Data controller
The data controller is Гръцки мрамор ЕООД, trading as GRETSKI MRAMOR, established in Dolna Gradeshnitsa village, Kresna municipality, Blagoevgrad district, Bulgaria. For privacy enquiries and requests to exercise your rights, contact sales@gretskimramor.com.
Information used in our communications
When you contact us, we process your name, email and the project information you choose to provide, such as professional role, material, quantities and description. The form also includes language, an enquiry identifier and acknowledgement of this policy. Please do not send sensitive or unnecessary personal information. Required fields are marked; without them we cannot process the corresponding enquiry.
IP address and approximate country
When you submit an enquiry, Netlify records the connection IP address. An approximate country inferred through Netlify’s IP geolocation is added to the enquiry. We use these details to investigate spam or abusive submissions and to understand enquiry origins in aggregate, relying on legitimate interests subject to balancing your rights. Country lookup runs only on submission, not on every visit. We do not request GPS, precise coordinates or device-location permission, and do not use an external geolocation service. VPNs, corporate networks and mobile carriers can cause inaccuracies; the indication is not proof of identity or actual location. We do not automatically reject enquiries solely by country. You may object by contacting us. Technical data is retained only as required for its purpose and under the applicable hosting service terms.
Purposes and legal bases
We use information to respond, prepare a quotation and manage our business relationship. Steps you request before entering a contract on your own behalf rely on GDPR Article 6(1)(b). Business representative communications and website security may rely on legitimate interests, subject to balancing your rights (Article 6(1)(f)). Legal obligations rely on Article 6(1)(c). Sending an enquiry does not subscribe you to marketing.
Service providers and transfers
Netlify hosts this website and processes technical connection data such as IP addresses and request details. Netlify Forms handles the form when submission handling is enabled. Enquiries are accessible to authorised company personnel and the hosting, email and support providers needed to deliver the service. Netlify services are subject to their applicable data processing terms. Information on recipients and safeguards for any transfers outside the EEA is available on request at our contact email. We do not sell your personal data.
Data retention
We retain enquiries for as long as needed to respond, prepare a quotation and complete the related correspondence. Retention depends on active negotiations or a business relationship, statutory record-keeping requirements and the establishment or defence of legal claims. When the purpose ends and no other lawful reason requires retention, data is deleted or anonymised.
Cookies and embedded maps
We have not added advertising tracking or visitor analytics tools to the website code. The form uses a temporary identifier in the tab’s sessionStorage to help prevent duplicate submissions. Google Maps loads only when you request it. This connects your browser to Google and transmits technical data such as your IP address. Third-party services also apply their own policies. Any future non-essential cookies or measurement tools will be accompanied by appropriate information and consent choices.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact sales@gretskimramor.com. Proportionate identity verification may be required. We normally respond within one month, subject to GDPR exceptions. We do not make solely automated decisions with legal or similarly significant effects.
Complaints and updates
You may complain to a competent supervisory authority, particularly where you habitually reside or work, or where the alleged infringement occurred. In Bulgaria, this is the Commission for Personal Data Protection (Комисия за защита на личните данни). We update this policy when our processing changes. Last updated: 25 October 2026.