Privacy Policy
Last updated:
This policy explains what personal data CCEVO EOOD collects through its websites, why we use it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Who we are
The data controller responsible for your personal data is CCEVO EOOD, a single-member limited liability company registered in Bulgaria, European Union (“CCEVO”, “we”, “us”).
You can contact us about anything in this policy, including to exercise your rights, at [email protected].
Scope of this policy
This policy applies to ccevo.com and to the websites operated by CCEVO that link to this policy (together, “our websites”). Our websites help homeowners in the United States find and contact local service providers.
Local service providers are independent businesses and are not operated by CCEVO. When a service provider receives your information, it handles that information under its own privacy policy.
Data we collect
Contact messages
When you email us or send a message through a form on one of our websites, we receive the information you choose to provide, such as your name, email address, phone number and the content of your message, including any details about the service you need.
Phone calls through tracking numbers
Some of our websites display phone numbers that forward your call to a local service provider. These are call tracking numbers: they tell us which website a call came from. When you call one, we and our telephony provider receive:
- your phone number (caller ID) and the general location associated with it;
- the date, time and duration of the call;
- the number you dialed and the website or page where it was shown;
- a recording of the call, where calls are recorded. If a call is recorded, this will be announced at the beginning of the call.
Basic analytics and technical data
When you visit our websites, we collect basic information about how they are used, such as the pages viewed, the referring website, your approximate location (country or region), your device and browser type, and the date and time of your visit. We use this information in aggregated form and do not use it to identify individual visitors.
Our hosting provider also processes your IP address and similar technical data, which is necessary to deliver the website to your browser and to protect it against abuse.
We do not ask for sensitive information, such as health data. Please do not include it in your messages.
Why we use it
We use personal data only for the purposes below, each with a legal basis under Article 6 of the GDPR.
| Purpose | Legal basis |
|---|---|
| Replying to your messages and handling your requests | Steps taken at your request before entering into a contract (Art. 6(1)(b)); our legitimate interest in responding to inquiries (Art. 6(1)(f)) |
| Connecting your call to a local service provider | Necessary to provide the connection you asked for (Art. 6(1)(b)) |
| Measuring which websites generate calls, verifying calls for billing with service providers, and preventing fraud and spam | Our legitimate interests in operating our business, billing accurately and keeping our services secure (Art. 6(1)(f)) |
| Understanding how our websites are used and improving them | Our legitimate interest in running useful websites (Art. 6(1)(f)), or your consent where the law requires it (Art. 6(1)(a)) |
| Delivering our websites and protecting them against abuse | Our legitimate interest in operating secure websites (Art. 6(1)(f)) |
| Keeping accounting records and meeting other legal obligations | Compliance with a legal obligation (Art. 6(1)(c)) |
Giving us personal data is voluntary. If you do not provide it, we may not be able to reply to your message or connect your call.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
International transfers
Our websites serve users in the United States, and some of our service providers are located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we rely on appropriate safeguards, such as an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework for certified companies) or the European Commission’s Standard Contractual Clauses.
When you ask to be connected with a local service provider in the United States, passing your information to that provider is necessary to carry out your request (Art. 49(1)(b) GDPR).
You can contact us for more information about the safeguards we use.
How long we keep it
We keep personal data only for as long as we need it for the purposes described above.
| Data | Retention period |
|---|---|
| Contact messages | Up to 24 months after our last communication with you |
| Call details (caller number, date, time, duration, source) | Up to 24 months after the call |
| Call recordings, where made | Up to 12 months after the call |
| Analytics data | Up to 14 months; aggregated statistics that do not identify anyone may be kept longer |
| Hosting and security logs | For the short period needed for security and troubleshooting |
| Accounting records | As long as required by Bulgarian accounting and tax law |
We may keep data for longer where it is needed to establish, exercise or defend legal claims, and only for as long as necessary for that purpose. When data is no longer needed, we delete or anonymize it.
Your rights
Under the GDPR, you have the right to:
- Access your personal data and receive a copy of it (Art. 15).
- Rectification of inaccurate or incomplete data (Art. 16).
- Erasure of your data, for example when it is no longer needed (Art. 17).
- Restriction of processing in certain circumstances (Art. 18).
- Data portability: to receive data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another controller (Art. 20).
- Object to processing based on our legitimate interests, on grounds relating to your situation (Art. 21).
- Withdraw consent at any time, where processing is based on consent. This does not affect processing carried out before you withdraw it (Art. 7(3)).
- Lodge a complaint with a data protection supervisory authority (Art. 77).
Exercising your rights
To exercise any of your rights, email us at [email protected]. If your request is about a phone call, please include the phone number you called from and the approximate date of the call so we can find the relevant records.
We will respond within one month of receiving your request. For complex or numerous requests, this period may be extended by up to two further months, in which case we will let you know. We may ask for information to confirm your identity. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
You can lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (www.cpdp.bg), or with the supervisory authority in the EU member state where you live or work, or where you believe an infringement took place. We would appreciate the chance to address your concerns first, so please feel free to contact us.
Security
We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS) to our websites and limiting access to personal data to those who need it. No method of transmission or storage is completely secure, but we take care to protect the data we hold.
Children
Our websites are intended for adults and are not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page shows when it was last changed. If we make significant changes, we will make them clear on this page.
Contact us
CCEVO EOOD
Registered in Bulgaria, European Union
Email: [email protected]