data for marketing. We share it only with:

public authorities (the National Revenue Agency, the Communications Regulation Commission, the police, courts and others) when they have a legal basis and send an official written request;
external accountants, lawyers and auditors working for us under a confidentiality agreement.

8. Security

We protect data with technical and organisational measures, including:

limited and controlled physical access to our technical centre and office;
encrypted management channels and firewalls;
regular security updates and password changes.

9. Your rights

As a person whose data we process, you have the right:

of access to your data and a copy of it;
to rectification of inaccurate or incomplete data;
to erasure when we no longer have a legal or contractual reason to keep it;
to restriction of processing in the cases set out in the GDPR;
to portability of data you gave us under a contract, in a machine-readable format;
to object to processing based on legitimate interest.

To exercise your rights, send us a written request, including one with an electronic signature, to support@atlantis.bg or to our mailing address. We reply free of charge within one month.

If you believe your rights have been breached, you can complain to the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.

10. Changes to this policy

We may change this policy when the law or our services change. The current version and its date are always on this page.

Privacy policy