Policy
PRIVACY POLICY
1. Data Controller
The Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR) is:
“VAIOS” Ltd.
UIC: 203762342
Registered office and address of management (according to the Commercial Register):
Republic of Bulgaria, Sofia
E-mail: office@veldim.com
Website: www.vaios.bg www.veldim.com
2. Contact Details of the Data Protection Officer (DPO)
For all questions related to the protection of your personal data, you may contact us at:
E-mail: office@veldim.com
Phone: +359 878 310 010
3. Categories of Personal Data We Process
VAiOS processes only personal data necessary for the provision of its services, namely:
-
First and last name
-
Address
-
Telephone number
-
E-mail address
❗ We do not process special categories of personal data within the meaning of Article 9 of the GDPR.
4. Legal Grounds for Processing
Personal data are processed on one or more of the following legal grounds:
-
Article 6(1)(a) – explicit consent
-
Article 6(1)(b) – performance of a contract or pre-contractual relations
-
Article 6(1)(c) – compliance with a legal obligation
-
Article 6(1)(f) – legitimate interest of the controller
5. Purposes of Processing
Personal data are processed for the following purposes:
-
handling inquiries submitted via the website;
-
communication with clients and partners;
-
conclusion and performance of contracts;
-
fulfillment of accounting and legal obligations;
-
ensuring information security;
-
statistical analysis and improvement of services.
6. Data Retention Periods
| Data Category | Purpose | Retention Period |
|---|---|---|
| Contact data | Communication | up to 12 months |
| Contractual data | Contract performance | 5 years |
| Accounting documents | Legal obligation | 10 years |
| IP addresses and logs | Security | up to 6 months |
After the expiration of these periods, the data are deleted or anonymized.
7. Disclosure of Personal Data to Third Parties
VAiOS may provide personal data only to data processors with whom it has concluded data processing agreements, including:
-
SuperHosting.BG – hosting services
-
Google LLC – analytics services (Google Analytics 4)
-
Meta Platforms Inc. – social plugins
In case of data transfer outside the EU, Standard Contractual Clauses (SCC) are applied.
8. Cookies
The website uses cookies to ensure its normal functionality and to analyze traffic.
Upon your first visit, you will receive a cookie management banner allowing you to:
-
accept all cookies;
-
reject non-essential cookies;
-
manage your preferences.
Detailed information is available in the Cookie Policy.
9. Rights of Data Subjects
You have the right to:
-
receive information about the personal data we process;
-
access your personal data;
-
rectify inaccurate data;
-
request erasure (“right to be forgotten”);
-
restrict processing;
-
data portability;
-
object to processing;
-
withdraw your consent at any time.
Requests should be sent to: office@veldim.com
10. Personal Data Security Breaches
In the event of a personal data breach, VAiOS:
-
notifies the Commission for Personal Data Protection (CPDP) within 72 hours;
-
informs the affected individuals when there is a high risk to their rights and freedoms.
11. Use of the Website by Children
The website is not intended for persons under the age of 14.
Personal data of children under this age are processed only with the consent of a parent or legal guardian.
12. Right to Lodge a Complaint
If you believe that your rights have been violated, you have the right to lodge a complaint with:
Commission for Personal Data Protection (CPDP)
https://www.cpdp.bg/
13. Policy Updates
This Privacy Policy may be updated in the event of changes in legislation or in the activities of VAiOS.
The version applicable is the one published at the time of using the website.
Last update: 15.01.2026
Version: 2
COMPANY POLICY
(Quality and Information Security Policy)
1. General Provisions
“VAIOS” Ltd. is a company oriented toward sustainable development, high quality of its products and services, and ensuring maximum security of the information created and processed in the course of its activities.
The management of the company considers meeting customer requirements and expectations as a primary priority, while strictly complying with all applicable legal, regulatory, and contractual requirements.
2. Fundamental Policy Principles
In its activities, “VAIOS” Ltd. is guided by the following principles:
-
meeting customer requirements and expectations regarding quality, reliability, and security;
-
ensuring effective protection of information by guaranteeing:
-
confidentiality;
-
integrity;
-
availability;
-
-
compliance with applicable legal and regulatory requirements;
-
application of a process-based approach in managing activities and resources;
-
sustainable and responsible management of business processes.
3. Quality and Information Security Objectives
In accordance with this policy, the management of “VAIOS” Ltd. sets the following objectives:
-
continuous identification and fulfillment of customer requirements and expectations in order to deliver products and services of the desired quality;
-
implementation of active and committed leadership, ensuring unity of purpose, direction, and internal environment;
-
management of activities and resources as interconnected processes to improve financial and operational performance;
-
effective process management through rational use of equipment and infrastructure;
-
provision and maintenance of a safe, healthy, and legally compliant working environment;
-
meeting personnel needs through:
-
assessment of knowledge and skills;
-
provision of training;
-
encouragement of creative and professional development;
-
-
continuous improvement of product and service quality;
-
analysis and evaluation of data and information to support informed management decisions;
-
establishment and maintenance of mutually beneficial relationships with approved suppliers;
-
ensuring maximum security of information created and processed within the company;
-
ensuring the required level of business continuity.
4. Information Security Management System
“VAIOS” Ltd. implements, maintains, and continuously improves an Information Security Management System (ISMS) in compliance with the requirements of:
-
ISO/IEC 27001:2013
-
BDS EN ISO 9001:2015
The system covers all processes related to the creation, processing, storage, and protection of information.
5. Management Declaration
In my capacity as Managing Director of “VAIOS” Ltd., I hereby declare:
My personal commitment to providing the necessary financial, technical, and human resources for the implementation, maintenance, and continuous improvement of the Information Security Management System and the Quality Management System, in accordance with applicable international standards and legal requirements.
Managing Director:
Dimitar Todorov