Privacy Notice
Last updated: 1 September 2026
01 /
Who we are
R&D Solutions Ltd. (“RND”, “we”) is the data controller. UIC 203244195, VAT BG203244195, 1 Atanas Dukov str., floor 6, EN Building, 1407 Sofia, Bulgaria. General contact: contact@rnd-solutions.net. For anything about your personal data: dataprotection@rnd-solutions.net.
02 /
What this notice covers
This notice covers personal data we process through this website. It does not cover data we process as a service provider on behalf of our clients — in that work we act as a processor under our contracts with them.
03 /
What we collect and why
(a) Contact form
Name, company, work email and your message. We use it only to read and reply to your enquiry. Legal basis: our legitimate interest in responding to business enquiries, and taking steps at your request before entering a contract. Your message is delivered to our mailbox by email; we do not store form submissions in a database. We keep the correspondence for as long as the enquiry, and any relationship that follows from it, requires — then delete it.
(b) Job applications
If you email us a CV, we process the personal data you choose to send (typically name, contact details, qualifications and employment history). Legal basis: taking steps at your request before entering an employment relationship, and our legitimate interest in recruitment. We keep applications for up to three years so we can consider you for future roles, unless you ask us to erase them sooner.
(c) Abuse prevention
To stop automated spam we count submissions per network address. We never store your IP address. We store a one-way, salted cryptographic hash of it together with a timestamp, and delete it automatically after 24 hours. Legal basis: our legitimate interest in keeping the site usable and secure.
04 /
Who processes data for us
We use these providers, each under a data processing agreement:
- Lovable — website hosting.
- Supabase — database hosting for the 24-hour abuse-prevention records.
- Resend — delivery of the email generated by the contact form.
- Microsoft 365 — our business mailboxes, where enquiries and applications are received.
Some of these providers are established outside the EEA or use infrastructure there. Where personal data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We do not sell personal data, we do not share it for advertising, and we do not use it for automated decision-making or profiling.
05 /
Cookies and similar technologies
This site sets no analytics or advertising cookies. It stores one small item in your browser to remember your cookie choice. See the Cookie Notice for details.
06 /
Your rights
- Access to your personal data
- Rectification of inaccurate data
- Erasure
- Restriction of processing
- Objection, including objection to processing based on legitimate interests
- Data portability
- Withdrawal of consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal
To exercise them, email dataprotection@rnd-solutions.net. We respond within one month.
You also have the right to complain to the Bulgarian supervisory authority — Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, kzld@cpdp.bg, www.cpdp.bg.
07 /
Security
We apply access controls, encryption in transit, and the principle of least privilege. The abuse-prevention table is reachable only by the site’s own server and holds no readable identifiers.
08 /
Changes
We may update this notice; the date at the top shows the current version.