Last updated: 30 October 2026
1. General Information
This Privacy Policy explains how personal data of visitors to drristeska.bg is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Bulgarian legislation.
The protection of personal data and the privacy of website visitors are important priorities.
2. Data Controller
The data controller responsible for personal data processed through this website is:
Dr. Maya Risteska Markova
Website: drristeska.bg
Email: [email protected]
For questions regarding the processing of personal data, please contact the data controller using the email address provided above.
3. Personal Data We Collect
When visitors use the website’s contact form, the following personal data may be collected:
- Full name
- Email address
- Telephone number, if provided
- Content of the submitted message
- Technical information necessary for the operation and security of the website, including IP addresses
When visiting the website, certain technical information may also be processed, including browser information, device information and access timestamps.
4. Purposes and Legal Bases for Processing
Personal data may be processed for the following purposes:
- Receiving and responding to enquiries submitted through the contact form.
- Communicating with website visitors.
- Maintaining the security and proper functioning of the website.
- Complying with applicable legal obligations.
Depending on the specific purpose, the legal basis for processing may include:
- Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.
- Article 6(1)(f) GDPR – legitimate interests.
- Article 6(1)(c) GDPR – compliance with a legal obligation.
- Article 6(1)(a) GDPR – consent, where required.
The applicable legal basis depends on the circumstances and purpose of the processing.
5. Health-Related Information
The contact form is intended for general enquiries and establishing contact.
Visitors are requested not to submit medical records, diagnoses, laboratory results or other sensitive health-related information through the standard contact form.
If health-related personal data is nevertheless submitted, such information is subject to special protection under Article 9 GDPR.
Processing such information requires an applicable legal basis, an appropriate exception under Article 9 GDPR and suitable safeguards.
6. Data Retention
The following retention periods have been configured for data stored through the Forminator contact form:
- Contact form submissions: 90 days.
- IP addresses stored by Forminator: 7 days.
- Geolocation information, if collected and stored by Forminator: 7 days.
These retention periods apply to the relevant information stored by Forminator.
They do not automatically determine how long emails, website backups or technical server logs are retained.
Personal data is retained only for as long as necessary for the relevant purpose or as required by applicable law.
7. Recipients of Personal Data
Personal data may be accessible to authorised persons and technical service providers when necessary for the operation of the website.
Such providers may include:
- Website hosting providers.
- Email service providers.
- Website maintenance and technical support providers.
- Website security service providers.
Where service providers process personal data on behalf of the data controller, the relevant GDPR requirements apply.
8. Cookies and Third-Party Services
The website may use cookies and similar technologies necessary for its functionality and security.
Language Preferences
The website uses Polylang to provide Bulgarian and English language versions.
The functional cookie pll_language may be used to remember the visitor’s selected language.
Website Analytics
Google Analytics was disabled during the website configuration review.
The website has also been observed loading Cloudflare Web Analytics, a service used to analyse website traffic and performance.
Cloudflare Web Analytics can process technical information about website visits without necessarily storing cookies in visitors’ browsers.
The use of non-essential cookies or similar tracking technologies, where applicable, is subject to the relevant legal requirements, including obtaining prior consent when required.
Additional information is available in the website’s Cookie Policy.
9. Rights of Data Subjects
Under the GDPR, visitors have the following rights, subject to applicable legal conditions:
- The right to access their personal data.
- The right to request correction of inaccurate personal data.
- The right to request deletion of their personal data.
- The right to request restriction of processing.
- The right to object to certain types of processing.
- The right to data portability, where applicable.
- The right to withdraw consent at any time, where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise these rights, please contact:
10. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.
In Bulgaria, the relevant authority is:
Commission for Personal Data Protection (CPDP)
Republic of Bulgaria
You may also have the right to lodge a complaint with another competent supervisory authority under the GDPR.
11. Personal Data Security
Appropriate technical and organisational measures are applied to protect personal data, taking into account the nature of the processing and the associated risks.
However, no method of electronic transmission or storage can guarantee absolute security.
12. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in legislation, website technologies or personal data processing practices.
The latest version will be published on this page, together with the date of its most recent update.