Last updated: 27 September 2026.
1. Who Processes Your Data
The controller of your personal data is:
HIGH STAR EOOD („ХАЙ СТАР“ ЕООД)
UIC: 205446186
VAT number: BG205446186
Address: 3 Industrialna Street, 5th floor, 8001 Burgas, Bulgaria
Website: buh.bg
Email for personal-data enquiries: info@buh.bg
Telephone: +359 56 800 009
This policy applies to the buh.bg and firma.buh.bg websites.
2. Personal Data We Collect
Through the contact form, we receive your name, preferred contact method—telephone or email—and the text of your message. You provide this information voluntarily.
When the form is submitted, the IP address and submission time are recorded automatically. These data are used solely to protect the website against automated submissions and abuse.
We do not collect health information, political or religious beliefs, or other special categories of personal data through the website.
2a. Data in firma.buh.bg applications
When you fill in an application on firma.buh.bg, we receive:
- company details: name, UIC, addresses, capital, scope of activity; for an existing company, also Commercial Register data and the uploaded articles of association;
- details of founders, managers and representatives: name as in the identity document, personal identification number (EGN or LNCh) or date of birth, citizenship, gender, type, number, date and authority of issue of the identity document, permanent address, size of the share and contribution;
- the applicant’s contact details: the e-mail address of the Google account and a phone number;
- files you upload: the articles of association and scans of signed documents.
When you sign in with Google, we receive the e-mail address and the account identifier. Your Google password is not passed to us.
3. Purposes and Legal Bases
We process your data to respond to your enquiry and discuss potential cooperation. The legal basis is your request and the steps taken before entering into a contract under Article 6(1)(b) GDPR.
Data may be processed to protect the website against spam and to maintain its security and normal operation on the basis of our legitimate interests under Article 6(1)(f) GDPR.
The processing of client data under an accounting-services contract is governed by that contract and, where applicable, a separate data-processing agreement. This Privacy Policy does not replace the terms of such a contract or agreement.
Data in firma.buh.bg applications is processed to prepare the documents and file the application with the Commercial Register (Article 6(1)(b) GDPR) and to comply with obligations under Bulgarian law on the Commercial Register, anti-money laundering measures and accounting (Article 6(1)(c) GDPR). Data of other persons named in the application is processed on the same grounds; the client informs these persons that their data is being provided.
4. Retention Periods
Enquiries submitted through the contact form are retained for 12 months from the date of the latest correspondence if no contract is concluded during that period.
Technical records used to protect the website against automated submissions and abuse are retained for 30 days.
Where an enquiry results in a contract, the relevant client data is retained for the periods required by the contract and applicable law.
Data in firma.buh.bg applications — drafts, submitted applications, prepared documents and uploaded files — is kept for 1 year after the last change to the application, unless Bulgarian law requires a longer period (in particular the Measures Against Money Laundering Act and the Accountancy Act).
5. Recipients of Personal Data
We do not sell personal data or disclose it to third parties for advertising purposes.
When a payment is made by bank card, the transaction is processed by BORICA. Bank-card details are entered on the payment operator’s systems and are not received by buh.bg.
Data may be disclosed to public authorities or other recipients where required by law or where necessary to establish, exercise or defend legal rights.
To provide firma.buh.bg services, data is passed to the Registry Agency (Commercial Register) as part of the application and documents; to the qualified electronic signature providers Evrotrust and B-Trust (BORICA) for signing the documents, as chosen by the client; and to Google for signing in. Recognition of uploaded documents and data storage take place on our own servers without disclosure to third parties.
6. Cookies
The public pages of buh.bg use the functionally necessary pll_language cookie. It remembers the visitor’s selected language for 12 months and is not used for advertising or tracking the visitor across other websites.
As of the date of this Policy, buh.bg does not use analytical or advertising cookies.
Further information is available in the Cookie Policy published on the website.
When paying by bank card, the visitor may be redirected to a secure BORICA page. BORICA’s own rules and technologies, required for processing and securing the payment, may apply on that page.
firma.buh.bg uses only functionally necessary cookies — for the interface language, the application draft and signing in. They are listed in the Cookie Policy.
7. Your Rights
You have the right to:
- obtain confirmation that your personal data is being processed and receive a copy of it;
- request correction of inaccurate or incomplete data;
- request erasure where the statutory conditions are met;
- request restriction of processing;
- object to processing based on legitimate interests;
- withdraw previously given consent;
- exercise the right to data portability where applicable;
- lodge a complaint with the competent supervisory authority.
To exercise your rights, send a request to info@buh.bg. We will respond within one month unless an extension is permitted under applicable law.
If you believe that your rights have been infringed, you may contact the Bulgarian Commission for Personal Data Protection:
Commission for Personal Data Protection — CPDP
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
cpdp.bg
8. Changes to This Policy
The current version of the Privacy Policy is always published on this page.
If material changes are made, we will update the date at the beginning of the document and provide an additional notice where required.