PROTOKOL CLINIC

Privacy notice

Who handles your data

Вкъщи Капитал, company number (EIK) [to fill in], Sofia, Bulgaria. Email for privacy questions: hi@protokolclinic.com.

What we collect

  • Your email address, only if you sign up. We also record your language, when you gave consent and when you confirmed it from our email.
  • Your voucher. With your subscription we record the voucher code, the date you completed the questionnaire (to activate it) and when it is used. We don't record which answers were yours.
  • The questionnaire. It is anonymous: we don't ask for your name, email or phone, and we don't record your IP address. We keep only the month it was filled in, and your answers. Answers are stored apart from the mailing list and the two are never linked.
  • Abuse protection. To limit repeated attempts we keep a coded fingerprint of your IP address, not the address itself, for at most one hour.

Why, and on what basis

We use your email for news about the opening of Protokol Clinic and for your voucher, based on your consent (Article 6(1)(a) of the General Data Protection Regulation). The questionnaire helps us choose our treatments and prices.

How long

Sign-ups that are never confirmed are deleted after 30 days. Confirmed addresses are kept until you unsubscribe.

Cookies and tracking

This site uses no cookies, tracking, advertising or third-party fonts.

Who we share it with

Providers who process it for us: Netlify (hosting the site and its server functions), MongoDB Atlas (the database, stored in the European Union) and Resend (sending email). Netlify and Resend are US companies. Where data leaves the European Union, this is based on the EU-US Data Privacy Framework or standard contractual clauses. Our host may briefly keep technical data, such as IP addresses, in security logs. We don't sell or pass on data to anyone else.

Your rights

You can ask to see, correct or delete your data, and withdraw consent at any time, using the unsubscribe link in every email or by writing to us. You can complain to the Bulgarian Commission for Personal Data Protection: www.cpdp.bg.

Last updated: 7 November 2026