Last updated: 18 October 2026
This website, fidelissoft.com, is operated by Fidelis Soft Ltd., trading as Fidelis Soft, a company registered in Bulgaria under UIC/EIK 206854689, with its registered office at Tzar Boris 60, Plovdiv, 4000, Bulgaria (“Fidelis Soft”, “we”, “us”).
We are the controller of the personal data described in this policy under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Bulgarian Personal Data Protection Act. For any privacy question, email hello@fidelissoft.com.
This policy covers personal data collected through this website. Personal data we process while delivering services to clients is governed by our client agreements and, where applicable, a data processing agreement.
When you use our contact form or email us, we collect your name, email address, company, and anything you include in your message. We use this to reply, scope a possible engagement and keep a record of our conversation.
Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
When you apply for a role or send us your CV, we collect the information you provide: typically your name, contact details, CV, work history, skills, links to profiles or portfolios, and notes from interviews. We use it only to assess your application and communicate with you about it.
Legal basis: steps prior to entering into a contract (Art. 6(1)(b)) and our legitimate interest in recruiting (Art. 6(1)(f)). If we keep your details for future roles, we will ask for your consent first (Art. 6(1)(a)). Please do not send us sensitive data such as health information, religion or political views, or copies of identity documents, unless we specifically ask for them.
With your consent, we use Google Analytics 4 to understand how visitors use the site: pages viewed, time on page, approximate location (country/city), device and browser type, and how you arrived. Analytics cookies are set only after you accept them in our cookie banner, and IP addresses are not stored by Google Analytics 4.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 4a of the Bulgarian Electronic Communications Act on cookies). You can withdraw consent at any time through the cookie settings link in the footer.
Our hosting infrastructure automatically records technical data when you visit: IP address, date and time, requested URL, referrer, browser and operating system. We use it to keep the site secure, prevent abuse and fix errors.
Legal basis: our legitimate interest in operating a secure, reliable website (Art. 6(1)(f)).
Strictly necessary: needed for the site to work, for example to remember your cookie choice. These do not require consent.
Analytics (Google Analytics 4, e.g. _ga, _ga_*): used only with your consent, kept for up to 14 months.
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may affect how the site works.
We do not sell personal data. We share it only with service providers that help us run the website and our business, under contracts that require them to protect it:
Website hosting and infrastructure providers
Email and productivity providers that store our correspondence
Google Ireland Limited (Google Analytics), only if you consent to analytics
Professional advisers such as accountants and lawyers, where necessary
Public authorities, where the law requires it
Some providers, including Google, may process data outside the European Economic Area. In that case we rely on an adequacy decision (such as the EU–U.S. Data Privacy Framework for certified companies) or on the European Commission’s Standard Contractual Clauses, together with any additional safeguards that are needed.
Contact enquiries: up to 24 months after our last contact, unless the enquiry leads to a contract, in which case contract and accounting retention periods apply.
Job applications: up to 6 months after the recruitment process ends, or longer only with your consent.
Analytics data: 14 months.
Server logs: up to 90 days, unless needed to investigate a security incident.
Under the GDPR you have the right to:
access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict how we process it;
receive your data in a portable format;
object to processing based on our legitimate interests;
withdraw consent at any time, without affecting processing that has already happened.
To exercise any of these rights, email hello@fidelissoft.com. We will reply within one month. We may ask you to confirm your identity.
You also have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg), or with the data protection authority in the EU country where you live or work.
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and least-privilege access for our team and providers. No system is perfectly secure, but we work to keep the risk low and will notify you and the authorities of a breach where the law requires it.
This website is intended for businesses and professionals. We do not knowingly collect personal data from children under 16.
We may update this policy from time to time. The “last updated” date at the top shows when it last changed. If the changes are significant, we will make them clear on this page.
Fidelis Soft Ltd., Tzar Boris 60, Plovdiv, 4000, Bulgaria. Email: hello@fidelissoft.com