Legal

Privacy Policy

How Kalisto 01 LTD collects, uses and protects the personal data of website visitors and business contacts.

Last updated: 18 June 2026

1. Data controller

Kalisto 01 LTD (“Kalisto”, “we”, “us”) is a company registered in Bulgaria, with offices at 14 General I. Venedikov Street, Sofia Tech Park, Sofia, Bulgaria. Kalisto 01 LTD is the data controller for the personal data described in this policy. You can contact us at office@kalisto01.com.

2. Personal data we collect

  • Contact form data — name, company, email address, telephone number, selected enquiry subject and message content.
  • Email and business correspondence — the data you include when you contact us by email or during business communication.
  • Technical and security data — IP address, referrer, browser information, date/time of access and server log data needed to operate and protect the website.
  • Third-party map data — if you choose to load Google Maps on the contact page, your browser connects directly to Google and Google may process technical data according to its own terms and policies.

3. Purposes and legal bases

  • Responding to enquiries and preparing quotations — processing is necessary to take steps at your request before entering into a contract, and for our legitimate interest in B2B communication.
  • Managing orders, deliveries and technical support — processing is necessary for contract performance or for steps related to a possible business relationship.
  • Website security, abuse prevention and troubleshooting — processing is based on our legitimate interest in keeping the website secure and functional.
  • Legal, accounting and tax obligations — processing is based on compliance with applicable legal obligations.
  • Loading Google Maps after your click — the map is loaded only after your action. Google acts as an independent provider for that service.

4. Contact form processing

When you submit the contact form, the message is sent to Kalisto by email. The email contains the information you entered, plus technical details such as the source page and IP address, used for security and abuse prevention. Please do not include sensitive personal data in the message field.

5. Cookies and similar technologies

The public website does not use advertising cookies, analytics cookies or tracking pixels. We do not set non-essential cookies before consent. See our Cookie Policy for more detail. If analytics or marketing tools are added in the future, they should be activated only after appropriate consent.

6. Google Maps

The contact page includes an optional Google Maps button. The map is not loaded automatically. If you choose to load it, your browser will connect to Google servers and Google may receive your IP address, browser information and map interaction data. You can avoid this transfer by not loading the map and using the written address instead.

7. Who we share data with

We do not sell personal data. We may share data with hosting providers, email providers, IT support providers, logistics providers, professional advisers, public authorities where required by law, and manufacturing partners where this is necessary to respond to your enquiry or fulfil a business request.

8. International transfers

Some manufacturing partners or technical providers may be located outside the European Economic Area. Where this requires a transfer of personal data, we take appropriate safeguards such as contractual protections, adequacy decisions or other mechanisms recognised by GDPR.

9. Retention periods

  • Contact enquiries are normally kept for up to 24 months after the last communication, unless a longer period is needed for an active business relationship or legal claim.
  • Business, accounting and order-related records are kept for the periods required by applicable Bulgarian and EU law.
  • Technical server logs are normally kept only as long as needed for security, troubleshooting and abuse prevention.

10. Your GDPR rights

Subject to the conditions in GDPR, you may request access to your personal data, correction, deletion, restriction of processing, data portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

To exercise your rights, contact us at office@kalisto01.com. We may need to verify your identity before responding.

11. Complaint to the supervisory authority

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, website: www.cpdp.bg. You may also contact the supervisory authority in your EU Member State.

12. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. No internet transmission is fully secure, but we work to protect data using reasonable industry-standard practices.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with its revision date.

14. Contact

For questions about this policy or your personal data, contact Kalisto 01 LTD at office@kalisto01.com or by post at 14 General I. Venedikov Street, Sofia Tech Park, Sofia, Bulgaria.