Privacy Policy & Data Protection
Data protection and privacy practices in accordance with European regulatory standards and Regulation (EU) 2016/679 (GDPR).
Last updated: January 2026
Introduction
DAPPGENIUS LTD ("we", "our", "the Company") is committed to protecting the personal data of individuals who interact with our website and services. This Privacy Policy explains how we collect, use, store and protect personal information in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation — GDPR).
The Company is registered in Sofia, Bulgaria and operates within the European Union regulatory framework. By submitting information through our website, you acknowledge the practices described in this policy.
Controller: DAPPGENIUS LTD, Sofia, Bulgaria, European Union.
Data Collection
We collect personal data only when it is voluntarily provided to us through our consultation request form. The categories of data we may collect include:
- Full name and professional title
- Business email address
- Company or organisation name
- Country of operation
- Technical project details and requirements submitted in free-text fields
We do not collect sensitive personal data, financial information, or data from minors. We do not use cookies for tracking or analytics purposes beyond basic technical site functionality.
Legal Basis for Processing
Processing of personal data submitted through our consultation form is carried out on the following legal bases under Article 6 of the GDPR:
- Article 6(1)(b) — processing is necessary for pre-contractual steps taken at the request of the data subject
- Article 6(1)(f) — processing is necessary for the purposes of the legitimate interests pursued by the Company, namely evaluating and responding to technical enquiries
We do not process personal data for automated decision-making or profiling purposes.
Data Retention
Personal data submitted through our consultation form is retained only for as long as necessary for the purpose for which it was collected — specifically, for professional communication and the evaluation of potential engagements.
Where no contractual relationship is established following an initial enquiry, data is typically reviewed and deleted within 12 months of the last communication. Data associated with active or completed client engagements is retained in accordance with applicable legal and contractual obligations.
Data Subject Rights
In accordance with the GDPR, individuals whose personal data we process have the following rights:
- Right of access — request confirmation of whether we hold your personal data and obtain a copy
- Right to rectification — request correction of inaccurate or incomplete personal data
- Right to erasure — request deletion of personal data in certain circumstances
- Right to restriction — request that we limit the processing of your personal data
- Right to object — object to processing based on legitimate interests
- Right to portability — receive your personal data in a structured, machine-readable format
To exercise any of these rights, please contact us using the details in Section 7. We will respond within 30 days in accordance with GDPR requirements. You also have the right to lodge a complaint with the relevant supervisory authority in your country of residence.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure. These measures are aligned with our general engineering security practices and European regulatory standards.
Data submitted through our website is transmitted over encrypted connections (HTTPS). Internal access to submitted data is restricted to personnel directly involved in evaluating and responding to consultation requests.
We do not sell, rent or share personal data with third parties for marketing purposes. Data is not transferred outside the European Economic Area unless appropriate safeguards are in place.
Contact & Enquiries
For any questions relating to this Privacy Policy, or to exercise your data subject rights, please contact us directly:
- Company: DAPPGENIUS LTD
- Registered address: Sofia, Bulgaria, European Union
- Data enquiries: via the contact form →
This policy may be updated periodically to reflect changes in our practices or applicable legal requirements. The date of the most recent revision is indicated at the top of this page.