Privacy policy

1.What data we collect

We collect data only when you send us an enquiry. Through the form on the website, we collect your name, phone number, email address (if you have given one), the apartment you have selected, your message (if you have written one), the time of your consent and a hashed IP address, converted so that the real address cannot be recovered from it.

Through the enquiry form in one of our Facebook or Instagram ads, we collect your name and phone number (Facebook or Instagram fill them in from your profile, and you can change them before you send the form) and your answers to the questions in the form, for example what kind of apartment you are looking for and when it is convenient for us to call you.

If you write to us on Facebook or Instagram and leave us a phone number, we record your name and phone number with the enquiries so that we can call you.

We do not build profiles, we do not track your behaviour on the website and we do not collect data outside these enquiries.

2.Why and on what basis

We use your data to reply to your enquiry and to arrange a meeting. For the form on the website, the legal basis is the consent you give by ticking the box. Without it, the enquiry is not sent.

For enquiries through Facebook and Instagram, the legal basis is your request that we contact you prior to a possible contract (Article 6(1)(b) of the GDPR). You submit the form yourself, and it contains a link to this policy.

3.Where it is stored and who processes it

Data from the form on the website is stored in a Supabase database. For every enquiry, we also receive an email notification at office@redinvestment.bg through the Resend service. The website itself is hosted on Vercel.

The enquiry forms on Facebook and Instagram are displayed, and the data from them is stored, by Meta Platforms Ireland Ltd. as our service provider. How Meta processes your data as a Facebook and Instagram user is described in its own privacy policy.

So that we can call you and nobody is missed, we keep all enquiries in one spreadsheet on Google Drive (Google), with no public access.

Supabase, Resend, Vercel, Meta and Google process the data only as our service providers, under contract and only for the purposes above. We do not sell your data and do not share it with third parties for marketing.

4.How long we keep the data

We keep the data from enquiries (from the website, from the Facebook and Instagram forms and from messages) for 24 months, after which it is deleted. If you ask for it to be deleted sooner, we do so straight away.

5.Cookies and statistics

The website does not set tracking cookies. The only cookie is a functional one: “lang” remembers, for one year, the language you have chosen with the language switch on the website. We measure visits with Vercel Analytics, a service that does not use cookies and does not identify individuals.

The map in the “Location” section is provided by Google Maps: until you press “Open the map”, nothing is loaded from Google. After that, your browser downloads a script and map images from Google’s servers. They receive your IP address, may set cookies and process it in accordance with Google’s privacy policy. We do not pass any of your data to Google.

6.Your rights

You have the right to access your data, to have it corrected or deleted, and to withdraw your consent at any time. Withdrawal does not affect processing carried out before it. You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP).

For any of this, write to us at office@redinvestment.bg.

7.Changes to this policy

We may update this policy if the way we process data changes. The date at the top shows the latest version.