Privacy Policy

Last updated: 17 April 2026

1. Who we are

Controller: Logisoft EOOD (“Logisoft”, “we”, “us”), an engineering company registered in Bulgaria.

Address: Prof. Dr. Dimitar Dobrev Str. 8A, 1700 Sofia, Bulgaria
Email: logisoft@logisoft.bg
Phone: +359 (2) 847 6244

We operate the public marketing website at https://www.logisoft.bg/ (including language variants). This policy describes how we process personal data in connection with that site.

2. Scope

This policy applies to information collected through our website and related technologies (cookies, local storage, embedded third-party content). It does not govern data processed under separate contracts for engineering or support services; those relationships are covered by project agreements and, where applicable, separate privacy notices.

3. Data we process

Depending on how you use the site, we or our processors may process:

Website and server logs (typically IP address, date/time, requested URL, referrer, user agent) generated when your browser contacts our hosting infrastructure. This is a normal by-product of delivering pages over the internet.
Contact details you send us (for example when you email us at the address above), including the content of your message.
Consent and preference records stored in your browser (see cookie table below).
Web typography: when you open an English, German, or Bulgarian marketing page, your browser may request font files from Google Fonts (Google receives technical data such as IP address as part of that request).
Optional technical data if you allow embedded third-party media: embedded YouTube playback (Google), and on the English homepage only, a one-time request to ipapi.co to infer coarse location from IP for optional language redirection.

4. Purposes and legal bases (GDPR Art. 6)

Activity	Purpose	Legal basis
Providing the website, security, abuse prevention	Operate and protect the site	Legitimate interests (Art. 6(1)(f))
Responding to enquiries sent by email	Pre-contract / business communication	Legitimate interests; where you request a quote, steps at your request prior to a contract (Art. 6(1)(b))
Storing your cookie / consent choices	Demonstrate consent and respect your settings	Consent where required by law; otherwise legitimate interests to operate compliant controls (Art. 6(1)(a)/(f))
Optional language preference in local storage	Remember your language between visits	Consent (Art. 6(1)(a))
Loading web fonts from Google Fonts with each marketing language page	Display typography consistent with our brand (Fraunces, IBM Plex Sans, Caveat, etc.)	Legitimate interests (Art. 6(1)(f)) — you are informed here and may block third-party requests in your browser
Embedded YouTube and optional ipapi.co lookup	Video content; suggested language on first visit (English homepage only)	Consent (Art. 6(1)(a))

5. Recipients and processors

We use reputable infrastructure and service providers. Categories of recipients include:

Web hosting provider (stores server logs on our behalf).
Google Ireland Limited / Google LLC as provider of Google Fonts when you load a marketing language page, and as provider of YouTube when you allow embedded video. Google may process data in the United States and other countries under its policies and, where applicable, the EU–US Data Privacy Framework or standard contractual clauses.
ipapi.co (Ipaapi Limited or associated service) when you allow embedded third-party media and visit the English homepage without a saved language preference — a single JSON request may be made to suggest a language version from country-level data.

We do not sell your personal data.

6. International transfers

Where data is transferred outside the European Economic Area (for example to Google or ipapi.co infrastructure), we rely on appropriate safeguards under Chapter V GDPR (including adequacy decisions or standard contractual clauses as offered by the relevant provider).

7. Retention

Server logs: retained according to our hosting configuration (typically a limited rolling period for security and diagnostics unless longer retention is required by law).
Email correspondence: retained as needed to handle your request and for ordinary business, tax, and legal record-keeping periods.
Consent record (logisoft_gdpr_consent in local storage): until you clear site data or withdraw choices (we store a timestamp with your preferences).
Language preference (logisoft_lang): until removed via cookie settings, browser data clear, or withdrawal of preference storage.

8. Your rights

Under the GDPR, if you are in the EEA/UK you may have the right to: access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, data portability (where applicable), and withdrawal of consent at any time (without affecting the lawfulness of processing before withdrawal). You can withdraw optional processing by using “Cookie settings” in the site footer or your browser controls.

You may lodge a complaint with a supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP): https://www.cpdp.bg/.

9. Cookies and similar technologies

We use a first-party consent store and, only with your permission, local storage for language and optional embedded media (YouTube, ipapi.co) as described. Web fonts are loaded from Google Fonts with each marketing page as explained above. Session storage may be used briefly for language transition animation between pages.

Name / key	Type	Purpose	Duration
`logisoft_gdpr_consent`	localStorage	Stores versioned consent choices (preferences, third-party embedded media) and timestamp	Persistent until cleared
`logisoft_lang`	localStorage	Stores preferred language code when you allow preference storage	Persistent until cleared
`lsLangNav`	sessionStorage	Short-lived flag for language page transition	Session
Google Fonts	Third-party stylesheet / font files	Typography on each load of index, de, or bg marketing pages; see Google’s policies	Per Google / browser cache
YouTube embeds	Third-party (when allowed)	Embedded video playback; may involve cookies or similar technologies per Google’s policies	Per Google
ipapi.co (when allowed)	Third-party network request	Optional coarse country suggestion on English homepage	Not stored by us; see ipapi.co privacy policy

10. Automated decision-making and profiling

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR in connection with this website.

11. Children

This site is directed at businesses and professionals. We do not knowingly collect data from children.

12. Changes

We may update this policy to reflect legal, technical, or business changes. The “Last updated” date will be revised accordingly. Material changes may be highlighted via the website or consent banner where appropriate.

← Back to homepage