Политика за поверителност

With this Privacy Policy we provide a statement of the general information we collect, how we use it and with whom it is shared. This Policy, together with our website Terms of Use set out the basis on which any personal data that we collect from you, or that you provide to us, will be processed by us in accordance with the EU General Data Protection Regulation (“GDPR”).


BULGARIAN INV GALLERY LIMITED ("we", "us") is a company registered in Bulgaria (Company Registration Number 175374956 at 9, Тwenty-fourth Street, Sofia 1387 Obelya region).

We value your privacy and your desire to know how your information will be handled and used. We are committed to protecting that information. We also wish to be able to personalise certain aspects of your visits to our digital content and social networking platforms, to make these more relevant to you. To better protect your privacy, we provide this Privacy Policy, which explains our information practices. This applies to information we obtain from and about individuals interacting with us and this website.

It is important for you (as an individual who provides us with Personal Data) to understand how we use (or “process”) Personal Data, including that which we collect about you during your visit to this Website, and which we process more generally pursuant to this Policy.

BULGARIAN INV GALLERY LTD. is the Data Controller of all such Personal Data.

Our aim always is to process Personal Data fairly, lawfully and transparently. However, if you are unhappy with the information provided in this Policy or have any broader questions or concerns please email pavel@mitkov.com.

Personal Data Collection

When you submit your Personal Data on this Website, you are agreeing to the processing and transfers of your Personal Data as set out in this Privacy Policy. This includes when you send a request to us via our contact form, subscribe to our mailing lists for information, invites and updates.

The types of Personal Data we collect and process may include:

(1) contact information (such as name, email)
(2) information you provide directly to us such as personal interests and photographs.
(3) website information (IP address, location information, weblogs etc)

Sensitive Personal Data is neither requested nor collected by us generally. Sensitive Personal Data includes for example information relating to race or ethnic origin, religious beliefs, and health.

We do not knowingly collect information from visitors under the age of 13 and do not offer Information Society Services (ISS) (online services) directly to children. In the event that we learn that we have collected information from a child under age 13 without verification of parental consent, we will delete that information.


"Mitkov Painting" application

The software engine of this application is implemented in the way the app uses user permissions to access device cam for it's proper work. If you are using "Mitkov Painting" application, we will use also your information in an anonymised manner for the purposes of allowing you to use the application. We never see your data and we have NOT physical access to your data, and we never store your data. After you close the application, this permissions will expire.

With this document we provide a statement that any personal data that we collect from you, or that you provide to us, will be processed by us in accordance with the EU General Data Protection Regulation (“GDPR”).


Cookies and Google Analytics

Cookies are small pieces of information stored by your browser on your computer's hard drive. If you want to know more about cookies and how they work, please refer to the following websites: http://www.allaboutcookies.org and http://www.youronlinechoices.com.

If you are visiting the Site, we will use a cookie for the duration of your visit to the Site for the purposes of allowing you to save items so that you can find them again easily. After you close your browser, this cookie will expire.

We also use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to collect information about details of our users' visits to the Site (including IP addresses) and the resources they access on it. Google Analytics provides us with reports based on this information in order to us to help us understand how visitors engage with the Site. Google Analytics will not transfer the information it collects to any third party except where required to do so by law. Please note that we will not use Google Analytics to collect any information from which you can be personally identified, and we will not associate the information provided to us by Google Analytics with Your Information. Google Analytics' cookies will remain on your computer for between thirty minutes and two years from being set / updated, unless you delete them before they expire. For more information about Google Analytics, please visit http://www.google.com/intl/en/analytics/privacyoverview.html.


You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. Unless you do this, cookies will be issued when you use our Site, but you can delete them via your browser at any time. If you do not accept cookies, or decide to delete them, you will still be able to access and use the Site but you won't be able to save any items.


Personal Data Use

Except as otherwise disclosed in this Privacy Policy, we will process Personal Data only for the purposes of responding to any related comments, questions and other interactions.

In accordance with the GDPR, we have identified below the relevant lawful basis for the processing of various types of Personal Data for different purposes:

(1) We may process Personal Data on the basis that it is in our legitimate interests and/or the legitimate interests of a third-party to do so. We have a legitimate business interest for example in offering services, projects and products to customers and clients, and in undertaking such work when agreed, and our customers and clients likewise have a legitimate interest in receiving the same. We may also process Personal Data on the basis that it is necessary for our legitimate interests in the effective management and running of the business, which may include, but is not limited to: engaging suppliers, ensuring that systems and premises are secure and running efficiently, for insurance purposes, and to protect our legal rights. We are satisfied that all such processing is not unwarranted because of any prejudicial effect on your rights and freedoms or your legitimate interests.

(2) We also use or share your information in an anonymised or aggregate manner for purposes including research, analysis, modelling, site improvement, and aggregated information services such as traffic reporting.


We will retain Personal Data for the length of time required for the specific purposes for which it is processed, as set out in this Privacy Policy. However, we may also keep your Personal Data for a longer period, for example, where required by our legal and regulatory obligations or in order to ensure we have effective back-up systems. In such cases, we will ensure that your Personal Data will continue to be subject to this Policy, restrict access to any archived Personal Data and ensure that all Personal Data is held securely and kept confidential.


Disclosure of Your Information

We will not disclose this information to anyone outside of our company unless required to do so by law.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
We will securely store your data until you instruct us otherwise.


Protecting Personal Data

We use a range of appropriate technical and organisational measures to safeguard access to and use of, your personal information and to ensure it retains its integrity and availability. These include structured access controls to systems, network protection, intrusion detection, physical access controls.


Your Rights and Responsibilities

The GDPR generally provides individuals with rights to access, to object to the processing of, to rectify, to erase, to restrict and to port their Personal Data. You can exercise any of these rights by contacting us at any time at pavel@mitkov.com.

You can also request that your Personal Data is deleted from our systems at any time, though please note that we may be entitled to continue to store such Personal Data in accordance with the law and with this Policy.

Changes to this Privacy Policy

This Privacy Policy is effective from 15 June 2018.


We may revise this Privacy Policy from time to time and will post the revised version here. As we may make changes at any time without notifying you, we suggest that you periodically consult this Privacy Policy.