Privacy Policy

1. Data Controller

iconys, Bulgaria. Contact: office@iconys.bg

2. Data We Collect

When you use our website, we may collect:

• Contact form submissions (name, email, message)
• Server access logs (IP address, browser type, timestamp)
• Analytics data (page views, anonymized — via privacy-first analytics)

3. Legal Basis

We process data based on:

• Consent (Art. 6(1)(a) GDPR) — contact form submissions
• Legitimate interest (Art. 6(1)(f) GDPR) — website security and analytics

4. Data Retention

Contact form data is retained for 12 months. Server logs are retained for 30 days. Analytics data is anonymized and aggregated.

5. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

6. Contact

For data protection inquiries: office@iconys.bg