Privacy policy
Last update: 11.06.2026
1. Introduction
Welcome to bursukov.com ("Site," "we," "us"). We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and the Bulgarian legislation.
This policy explains how we collect, use and protect your personal data when you use our website.
2. Personal data controller
Personal data administrator is:
- Name: bursukov.com
- Contact: Contact form
- Address: Bulgaria
3. What data are we collecting
3.1. Data you provide voluntarily:
- Registration: username, email address, password (encrypted)
- Comments: name (optional), comment content
- Contact form: name, email, message
3.2. Data collected automatically:
- Technical data: IP address, browser type, operating system
- Use data: visited pages, visiting times
- Cookies: look at ours Cookies Policy
4. Purposes of processing
We use your data to:
- Provision and improvement of site services
- Manage User Accounts
- Moderating comments and content
- Responding to queries
- Statistical analysis of attendance (anonymised)
- Protection against abuses and security
5. Legal basis
We process your data on the following grounds:
- Agree: for cookies and marketing (Art. 6(1)(a) GDPR)
- Contract: for provision of services on registration (Art. 6(1)(b) GDPR)
- Legitimate interest: for security and analysis (Art. 6(1)(f) GDPR)
- Legal obligation: if required by the authorities (Art. 6(1)(c) GDPR)
6. Storage period
- User accounts: until the user deletes or 3 years inactivity
- Comments: as long as the publication exists
- Security logs: 30 days
- Statistics: 24 months (anonymised)
7. Data sharing
We don't sell your personal data. We can share data with:
- Hosting Provider: for technical site support
- State authorities: under legal requirement
We do not use third party tracking services (Google Analytics, Facebook Pixel, etc.).
8. Your rights
According to GDPR you are entitled to:
- Access: get a copy of your data
- Correction: to correct incorrect data
- Delete: to request deletion ("right to be forgotten")
- Restriction: limit processing
- Transportability: get your data in machine-readable format
- Objection: object to processing
- Withdrawal of consent: at any time, without prejudice to the legality of the prior processing
To exercise your rights, contact us through contact form.
9. Data security
We apply technical and organisational protection measures:
- SSL/TLS encryption connection
- Crypt passwords
- Protection against SQL injections and XSS attacks
- Limited access to personal data
- Regular security checks
10. International transfer
Your data is stored on servers in the European Union. We do not transfer data outside the EU/EEA.
11. Children
The site is not intended for children under 16 years of age. We don't consciously collect data from children. If we find out we've collected data from a child, we'll delete it immediately.
12. Complaints
If you think your rights have been violated, you can file a complaint to:
- Personal Data Protection Commission (CDC)
- Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd
- Telephone: 02/91-53-518
- Email: kzld@cpdp.bg
- Website: www.cpdp.bg
13. Policy changes
We can update this policy periodically. In case of substantial changes, we will notify you via a website message. We recommend that you review this page regularly.
14. Contact
For questions about this policy or your personal data, use our contact form.