Privacy policy

1. Data controller

• Directory.bg Ltd., company ID (EIK) 203919516
• Address: 6 Neofit Rilski St., 6100 Kazanlak, Bulgaria
• E-mail: info@directory.bg
• Contact form: postalcodefinder.net/contact

2. What data we process and why

When you open a page. As with any website, the server receives your IP address, your browser type, the address of the page and the time of the request. The hosting provider records them in technical logs for security, protection against attacks and troubleshooting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in keeping the site running and secure. The logs are kept briefly and deleted automatically.

What you search for. The text you type in the search box is sent to our server to find the code or place. We do not store it with your IP address or anything else that could identify you.

The tools. The codes and places you enter in the tools for a radius, a distance, a time zone or a format are sent to our server in the page address to calculate the result, like a search, and are not stored with anything that identifies you. The addresses you type in the address formatter and the envelope template stay in your browser: they are not sent to our server at all.

Your area by IP address. When you open the home page, the server looks up your IP address in MaxMind's GeoLite2 database, which is stored on our own server, to suggest the postal code of the area you are in. The address is not sent to MaxMind or anyone else and is not stored: it is used only while the request is answered. The result is a city, never an exact address. Legal basis: legitimate interest (convenience).

The "Find my postal code" button. Only if you press it and allow it in your browser, your coordinates are sent to the server (in the body of the request, not in the page address) to find the nearest postal code. We do not store them. Legal basis: your consent (Art. 6(1)(a) GDPR), which you give in your browser and can withdraw in its settings.

Visit statistics, only with your consent. If you click "Accept" in the cookie banner, the page loads the code of Statcounter and Google Analytics. It sends them the time of the visit, your IP address, browser and operating system, device type and screen size, the page you opened and the page you came from (e.g. a search engine), and both keep a random identifier in a cookie (details in section 3). Google Analytics does not store IP addresses. We use this only for overall statistics: how many people visit the site and which pages are useful. We do not use the advertising features of Google Analytics (Google signals) and do not share the data with Google for its other services. Until you accept, the code is not loaded and nothing is sent. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with "Cookie settings" at the bottom of every page.

The contact form. Your name (optional), e-mail address, subject and message, so we can reply. They are stored in the site's database and sent to our e-mail. Legal basis: legitimate interest in answering your enquiry, or, if you ask about advertising or cooperation, steps prior to entering into a contract (Art. 6(1)(b) GDPR). Against spam we also keep an irreversibly encoded form (HMAC) of your IP address for 24 hours, not the address itself.

Maps. When you reach a map, your browser loads its tiles, fonts and icons from OpenFreeMap (openfreemap.org), a free service with data from OpenStreetMap. OpenFreeMap therefore receives your IP address, your browser type and which part of the map is shown, as with any file loaded from another website. OpenFreeMap does not use cookies. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in showing where a place or code is. If you do not reach a map, nothing is loaded from OpenFreeMap.

3. Cookies

Functional cookie (first-party, postalcodefinder.net only):

• pcf_consent: your choice in the cookie banner (accept or decline). Kept for 6 months. It remembers a choice you made yourself, so it does not need separate consent.

Statistics cookies, only after you click "Accept":

• _ga and _ga_… (Google Analytics): a random identifier, to tell visitors and visits apart. First-party (postalcodefinder.net). Kept for 2 years.
• sc_is_visitor_unique (Statcounter): a random number, so that a returning visitor is not counted twice. First-party (postalcodefinder.net). Kept for 2 years.
• is_unique (Statcounter): tells first-time from returning visitors. Third-party (statcounter.com). Kept for 5 years.

You can change your choice at any time with "Cookie settings" at the bottom of every page, and delete cookies in your browser settings. The site works fully without any of them.

We do not use advertising cookies or other tracking services (such as the Facebook Pixel). If we add another statistics service, it will also load only with your consent, and we will list it here first.

4. What we do not do

• We do not sell data or share it for advertising or marketing.
• We do not build profiles or make automated decisions about you.
• We do not knowingly collect data from children under 14.

5. Who receives the data

• Hostinger International Ltd. (Cyprus), the site's hosting provider: it stores the site and its database and processes data only on our behalf and on our instructions (processor under Art. 28 GDPR).
• Our e-mail service provider: for the messages from the contact form.
• Statcounter (Ireland), the visit statistics service: only if you have given consent. It processes the data on our behalf (processor under Art. 28 GDPR).
• Google Ireland Limited (Ireland), the Google Analytics service: only if you have given consent. It processes the data on our behalf (processor under Art. 28 GDPR). The data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023).
• OpenFreeMap (openfreemap.org), the map service: receives your IP address only when a map is loaded (section 2).
• Public authorities: only when we are legally required to.

As a rule, data is processed within the European Economic Area. If a provider we use processes it outside the EEA, this happens only with the safeguards of the GDPR (a European Commission adequacy decision or standard contractual clauses).

6. How long we keep data

What you search for

not stored with anything that identifies you

IP address for "Find my postal code"

not stored

Coordinates from "Use my location"

not stored

Addresses in the address formatter and the envelope template

not sent to us: they stay in your browser

Technical server logs

briefly, under the hosting provider's rules

Your choice in the cookie banner (pcf_consent)

6 months, in your browser

Visit statistics in Google Analytics (only with consent)

up to 14 months, then deleted automatically

Visit statistics in Statcounter (only with consent)

detailed records only for the latest visits, as many as Statcounter keeps for our account; overall figures without IP addresses for longer

Contact form messages

up to 2 years, then deleted automatically

Encoded IP address from the form

24 hours

7. Your rights

Under the GDPR you have the right:

• to access the data we process about you (Art. 15);
• to have it corrected (Art. 16) or erased (Art. 17);
• to restrict its processing (Art. 18);
• to receive it in a machine-readable format (Art. 20);
• to object to processing based on legitimate interest (Art. 21);
• to withdraw your consent at any time, without affecting processing before the withdrawal.

Write to us at info@directory.bg or through the contact form. We reply within one month. Since we keep no data that identifies you (except contact form messages), we may ask you for details.

8. Complaints

If you believe your rights have been violated, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection or with the supervisory authority of the EU country where you live:

Commission for Personal Data Protection

2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria

Phone

+359 2 915 35 18

E-mail

kzld@cpdp.bg

Website

www.cpdp.bg

9. Security

The connection to the site is encrypted (HTTPS). Only authorized members of the team have access to the database and to contact form messages.

10. Changes

When we change this policy, we update the date at the top. We will also point out significant changes on the site.