Who processes the data
The controller of personal data for this site is:
- Денмар Брокерс ООД, ЕИК 103871977 · вписан в регистъра на КФН
- [email protected]
Cookies
The site sets cookies only if you agree. With your consent Google Analytics sets two — _ga, _ga_82SVPKHH1W — lasting two years; the data from them is processed by Google. If you decline, not a single cookie is set. There is no other tracking: no advertising pixels, no embedded social network buttons, no third parties other than Google Analytics.
Your choice is kept locally in your browser (localStorage, key denmar-consent) and can be changed at any time from the cookie at the bottom left of the screen.
Log of the clicks to the app stores
The download buttons and the QR codes go through the /go address, which sends the visitor to the App Store or Google Play. One line is written for each pass:
- date and time
- source — the s= code of the link or QR code the visitor came through
- operating system and device type
- browser and browser language
- country and referrer (the page the visitor came from)
- hashed IP address — sha256 with a salt; the raw IP address is never stored anywhere
- which store the visitor was sent to
The line holds no name, no e-mail and no raw IP address, and is not linked to an identified person.
The legal basis
Analytics cookies are set only on the basis of your consent. Until you give it, Google Analytics writes no cookie at all, and the consent can be withdrawn at any time.
The log of the clicks to the stores is kept on the basis of legitimate interest: measuring where visitors come from, so we know which channels work. The counting uses a hashed IP address precisely so that the raw one need not be kept.
How long the data is kept
- the detailed lines of the click log — 6 months, after which they are deleted
- after the sixth month only aggregated statistics remain: the number of clicks per source and per month, without device, country or hashed IP address. An individual person cannot be told apart from them, which is why they have no retention limit and are kept indefinitely.
- the Google Analytics cookies — two years, which is their own lifetime
Six months cover a full season — enough to see whether printed material (business cards, stickers) brings people in: a QR code is often scanned weeks after it was handed over. A longer period is not needed for that purpose.
Who the data is shared with
The data from the analytics cookies is processed by Google — and only if you have given consent. Without consent no cookie reaches Google.
Beyond that the data is shared with no one and sold to no one.
What we do not do
We do not sell data and we do not pass it on to third parties. We use no advertising, no remarketing and no profiling. The site has no forms and collects no name, e-mail or phone number — unless you write to us yourself at the address below.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- access the data processed about you
- rectification of inaccurate data
- erasure of the data
- restriction of processing and data portability
- object to processing based on legitimate interest
Consent for the analytics cookies can be withdrawn at any time from the cookie at the bottom left of the screen — without writing to anyone and without giving a reason.
The other rights are exercised by writing to: [email protected]
If you believe your rights have been infringed, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (КЗЛД).