Privacy Policy of Fininfo.bg
Last update 18 September 2026.
In shortThis policy explains how FININFO.BG Ltd collects and uses personal data when visiting the website, registering and using the platform, subscribing to newsletters, requesting services, participating in events, and the partner ecosystem. We use the data only for specific and lawful purposes and keep it for a limited period of time.
1. Who is responsible for personal data
The administrator of personal data is „FININFO.BG“ Ltd., UIC 206522893, VAT number BG206522893, with its registered office and address of management: Rousse 7000, Dondukov Koroskov Street No. 19, entrance 1, 4th floor.
Contact details for matters related to personal data: info@fininfo.bg, phone +359 893 721 929, website https://fininfo.bg/.
This policy applies to personal data processed through the Fininfo.bg website and platform, email, telephone, registration and application forms, contracts, events, and direct communication.
2. Basic principles
Fininfo.bg processes personal data lawfully, conscientiously and transparently. We collect only what is necessary for clearly defined purposes, maintain the data accurate, limit the retention periods, and implement appropriate technical and organizational measures for protection.
We do not sell personal data. We do not use the data provided through a request, survey or service for incompatible purposes without a separate legal basis and the necessary information being provided to the person concerned.
3. What categories of data do we process
- Identification data: name and surname, organization, position and representative function.
- Contact details: email, phone number, address and preferred method of communication.
- Profile data: user name, encrypted password, selected plan, roles, settings, saved materials, and notification preferences.
- Data about the organization and its interests: sector, size and type of organization, type of beneficiary, project intentions, topics and opportunities of interest.
- Data for orders and payments: purchased service, price, date, payment status, invoice details and transaction identifier. Fininfo.bg does not store full bank card details when the payment is processed by an external payment provider.
- Data provided for a service or consultation: description of the project idea, investment intentions, budget, eligibility, attached documents and other information necessary for implementation.
- Data about experts and partners: professional biography, education, experience, areas of expertise, programs and client groups, photo, organization, geographical scope, and preferences for guiding inquiries.
- Communication data: submitted inquiries, electronic correspondence, notices, feedback and service history.
- Technical data: IP address, device type and browser, log files, identifiers and information about the use of the website, when permitted by the cookie option.
We do not require special categories of personal data unless it is necessary for a specific service and there is a valid legal basis. Please do not submit sensitive or private information that is not necessary for the inquiry or service.
4. For what purposes and on what basis do we use the data
4.1. Site visit and technical security
We process limited technical data to load the site, provide basic functions, prevent abuse, and protect the systems. The basis is our legitimate interest in maintaining a secure and functioning service, as well as fulfilling the functionality requested by the user.
4.2. Registration and user profile
We use the registration data to create and manage the account, provide the selected free or paid access, maintain settings and materials, and send service messages. The basis is the conclusion and execution of a contract and the steps taken at the request of the user before its conclusion.
When the profile is created by an organization for its employee or representative, we process the data to fulfill the contract with the organization and based on the legitimate interest to manage the authorized users.
4.3. Orders, payments and invoicing
We process data for the order, payment, and invoice to activate the service, administer the subscription, maintain accounting records, and fulfill our tax obligations. The grounds are the performance of a contract and compliance with a legal obligation.
4.4. Inquiries, consultations and additional services
We use the provided information to process a request, to contact the sender, to offer a suitable service and to fulfill requested inquiries, Fininfo Compass, Fininfo Road Map, individual consultation or other agreed service. The basis is taking steps before entering into a contract, fulfilling a contract or our legitimate interest to respond to a received inquiry.
When the request is submitted through the profile of an elected independent expert or company, the data is provided to the respective partner so that they can respond. This is done at the explicit action of the user and is indicated in the form. After receiving the data, the partner can process the data as an independent administrator for their own communication and potential contract.
4.5. Leaflets and information messages
We send a weekly newsletter and other informational messages to individuals who have subscribed, have a plan that includes the corresponding notification, or have expressed interest through a registration form or in connection with an event. The basis is consent when the messages are marketing-related, or the implementation of a requested plan functionality when the notification is part of the service.
Every marketing communication contains an easy way to unsubscribe. Unsubscribing from marketing communications does not stop service notifications for the account, payments, security, or the execution of a requested service.
4.6. Events
When registering for an event, we process name, organization, position, contact details, and selected organizational preferences to manage participation, access, program, and subsequent information about the event. The basis is the execution of the requested registration, legitimate interest, or consent for individual marketing communications.
If the event is recorded or filmed, participants are informed in advance about the purpose, scope and manner of use of the images or recordings.
4.7. Experts and partner ecosystem
We process data from applications, surveys, professional biographies, and contracts to assess the possibility of inclusion, administer partner relationships, create an approved public profile, and direct relevant inquiries. The basis is taking steps at the request of the person, fulfilling a contract, and the legitimate interest to maintain a reliable partner network.
Only the pre-approved information for the profile is publicly published. More detailed data about preferred clients, restrictions, programs, and trading parameters may remain for internal use only.
4.8. Analysis, personalization and development
We may use aggregated or pseudonymized data for statistics, analysis of usage, improvement of search and filters, and development of services. Non-mandatory analytical and marketing technologies are used based on the consent given through the cookie panel.
Fininfo.bg may use approved technological tools, including artificial intelligence (AI) tools, to assist in the search, classification, summarization, translation, and editorial preparation of information. When processing personal data in this context, we only use the data necessary for the respective purpose and on a legal basis applicable.
Special categories of personal data or confidential information are processed through such tools only when this is necessary for a specific service, there is a applicable legal basis, and appropriate technical, organizational, and contractual safeguards are in place.
4.9. Protection of rights and compliance with the law
We may process and store the necessary data to prevent fraud and violations, protect contractual and legal rights, establish or defend legal claims, and fulfill obligations to competent authorities. The basis is a legal obligation or legitimate interest.
5. Where do we get the data from
We usually receive the data directly from the person through registration, order, form, survey, contract, email, phone, or participation in an event.
We may receive job-related data from the organization that creates or manages the corporate profile, from a partner in a joint event or service, as well as from public professional and corporate sources. When the data is not obtained directly from the person, we provide the required information within the timeframe provided by law, unless an applicable exception applies.
6. Mandatory and voluntary data
In the forms, we indicate the data without which we cannot create a profile, respond to a request, issue an invoice, or perform a service. Failure to provide them may make the relevant action impossible.
The data for marketing preferences and optional profile fields are provided voluntarily. Refusing to provide them does not limit the use of the basic service, unless the specific information is necessary for a selected personalized feature.
7. With whom do we share personal data
We provide access only to the extent necessary for the respective purpose and subject to appropriate contractual and organizational guarantees. Recipients may be:
- providers of hosting, cloud infrastructure, technical support, cybersecurity and development;
- providers of a system for managing profiles, orders and subscriptions, including the components used by WordPress and WooCommerce;
- providers of approved artificial intelligence tools when used as processors of personal data for a specific function or service, and subject to appropriate contractual, technical and organizational guarantees;
- banks and payment providers when processing the payment;
- Mail for sending and managing electronic newsletters and messages;
- CookieYes and providers of analytical or marketing tools, including services from Google and Meta, when the applicable consent is given;
- online meeting platforms, events and registration forms when used for a specific activity;
- accountants, auditors, lawyers, insurers and professional consultants in cases involving confidentiality obligations;
- an independent expert or partner is selected when the user submits a request to them or requests such a connection;
- State, judicial and control authorities, when the provision is required by law.
We do not provide contact lists of partners for self-marketing without a separate legal basis.
8. Transfer of data outside the European Economic Area
Some technology providers may process data or provide support from countries outside the European Economic Area. In such cases, we use an applicable mechanism under Chapter V of Regulation (EU) 2016/679, for example a decision on an adequate level of protection, standard contractual clauses of the European Commission and additional measures when necessary.
Information about the applicable guarantees can be requested at info@fininfo.bg, insofar as providing it does not violate the rights of other persons or security requirements.
9. How long do we store the data
The deadline depends on the purpose, the contract, legal obligations, and the need to protect rights. After its expiration, the data is deleted or anonymized, unless a longer storage period is necessary for dispute resolution, verification, or a legal obligation.
10. Cookies and similar technologies
The necessary technologies are used for security, login, user session, privacy choice retention, and the basic operation of the site. Analytical, functional, and marketing technologies that are not strictly necessary are activated based on the visitor's choice.
Details about the categories, providers, deadlines and the change in the selection are available in Cookie policy and through the consent management panel.
11. Automated processing, personalization, and artificial intelligence
Fininfo.bg can use user-defined criteria, sector, type of organization, and interests to filter opportunities and customize notifications. This helps with content orientation, but it is not an automated solution that produces legal consequences or similarly significantly affects the individual.
We do not make funding decisions or perform automated approval or rejection of project proposals.
When AI assists in the internal processing of information or the preparation of content, it is not used as the sole basis for a decision with legal or similarly significant consequences for the person.
If functionality for direct interaction with AI is introduced, the user will be clearly informed. For the specific functionality, we will also provide the necessary information regarding the processing of personal data.
12. Security
We implement appropriate technical and organizational measures, including access control, user rights management, communication protection, archiving, updates, and incident procedures. Only those who need to access the data have access to it.
No system can guarantee absolute security. In the event of a breach that creates a risk to the rights and freedoms of individuals, we notify the competent supervisory authority and the affected individuals when required by law.
13. Rights of individuals
Under the terms of Regulation (EU) 2016/679, you have the right to:
· to obtain information and access to your personal data;
· to request the correction of inaccurate or incomplete data;
· to request deletion when applicable;
· to request the restriction of processing;
· to object to processing based on legitimate interest;
· at any time to object to direct marketing;
· to withdraw your consent, without this affecting the legality before the withdrawal;
· to obtain the data provided by you in a structured, widely used and machine-readable format and, where applicable, to have them transferred;
· not be the subject of a decision based solely on automated processing when it produces legal or similarly significant consequences;
· to file a complaint with a supervisory authority or to seek judicial protection.
To exercise this right, you can send a request to info@fininfo.bg. We may request additional information only when it is necessary to verify your identity and protect your data.
We respond without unnecessary delay and, as a rule, within one month. In case of factual or legal complexity, the deadline can be extended by another two months, while notifying the person in the initial one-month period.
The exercise of rights is free, except for manifestly unfounded or excessive requests, when the law allows for a reasonable fee or a refusal.
14. Complaint to the supervisory authority
If you believe that your rights have been violated, you can file a complaint with the Commission for the Protection of Personal Data. The current contact information and methods for filing a complaint are published on www.cpdp.bg. The right to complain does not limit the possibility of contacting us first at info@fininfo.bg.
15. Data on children
The website and services of Fininfo.bg are intended for organizations, professionals, and adults and are not intended for self-use by children. If we determine that we have received data from a child without a valid reason, we will take action to delete it.
16. External sites and individual administrators
The website contains links to official sources, funding bodies, social networks, experts, and other external pages. Their operators determine independently how they process personal data. We recommend that you familiarize yourself with their policies.
Independent experts and companies from the partner network can be independent administrators regarding the data they receive for their own communication, offer or contract with the client.
17. Changes in policy
We update the policy when there are changes in the services used, the technologies used, the providers, or applicable requirements. The new version is published on the website with the date of update. In the event of a significant change, we may notify registered users via email or through the account.
The policy takes effect from the date of its publication and replaces the previous privacy policy of Fininfo.bg.