Last updated: 13 August 2026.
1. Who Processes Your Data
The controller of your personal data is:
HIGH STAR EOOD („ХАЙ СТАР“ ЕООД)
UIC: 205446186
VAT number: BG205446186
Address: 3 Industrialna Street, 5th floor, 8001 Burgas, Bulgaria
Website: buh.bg
Email for personal-data enquiries: info@buh.bg
Telephone: +359 56 800 009
2. Personal Data We Collect
Through the contact form, we receive your name, preferred contact method—telephone or email—and the text of your message. You provide this information voluntarily.
When the form is submitted, the IP address and submission time are recorded automatically. These data are used solely to protect the website against automated submissions and abuse.
We do not collect health information, political or religious beliefs, or other special categories of personal data through the website.
3. Purposes and Legal Bases
We process your data to respond to your enquiry and discuss potential cooperation. The legal basis is your request and the steps taken before entering into a contract under Article 6(1)(b) GDPR.
Data may be processed to protect the website against spam and to maintain its security and normal operation on the basis of our legitimate interests under Article 6(1)(f) GDPR.
The processing of client data under an accounting-services contract is governed by that contract and, where applicable, a separate data-processing agreement. This Privacy Policy does not replace the terms of such a contract or agreement.
4. Retention Periods
Enquiries submitted through the contact form are retained for 12 months from the date of the latest correspondence if no contract is concluded during that period.
Technical records used to protect the website against automated submissions and abuse are retained for 30 days.
Where an enquiry results in a contract, the relevant client data is retained for the periods required by the contract and applicable law.
5. Recipients of Personal Data
We do not sell personal data or disclose it to third parties for advertising purposes.
When a payment is made by bank card, the transaction is processed by BORICA. Bank-card details are entered on the payment operator’s systems and are not received by buh.bg.
Data may be disclosed to public authorities or other recipients where required by law or where necessary to establish, exercise or defend legal rights.
6. Cookies
The public pages of buh.bg use the functionally necessary pll_language cookie. It remembers the visitor’s selected language for 12 months and is not used for advertising or tracking the visitor across other websites.
As of the date of this Policy, buh.bg does not use analytical or advertising cookies.
Further information is available in the Cookie Policy published on the website.
When paying by bank card, the visitor may be redirected to a secure BORICA page. BORICA’s own rules and technologies, required for processing and securing the payment, may apply on that page.
7. Your Rights
You have the right to:
- obtain confirmation that your personal data is being processed and receive a copy of it;
- request correction of inaccurate or incomplete data;
- request erasure where the statutory conditions are met;
- request restriction of processing;
- object to processing based on legitimate interests;
- withdraw previously given consent;
- exercise the right to data portability where applicable;
- lodge a complaint with the competent supervisory authority.
To exercise your rights, send a request to info@buh.bg. We will respond within one month unless an extension is permitted under applicable law.
If you believe that your rights have been infringed, you may contact the Bulgarian Commission for Personal Data Protection:
Commission for Personal Data Protection — CPDP
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
cpdp.bg
8. Changes to This Policy
The current version of the Privacy Policy is always published on this page.
If material changes are made, we will update the date at the beginning of the document and provide an additional notice where required.