Privacy notice

1. Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

• „ИММ КОРПОРЕЙШЪН“ ЕООД (IMM CORPORATION Ltd.), trading as Talruna
• ul. Tsaritsa Yoanna 25, ent. A, fl. 6, app. 23, 2900 Gotse Delchev, Bulgaria
• Company number (ЕИК) 203197850 · VAT number BG 203197850
• Managing director: Сирма Кръстева Маринова
• E-mail: kontakt@talruna-marketing.com

We have not appointed a data protection officer. The conditions of Art. 37 GDPR are not met: processing personal data is neither our core activity nor carried out on a large scale, and it does not involve special categories of data. Data protection enquiries are answered by the management at the address above.

2. The principle, and how to verify it

This website sets no cookies. It stores nothing in your browser and reads nothing from it — no cookies, no local storage, no session storage. There is no traffic measurement, no analytics tool, no advertising network and no consent banner.

Nor does it embed content from third-party servers: no Google fonts, no map services, no social media buttons, no video platforms. Every typeface, image and film is served from the same origin as the page itself.

This can be verified, and it is meant to be. Open your browser developer tools (usually the F12 key), go to the Network tab and reload the page: only addresses of this domain appear. Under Application, cookies and storage stay empty.

3. When you simply visit the site

Every request sends technical details that delivery requires. Our hosting provider records them in server logs:

• IP address of the requesting device
• date and time of the request
• name and path of the file requested
• volume of data transferred and the response status code
• the previously visited page, if your browser sends it (referrer)
• browser identification and operating system (user agent)

Purpose: technically sound delivery of the page, the security of our systems and the investigation of faults. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in running a reachable website protected against abuse; without these details no request can be served.

We do not routinely analyse these logs. We look at them only when a fault or an attack has to be traced. They arise at the hosting provider and are deleted there according to its own periods; we do not store them beyond that and do not combine them with any other data.

4. Hosting and delivery

This website is served by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify acts for us as a processor under Art. 28 GDPR; a data processing agreement is in place.

Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework. Transfers to the United States are therefore covered by the European Commission adequacy decision of 10 July 2023; the Commission standard contractual clauses are additionally agreed.

5. Domain and name resolution

Name resolution for the domain talruna-marketing.com runs through Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare answers queries for the IP address of our domain and nothing else.

Cloudflare is deliberately not configured as a proxy here: your browser connects directly to the hosting provider, and page content does not pass through Cloudflare. Cloudflare therefore sees neither the pages you open nor your connection data for this website. The DNS query is usually made not by your device but by your access provider name server.

Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the standard contractual clauses apply in addition.

6. When you write to us

If you contact us by e-mail we process your sender address, your name as far as you give it, and the content of your message — solely in order to answer your enquiry and to prepare possible cooperation.

The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

We delete your message once the matter is closed and no statutory retention period stands in the way. If the enquiry leads to an order, commercial and tax retention periods of six and ten years respectively apply.

Please note that unencrypted e-mail can be read in transit. Send confidential documents only after arranging it with us.

7. Quote calculator and subsidy calculator

The calculators on this site run entirely in your browser. Your entries are neither stored nor transmitted to us as long as you do not expressly press the order button.

Only then does the page send the services you selected, the quantities, the number of language versions and whether the job is urgent to our server — so that the price is recalculated there and cannot be set by the browser. That message contains no personal data.

8. Checkout and payment

The checkout is currently not switched on. If you press the order button, the page says so openly and refers you to an enquiry by e-mail. No payment data is collected and nothing is transmitted to a payment service provider.

Once the checkout is switched on, you will be taken to Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, D02 H210, Ireland, to pay. There you enter your billing address, your VAT number where applicable, and your payment details. Your card details are seen only by Stripe and the processing bank — they never reach our website. The legal basis will then be Art. 6(1)(b) GDPR, as processing is necessary to perform the contract. This notice will be extended with the applicable details before the checkout goes live.

9. Who else receives your data

Beyond the service providers named in this notice we do not pass personal data on. We do not sell data, we do not rent out mailing lists and we transmit nothing for advertising purposes.

Data is disclosed only where we are legally obliged to do so, or where it is necessary to establish, exercise or defend legal claims — for instance to a tax authority, a court or our tax advisers.

10. Your rights

Under the GDPR you have the following rights, which you may exercise against us at any time without any particular form:

• access to whether and which data we process about you (Art. 15 GDPR)
• rectification of inaccurate and completion of incomplete data (Art. 16 GDPR)
• erasure once the purpose has ceased and no retention duty stands in the way (Art. 17 GDPR)
• restriction of processing while accuracy or lawfulness is in dispute (Art. 18 GDPR)
• data portability in a common, machine-readable format (Art. 20 GDPR)
• objection to processing based on a legitimate interest (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

A message to kontakt@talruna-marketing.com is enough. We reply without undue delay and at the latest within one month.

11. Your right to complain to a supervisory authority

You may complain to a data protection supervisory authority at any time (Art. 77 GDPR). Because of our registered seat, the competent authority is:

• Commission for Personal Data Protection (Комисия за защита на личните данни)
• 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
• Phone +359 2 915 3519 · E-mail kzld@cpdp.bg · www.cpdp.bg

You may equally approach the authority of your habitual residence, your place of work or the place of the alleged infringement.

12. No automated decision-making

We take no decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing. No profiling takes place.

That is separate from how we work: we use artificial intelligence tools to produce film, text and software. This is marked on this site and concerns the creation of content, not the assessment of people.

13. Whether you have to provide data

You are under no statutory or contractual obligation to provide us with personal data. Without the technical details named in section 3, however, the website cannot be delivered, and without a sender address we cannot answer an enquiry.

14. Changes to this notice

We adjust this notice whenever something changes about our website or the services we use — for example when the checkout goes live. The version published here applies; the date appears below this notice.