Privacy Policy
Last updated: 08.08.2026
FINAGON LLC (“Finagon,” “we,” “us,” or “our”) is committed to protecting the privacy of visitors to our website (www.finagon.com) and of the clients and business contacts we work with. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Bulgarian data protection law.
By using our website or submitting information to us, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are (Data Controller)
Finagon LLC, a company registered in Bulgaria, acts as the data controller for the personal data described in this policy.
- Company name: FINAGON LLC
- UIC / EIK: 202387957
- Contact email: privacy@finagon.com
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. What Personal Data We Collect
We collect personal data in the following ways:
a) Information you provide directly When you use our contact form, request a consultation, or describe a business challenge through our website, we may collect:
- Full name
- Company name and job title
- Email address and phone number
- The content of your message, including any details you choose to share about your business challenge or project
- Any documents you voluntarily attach or send us
b) Information collected automatically When you browse our website, we may automatically collect:
- IP address
- Browser type and device information
- Pages visited, time spent on the site, and referring website
- Cookie identifiers (see Section 6, Cookies)
c) Information from third parties Where relevant to our advisory work, we may receive limited business contact information from public sources (e.g., company registers, LinkedIn) or from referrals, in order to respond to inbound inquiries or follow up on introductions.
We do not knowingly collect sensitive categories of personal data (such as health, religious beliefs, or political opinions) through our website, and we ask that you do not include such information in your messages to us.
3. How We Use Your Data
We use the personal data described above for the following purposes:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to inquiries submitted via our contact form or “Describe Your Challenge” tool | Consent / pre-contractual steps taken at your request (Art. 6(1)(b) and (a)) |
| Preparing proposals, quotes, or initial assessments | Pre-contractual measures (Art. 6(1)(b)) |
| Delivering advisory, consulting, or project services under an engagement | Performance of a contract (Art. 6(1)(b)) |
| Maintaining business relationships and client records | Legitimate interest (Art. 6(1)(f)) |
| Complying with accounting, tax, and legal obligations | Legal obligation (Art. 6(1)(c)) |
| Improving our website and understanding how it is used | Legitimate interest / consent for non-essential cookies (Art. 6(1)(f) and (a)) |
| Sending occasional updates or insights, where you have opted in | Consent (Art. 6(1)(a)) |
We do not sell, rent, or trade your personal data to third parties.
4. How Long We Keep Your Data
- Contact form / inquiry data: retained for up to [12–24] months from your last contact with us, unless a client engagement follows, in which case it becomes part of the client record.
- Client and engagement records: retained for the duration of the business relationship plus any period required by Bulgarian commercial, accounting, and tax legislation (generally up to 10 years for financial documentation).
- Website analytics data: retained in accordance with the retention settings of the relevant analytics tool, typically no longer than [26 months].
- Cookie data: retained according to the cookie’s individual expiry, as described in our cookie table.
When data is no longer needed, we securely delete or anonymize it.
5. Who We Share Your Data With
We only share personal data where necessary, and always under appropriate safeguards:
- Service providers: website hosting, email, and IT infrastructure providers who process data on our behalf under data processing agreements.
- Professional advisors: auditors, legal counsel, or subcontracted consultants, where necessary to deliver an engagement, and bound by confidentiality obligations.
- Regulatory or public authorities: where required by Bulgarian or EU law, or to establish, exercise, or defend legal claims.
- Business partners: only with your knowledge, where a project requires coordination with a third-party specialist.
We do not transfer personal data outside the European Economic Area (EEA) unless an adequate level of protection is ensured (e.g., via an adequacy decision or EU Standard Contractual Clauses), and only where such transfer is necessary — for instance, when using a service provider with infrastructure outside the EEA.
6. Cookies
Our website may use cookies and similar technologies to operate correctly and to understand how visitors use the site.
| Type | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Enable core site functionality (e.g., security, navigation) | No |
| Analytics/performance | Understand site usage to improve content and experience | Yes |
| Preference | Remember settings such as language | Yes |
You can manage or withdraw your cookie consent at any time through our cookie banner/settings or your browser settings. Disabling non-essential cookies will not affect your ability to browse the site, but may limit certain features.
7. Your Rights Under GDPR
If you are located in the EU/EEA, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), subject to legal retention requirements
- Restrict or object to certain processing, including for direct marketing
- Data portability, where processing is based on consent or contract and carried out by automated means
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria Website: www.cpdp.bg
To exercise any of these rights, please contact us at [privacy@finagon.com]. We will respond within one month, as required by GDPR.
8. Data Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, including access controls, encryption where appropriate, and confidentiality obligations for staff and subcontractors. No system is completely secure, and we encourage you to avoid sending highly sensitive information through unencrypted channels.
9. Children’s Privacy
Our website and services are intended for business audiences and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
FINAGON LLC at Email: privacy@finagon.com
