Privacy Policy (GDPR / EU Compliance)

Privacy policy

Introduction

This Privacy Policy explains how Bilfas collects, processes, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable European data protection laws.

As a web development and digital agency, Bilfas is committed to transparency, data minimization, and safeguarding the rights and freedoms of individuals whose personal data we process.

By using our website or contacting us through any communication channel, you acknowledge and agree to the practices described in this Privacy Policy.

Data Controller

The data controller responsible for processing your personal data is Bilfas, as the website owner and service provider.

All personal data is processed lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes.

Personal Data We Collect

Bilfas collects only the personal data that is necessary to provide services, communicate with users, and ensure proper website functionality.

Categories of Personal Data

  • identification and contact data (such as name, email address, phone number)
  • business-related information voluntarily submitted via contact or inquiry forms
  • technical data (IP address, browser type, device information, operating system)
  • usage data (pages visited, interaction data, time spent on the website)

Bilfas does not intentionally collect special categories of personal data unless explicitly required and legally permitted.

Legal Basis for Processing (GDPR Article 6)

Bilfas processes personal data only when at least one lawful basis applies.

Our legal bases include:

  • consent provided by the data subject
  • performance of a contract or pre-contractual steps
  • compliance with legal obligations
  • legitimate business interests that do not override the rights and freedoms of users

Where processing is based on consent, you have the right to withdraw your consent at any time.

How We Use Personal Data

Personal data is processed strictly for defined and legitimate purposes and is never used in a manner incompatible with those purposes.

Bilfas may use personal data to:

  • respond to inquiries and communication requests
  • provide and improve web development and digital services
  • maintain website security and functionality
  • analyze website usage to enhance user experience
  • comply with legal and regulatory obligations

Bilfas does not sell, rent, or trade personal data to third parties.

Data Retention

Bilfas retains personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations.

Once personal data is no longer required, it is securely deleted or anonymized.

Data Security

Bilfas implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

These measures include secure servers, access controls, and regular system monitoring. While we take all reasonable precautions, no method of online data transmission or storage can guarantee absolute security.

Data Subject Rights (GDPR Chapter III)

Under GDPR, you have specific rights regarding your personal data processed by Bilfas.

Your rights include:

  • the right to access your personal data
  • the right to rectification of inaccurate or incomplete data
  • the right to erasure (“right to be forgotten”)
  • the right to restrict or object to processing
  • the right to data portability
  • the right to withdraw consent at any time

Requests related to your personal data can be submitted through Bilfas’ official contact channels and will be handled within the legally required timeframe.

Third-Party Services

The Bilfas website may contain links to third-party websites or tools. Bilfas is not responsible for the privacy practices, content, or security of external services.

We recommend reviewing the privacy policies of any third-party services you choose to interact with.

International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), Bilfas ensures that appropriate safeguards are in place in accordance with GDPR requirements.

Changes to This Privacy Policy

Bilfas reserves the right to update this Privacy Policy to reflect legal, technical, or business changes.

Any updates will be published on this page and become effective immediately upon publication.

Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact Bilfas using the contact information available on our website.