Privacy policy
Effective 24 October 2026
This policy explains what personal data we process through trendwave.software, why, and what your rights are. The site has no sign-up, accounts, advertising, or tracking and analytics tools.
Data controller
- Company
- Trend Wave EOOD
- Company ID (EIK)
- 207954030
- Registered office
- 22 Germaneya St., 2650 Sapareva Banya, Bulgaria
- Phone
- +359 897 333 626
What data we process
- Contact form data: your name, email, phone (optional) and the text of your message.
- Technical data: IP address and browser details, which Cloudflare processes on every visit to deliver the site and protect it from spam and abuse — including through the Cloudflare Turnstile check and a limit on how many messages can be sent. From the country of your IP address and your browser’s language, the home page decides whether to show you the Bulgarian or the English version. This is not recorded.
- Data you give us yourself when you email or call us.
Why we use it, and the legal basis
- To reply to your inquiry and, if you wish, to prepare an offer or a contract — Art. 6(1)(b) of the General Data Protection Regulation (GDPR): steps taken at your request before entering into a contract.
- For site security and spam protection — Art. 6(1)(f) GDPR: our legitimate interest.
We do not use your data for advertising, we do not sell it, and we make no automated decisions about you, including profiling.
Where the data goes
The site does not store messages from the form. The form sends them as an email to our mailbox, where they stay.
The site and our email run on these providers:
- Cloudflare — site hosting and spam protection (Turnstile).
- Resend — delivery of form messages to our mailbox, through servers in the European Union (Ireland).
- Google (Google Workspace / Gmail) — the mailbox where we receive messages.
These providers may process data outside the European Union, under the safeguards the GDPR requires — such as the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.
How long we keep it
We keep correspondence for as long as it is needed for your inquiry and any further dealings between us, and then delete it. If we sign a contract, we keep its documents for as long as the law requires, for example accounting legislation.
Cookies
The site does not use cookies for advertising or analytics. It only uses entries that keep a choice you made or that the site needs to work:
- the
tw-langcookie, which remembers your language if you change it yourself (Bulgarian or English). It lasts one year and holds no personal data; - a browser storage entry (localStorage)
tw-theme, which remembers the light or dark theme if you pick one yourself. It stays until you clear your browser data; - a browser storage entry for the current session (sessionStorage) that remembers you have already seen the opening animation. It is deleted when you close the tab;
- the Cloudflare Turnstile check, which loads when you reach the contact form. It processes technical data about your browser to tell people from bots.
Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- ask us to correct or delete it;
- restrict its processing;
- receive your data in a machine-readable format (portability);
- object to processing based on legitimate interest.
For any of these, email us at the address above. We reply within one month.
If you believe we are breaching your rights, you can complain to the Bulgarian Commission for Personal Data Protection (CPDP) — www.cpdp.bg.
Changes
We may change this policy. The current version is always on this page, with the date it takes effect.