We collect only what we need to respond to your enquiry and deliver your project. We do not sell your data, run advertising, or use tracking tools.
1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
- Trading name: PartForm
- Operated by: Rumen Ivanov
- City: Gabrovo
- Country: Bulgaria
- Email: info@partform.eu
- Status: Independent physical person (no registered company at this time). Full street address available on written request via the email above.
We are subject to the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Bulgarian Personal Data Protection Act (PDPA).
2. What Data We Collect and Why
2.1 Contact Form & Enquiries
When you submit an enquiry through our website or contact us by email, we collect:
- Name — to address you personally
- Email address — to respond to your enquiry
- Company name (optional) — to understand the business context
- Phone number (optional, if provided) — for follow-up
- Project description and any attached files — to understand and quote your requirements
- Service type preference — to route your enquiry correctly
Legal basis: Legitimate interest (responding to a service enquiry you initiated) and, where a contract follows, performance of that contract.
How form submissions are processed: Submissions made through the website contact form are relayed by FormSubmit, a form-to-email service operated from the United States. FormSubmit receives the submission, forwards it to info@partform.eu, and does not retain content beyond delivery. Transfers to the United States are governed by the EU Standard Contractual Clauses (SCCs). If you contact us directly by email instead, no third-party form processor is involved.
2.2 Project & Order Data
For confirmed projects, we also process: delivery address, payment records (via our payment processor — we do not store card details), and project-related technical files.
Legal basis: Performance of contract.
2.3 Website Server Logs
Our web server automatically logs standard access data: IP address, browser type, referring URL, and page access time. This is used solely for server security and uptime monitoring. We do not correlate server logs with individual identities.
Legal basis: Legitimate interest (website security and operation).
Hosting provider: Oracle Cloud Infrastructure (Oracle Corporation), EU region.
2.4 Advertising Measurement (Google Ads)
We run Google Ads campaigns and use Google Ads conversion tracking to measure whether visitors arriving from a Google search ad complete an enquiry. This is the only third-party measurement we use — no Google Analytics, no remarketing, no behavioural profiling.
If you arrive via a Google Ad and click "Accept" on the cookie banner, Google sets the first-party cookie _gcl_au (90-day lifetime). This cookie links your ad click to any conversion event (e.g. submitting the contact form). If you click "Decline" or do not interact with the banner, no Google cookie is set and no data is sent to Google.
Legal basis: Consent (Art. 6(1)(a) GDPR; Art. 5(3) ePrivacy Directive).
Provider: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a sub-processor. Transfers to the United States are governed by the EU Standard Contractual Clauses (SCCs) and Google's Data Processing Amendment.
You can withdraw consent at any time by clearing the pf_cookies_consent entry in your browser, or by visiting the Cookie Policy page where the banner can be re-triggered.
2.5 What We Do Not Collect
We do not:
- Use Google Analytics or any other site analytics platform
- Run remarketing, retargeting, or personalised-ad audiences
- Use session recording or heatmap tools
- Collect data from social media platforms
- Process special category data (health, biometric, etc.)
3. Fonts
Typography on this website is rendered using self-hosted fonts (Space Grotesk, Inter, JetBrains Mono) served directly from our own server. No font requests are made to Google or any other third party. No IP address is transmitted to Google LLC or any other US-based provider for the purpose of font delivery.
The fonts are licensed under the SIL Open Font License (OFL) and bundled with the site.
4. How Long We Keep Your Data
- Enquiries that do not result in an order: Deleted after 12 months from the last communication.
- Project and order data: Retained for 5 years after project completion for warranty, re-order support, and legal compliance purposes.
- Payment records: Retained for 7 years as required by tax and accounting law.
- Server logs: Automatically deleted after 30 days.
- Google Ads conversion cookie (
_gcl_au): Expires automatically 90 days after the last ad-click interaction (only set if consent was given).
5. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We share data only as necessary to deliver services:
- Hosting provider — Oracle Cloud Infrastructure (Oracle Corporation), EU region — provides the virtual machine that runs our web server and processes any submitted form data.
- Email provider — Zoho Corporation B.V., Netherlands (Zoho Mail, EU data center) — processes emails sent to info@partform.eu.
- Contact-form relay — FormSubmit (United States), under Standard Contractual Clauses — receives website form submissions and forwards them to info@partform.eu. Content is not retained beyond delivery.
- Advertising measurement — Google Ireland Limited, Ireland, with Google LLC (United States) as sub-processor under Standard Contractual Clauses — processes ad-click attribution and conversion events when you arrive via a Google Ad and have given cookie consent (see Section 2.4).
- Courier / shipping companies — your name and delivery address, when physical Deliverables are shipped.
- Associated manufacturing partners — project technical files only, where third-party production is required, under confidentiality agreement.
- Legal or regulatory authorities — if required by law.
We do not transfer personal data outside the EU/EEA, except for: (a) contact-form submissions relayed by FormSubmit (United States), and (b) advertising measurement data sent to Google LLC (United States) when you have given cookie consent (see Section 2.4). Both transfers are governed by Standard Contractual Clauses. If your own email provider is located outside the EU, that transfer is governed by their terms, not ours.
6. Your Rights Under GDPR
As a data subject in the EU, you have the following rights:
To exercise any of these rights, email info@partform.eu. We will respond within 30 days. We may need to verify your identity before processing the request.
If you believe your rights have been infringed, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg, or the supervisory authority in your country of residence.
7. Data Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include: using secure (HTTPS) connections, limiting access to data to individuals who need it for legitimate work purposes, and not storing sensitive data in unsecured systems.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the CPDP within 72 hours as required by GDPR Article 33.
8. Cookies
For full information on cookies used by this website, see our Cookie Policy.
In summary: this website does not use analytics, advertising, or tracking cookies. The only third-party data transmission is via Google Fonts (see Section 3 above).
9. Children's Data
Our services are directed at businesses and adult professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data to us, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page with its effective date noted at the top. Significant changes will be communicated by updating the "Last updated" date.
11. Contact
For any privacy-related questions, data requests, or complaints: info@partform.eu
Also see: Terms & Conditions · Cookie Policy