Privacy Policy

1. Data Controller

This Privacy Policy governs the processing of personal data by:

ARTEC ROBOTICS EOOD

• Registered office: 15 Hristo Smirnenski St., Dimitrovgrad, Bulgaria
• UIC: 203131505, VAT No.: BG203131505
• Contact email: [email protected]
• Website: artec.bg

The Company ("the Controller", "we") processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act.

2. What personal data we collect

Depending on how you use our website, we may process the following categories of data:

• Identification data: first name, last name;
• Contact data: email address, phone number (when voluntarily provided by you);
• Correspondence data: the content of messages sent via contact forms or email;
• Conversations with the AI assistant: the messages you write in the site's chat, the assistant's answers and the address of the page you write from;
• Application data: your CV, motivation letter and the information in them (education, experience, skills), when you apply for a course or a job;
• Consent record: your ticked consent to this policy and the date and time the form was sent;
• Technical data: IP address, browser type and time of the request — in the hosting provider's server logs, in the anti-spam check (hCaptcha) when you use a form, and to limit the number of chat messages.

We do not use traffic analytics, advertising or tracking technologies, and we do not profile visitors.

3. Purposes and legal grounds for processing

We process personal data for the following purposes:

• Responding to inquiries and communicating with users — under Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) (legitimate interest);
• Reviewing applications for courses and jobs — Art. 6(1)(b) GDPR (steps prior to entering into a contract);
• Performance of contractual obligations — Art. 6(1)(b) GDPR;
• Answering questions through the AI assistant on the site — Art. 6(1)(f) GDPR (our legitimate interest in answering visitors' questions quickly) or Art. 6(1)(b) when the question relates to a future order;
• Protecting the forms against spam and abuse, and keeping the site secure — Art. 6(1)(f) GDPR (legitimate interest);
• Compliance with legal obligations (accounting, tax) — Art. 6(1)(c) GDPR.

4. Retention period

Your personal data is stored for no more than 5 (five) years from your last contact with us, unless a longer period is required by applicable Bulgarian law (e.g. accounting records, under the Accountancy Act). After this period, the data is deleted or anonymized.

The exception is your conversation with the AI assistant: our server keeps it for at most 2 weeks (while the session cookie is valid) or until you press "New conversation", and it is not used for any other purpose. The message counters for each IP address are deleted within 25 hours.

5. Cookies

The site uses only strictly necessary first-party cookies, which do not require your consent: csrftoken protects the forms and the chat against forged requests (CSRF) and contains no personal data; sessionid is created only when you write to the AI assistant, to remember your conversation (for up to 2 weeks), and when staff log in to the administration panel.

While the browser tab is open, it also keeps a copy of the conversation with the assistant in session storage (sessionStorage); it is deleted when the tab is closed.

We do not use analytics, advertising or tracking cookies.

Third-party content only loads after you act:

• hCaptcha — loads when you start filling in a form, to tell humans from bots. It may use cookies or local browser storage;
• YouTube videos — we show only a preview image. The player (youtube-nocookie.com, Google) loads only when you press play; Google may then store data in your browser under its own policy.

You can delete or block cookies in your browser settings. Without the csrftoken cookie the site's forms cannot be sent.

6. Recipients of personal data

We do not sell your personal data. We share it only with the following recipients, as far as necessary:

• OVH SAS (OVHcloud), France — website hosting in an EU data centre;
• SuperHosting.BG EOOD, Bulgaria — email delivery (inquiry notifications);
• Intuitive Machines, Inc. (hCaptcha), USA — IP address and form interaction data, for spam protection;
• Anthropic, PBC, USA — your messages in the chat with the AI assistant and the address of the page (without your IP address), to generate an answer. Anthropic does not use this data to train its models;
• Google Ireland Limited / Google LLC (YouTube) — only if you play an embedded video;
• government authorities — when required by law.

Links to social networks and WhatsApp lead to external sites and services, which process data under their own policies.

7. Transfers outside the EU/EEA

hCaptcha, Anthropic and Google may process data in the USA. Such transfers are based on the EU–U.S. Data Privacy Framework and/or standard contractual clauses approved by the European Commission (Art. 45 and 46 GDPR).

8. Your rights

Under the GDPR, you have the following rights:

• The right to access your personal data;
• The right to rectify inaccurate data;
• The right to erasure ("the right to be forgotten");
• The right to restrict processing;
• The right to data portability;
• The right to object to processing;
• The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us at: [email protected].

9. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority:

Commission for Personal Data Protection of Bulgaria (CPDP)

• Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
• Website: www.cpdp.bg
• Email: [email protected]

10. Data security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration.

11. Changes to this policy

We reserve the right to update this Privacy Policy. The current version is always published on this page, with the effective date indicated.