top of page

Privacy Policy

Aspar Group

Last updated: 13 November 2026

1. Introduction

Welcome to Aspar Group.

Aspar Group ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, www.aspargroup.com, contact us, or use our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Bulgarian data protection legislation.

By using our website, you acknowledge that you have read this Privacy Policy.

2. Data Controller Information

The data controller responsible for processing your personal data is:

Company: Aspar Group
Website: https://www.aspargroup.com
Email: info@aspargroup.com
Registered address: ul. Ovcharska 22, Sofia, 1000, Bulgaria
Company registration number: 208226003
Country: Bulgaria

For any questions concerning this Privacy Policy or the processing of your personal data, you can contact us using the email address above.

3. Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal data:

3.1. Information you provide directly

When you contact us or submit an enquiry, we may collect:

  • Full name.

  • Email address.

  • Telephone number.

  • Company name and job title.

  • Information included in your message or enquiry.

  • Any other information you voluntarily provide.

3.2. Technical and usage information

When you visit our website, certain technical information may be collected automatically, where applicable:

  • IP address.

  • Browser type and version.

  • Device type and operating system.

  • Website pages visited.

  • Date and time of access.

  • Referring website addresses.

  • Website interaction and usage information.

3.3. Cookies and similar technologies

Our website may use cookies and similar technologies to improve functionality, analyse website traffic and enhance the user experience.

Further information is provided in Section 9 of this Privacy Policy.

4. How We Use Your Personal Data

We may process your personal data for the following purposes:

  • To respond to enquiries and requests submitted through our website or email.

  • To communicate with potential and existing clients, business partners and other contacts.

  • To provide information about our company, products and services.

  • To manage and maintain our business relationships.

  • To improve our website, services and user experience.

  • To maintain website security and prevent fraud or misuse.

  • To comply with applicable legal and regulatory obligations.

  • To establish, exercise or defend legal claims.

  • To send business-related updates or marketing communications where legally permitted.

We only process personal data where we have an appropriate legal basis under applicable data protection legislation.

5. Legal Basis for Processing

Under Article 6 of the GDPR, we rely on one or more of the following legal bases:

Consent (Article 6(1)(a))

Where you have given your consent, for example, for certain cookies or marketing communications.

Contractual necessity (Article 6(1)(b))

Where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Legal obligation (Article 6(1)(c))

Where processing is necessary to comply with applicable laws and regulations.

Legitimate interests (Article 6(1)(f))

Where processing is necessary for our legitimate business interests, such as responding to business enquiries, maintaining website security, improving our services and managing business relationships, provided these interests do not override your fundamental rights and freedoms.

Where we rely on legitimate interests, we consider and balance our interests against your privacy rights.

6. Sharing Your Personal Data

We do not sell or rent your personal data to third parties.

However, we may share personal data with the following categories of recipients where necessary and lawful:

  • Website hosting and IT service providers.

  • Website maintenance and technical support providers.

  • Email and communication service providers.

  • Professional advisers, including legal and accounting advisers.

  • Business partners and service providers involved in delivering our services, where appropriate.

  • Public authorities, regulators and law enforcement agencies where required by law.

Where third parties process personal data on our behalf, we take appropriate steps to ensure that they are subject to suitable confidentiality, security and data protection obligations.

7. International Data Transfers

Aspar Group is based in Bulgaria, within the European Economic Area (EEA).

If your personal data is transferred outside the EEA, we will ensure that appropriate safeguards are implemented in accordance with the GDPR.

Such safeguards may include:

  • An adequacy decision adopted by the European Commission.

  • Standard Contractual Clauses approved by the European Commission.

  • Other legally recognised transfer mechanisms and appropriate supplementary measures, where required.

You may contact us for further information about international transfers and the safeguards used.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

Retention periods depend on the nature of the information and the purpose of processing.

In general:

  • Enquiry and correspondence information is retained for as long as necessary to respond to and manage the enquiry and any subsequent business relationship.

  • Client and contractual information is retained for the duration of the relevant business relationship and any additional period required by applicable law.

  • Accounting and financial records are retained for the statutory periods required under Bulgarian law.

  • Technical and website usage information is retained only for the period necessary for security, maintenance and analytical purposes.

When personal data is no longer necessary, we will securely delete or anonymise it, unless we are legally required to retain it.

9. Cookies

Our website may use cookies and similar technologies.

Cookies are small text files stored on your device when you visit a website.

They may be used for the following purposes:

Strictly necessary cookies

These cookies are essential for the proper functioning and security of the website.

Functional cookies

These cookies may remember your preferences and improve website functionality.

Analytics cookies

These cookies may help us understand how visitors interact with our website and improve its performance.

Marketing cookies

These cookies may be used to deliver relevant advertising or measure advertising effectiveness, where applicable.

Where required by law, we will request your consent before placing non-essential cookies on your device.

You can manage your cookie preferences through our cookie consent tool, if available, and through your browser settings.

Please note that disabling certain cookies may affect website functionality.

10. Your Data Protection Rights

Under the GDPR, you have the following rights, subject to applicable legal conditions:

Right of access

You can request confirmation of whether we process your personal data and obtain a copy of the information.

Right to rectification

You can request correction of inaccurate or incomplete personal data.

Right to erasure

You can request deletion of your personal data where the legal requirements are met.

Right to restriction of processing

You can request that we restrict the processing of your personal data in certain circumstances.

Right to data portability

You can request to receive certain personal data in a structured, commonly used and machine-readable format.

Right to object

You can object to processing based on our legitimate interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact:

Email: info@aspargroup.com

We may request reasonable information to verify your identity before responding.

We will generally respond to requests within one month of receipt, subject to any lawful extension permitted under the GDPR.

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

  • Appropriate access controls.

  • Secure data storage and transmission.

  • Technical security measures.

  • Internal procedures for handling personal data.

  • Limiting access to personal data to authorised individuals.

Although we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure.

12. Third-Party Websites

Our website may contain links to third-party websites, platforms or services.

These websites operate independently and have their own privacy policies and data protection practices.

Aspar Group is not responsible for the privacy practices, content or security of third-party websites.

We encourage you to review their privacy policies before providing personal information.

13. Children's Privacy

Our website and services are not specifically directed at children.

We do not knowingly collect personal data from children in circumstances where such collection is not permitted by applicable law.

If you believe that a child has provided us with personal data unlawfully, please contact us so that we can investigate and take appropriate action.

14. Automated Decision-Making

Aspar Group does not intend to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you through this website.

If this changes, we will provide the information required by applicable data protection legislation.

15. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Bulgaria, the supervisory authority is:

Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: https://www.cpdp.bg/

You may also exercise your rights directly with Aspar Group before or alongside contacting the supervisory authority.

16. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, website functionality or applicable legal requirements.

Any updates will be published on this page, together with the revised "Last updated" date.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data.

17. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way we process your personal data, please contact us:

Aspar Group
Website: https://www.aspargroup.com
Email: info@aspargroup.com
Address: ul. Ovcharska 22, Sofia, 1000, Bulgaria
Company registration number: 208226003

We will make reasonable efforts to respond to your enquiry as promptly as possible.

bottom of page