Privacy policy

1. Who processes your data

The data controller is Creatium Lab. For questions about your personal data, write to info@creatiumlab.com.

2. What data we collect

• Data you send us through the contact form: name, phone number, the service you are interested in, and your message if you write one.
• The messages you write in the chat on the site, and any details you choose to leave there (name, phone, email, business).
• How you got to the site (for example from Google or from an ad), if the site receives it from your browser or from the link you followed. We store it with your inquiry so we know which channels work.
• Technical data needed to run and secure the site: IP address and request data in the server logs.
• If we have written to you as a business: the business name, its publicly listed email address, website and city, taken from public sources (your website, Google Maps or OpenStreetMap), and whether you clicked a link in our email (which link and when). We do not track whether you open the email.
• Data about your visit from analytics and advertising tools, only if you have allowed them (see section 6).

3. Why and on what legal basis

• To reply to your inquiry and send you an offer: based on your consent and on taking steps at your request before entering into a contract (Art. 6(1)(a) and (b) GDPR).
• For security and to prevent misuse of the site: based on our legitimate interest (Art. 6(1)(f) GDPR).
• For a single business email to a company whose website we think could be improved, and to know whether it was useful (clicks on its links): based on our legitimate interest (Art. 6(1)(f) GDPR). Every such email has an unsubscribe link; after you unsubscribe we do not write again and keep only the address so that we never write to it again.

4. How long we keep your data

Inquiries are kept for no more than 12 months after our last contact, unless we sign a contract. In that case the data is kept as long as the contract and accounting law require. Server logs are kept for a limited time. Chat conversations are deleted automatically 30 days after the last message; contact details you leave in the chat are kept as an inquiry.

5. Who has access

We do not sell your data or share it with third parties for their marketing. Only our team members and the providers that help us operate (hosting, email and, with your consent, the tools in section 6) have access. Chat replies are generated by a language model from Mistral AI (France), which receives the conversation's messages as a data processor; their use for training models is switched off.

7. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object, and to withdraw your consent at any time. Write to us at the email above. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).