Privacy policy

Privacy Policy

This policy explains how we handle personal data when you use our website.

Updated

Introduction

This website is operated by DevInPro (the Bulgarian company „ДевИнПро“ ЕООД, EIK 207781322).

DevInPro is the data controller responsible for the personal data processing described in this policy when acting for its own purposes.

Our registered company details, including our registered address, are available on the DevInPro website, on the Legal Information (opens in a new tab) page.

This policy explains how we process personal data when you visit our website, contact us, or enquire about our services. Where we process personal data on behalf of clients, our responsibilities are governed by the applicable agreements and data protection arrangements.

This policy applies to the public informational website at a3bss.com. A3BSS is a product of DevInPro. Public product access is not available yet.

Information we process

Enquiries. If you contact us by email or telephone, we process the contact details, message content and other information you choose to provide so that we can respond to your enquiry.

Website requests. Our hosting and delivery provider, Cloudflare, processes technical information needed to deliver and protect the website. This may include your IP address, requested pages, request times, browser and device information, and security-related request data.

Browser preferences. We store your analytics consent decision in a first-party cookie and, if you select a light or dark theme, your appearance preference in local storage. See our Cookie Policy for details.

Website analytics. We use Google Analytics 4 through Google Tag Manager with advanced Consent Mode to understand website usage. Limited measurements without analytics cookies may be sent to Google before you make a choice or if you reject analytics cookies. These may include page and referrer information, browser and device details, and consent status. If you accept analytics cookies, Google Analytics can also use cookie identifiers to measure visits and interactions.

Providing personal information

You do not need to submit personal information to browse our website. Technical data may still be processed as described in this policy.

Providing information when contacting us is voluntary. However, we need sufficient contact information to respond. Without it, we may be unable to handle your request.

We use personal data to respond to enquiries, communicate with you, deliver and protect the website, investigate technical issues, and comply with legal obligations.

We use website usage measurements to understand which pages are useful and where improvements are needed. This may include limited measurements without analytics cookies; cookie-based analytics depends on your acceptance of analytics cookies.

Where GDPR applies, we process personal data on the legal basis appropriate to each purpose. We rely on our legitimate interests in operating a reliable and secure website and handling ordinary business correspondence.

Where an enquiry concerns a possible contract, we may process information to take steps at your request before entering into that contract. We may also process information where necessary to comply with legal obligations.

Cookie-based analytics relies on your consent. You can withdraw your acceptance of analytics cookies using the controls described in our Cookie Policy.

Cookies and website analytics

We use Google Analytics 4 through Google Tag Manager to understand how visitors use our website and where improvements may be needed.

Google Analytics may receive limited measurements without analytics cookies before you make a choice or if you reject analytics cookies. Accepting analytics cookies enables cookie-based measurement.

For more information about cookies, browser preferences and how to manage your choices, see our Cookie Policy.

Service providers and disclosures

We use service providers for website hosting, delivery and security, as well as business email and communications to handle enquiries. These providers process information as needed to deliver their services, subject to applicable data protection arrangements.

We use Google Analytics 4 through Google Tag Manager to measure website usage. Information is sent to Google as described in this policy. Learn more about how Google uses information from sites and apps that use its services (opens in a new tab).

We may also disclose information where required by law.

How long information is kept

We retain enquiry correspondence while handling your request and any related follow-up. We periodically review it and delete information that is no longer needed, unless continued retention is necessary to meet legal obligations or establish, exercise or defend legal claims.

Security logs are retained as needed to detect, investigate and respond to security incidents and troubleshoot technical issues. We review their continued usefulness and delete or anonymize logs that are no longer needed. Relevant records may be retained longer for an ongoing investigation, legal obligation or legal claim.

Google Analytics retains user-level and event-level data for 14 months. If a returning visitor generates new activity, the retention period for their user identifier may restart, while individual events remain subject to the 14-month period. These settings do not affect standard aggregated reports.

Our first-party consent cookie lasts for 180 days from your latest saved choice. Your selected theme preference has no automatic expiry and remains until changed or cleared.

For more information about cookie lifetimes and browser storage, see our Cookie Policy.

Data security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. Although no method of transmission or storage is completely secure, we take steps to safeguard the personal data we process.

International transfers

Our service providers may process personal data outside the European Economic Area (EEA), including in the United States. Where applicable, international transfers are subject to appropriate safeguards under data protection law.

Google may rely on the EU–US Data Privacy Framework for transfers covered by that framework and on Standard Contractual Clauses where applicable. For more information, see Google's international data transfer documentation (opens in a new tab) and the Google Ads Data Processing Terms (opens in a new tab).

Your rights

Under the GDPR, you may have the right to access, correct or delete your personal data, restrict or object to its processing, and request data portability, depending on the circumstances.

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. You can manage your analytics cookie consent through Your choices in our Cookie Policy.

To exercise your data protection rights, contact us at office@devinpro.com. We may need additional information to verify your identity before responding to certain requests.

You also have the right to lodge a complaint with a competent data protection supervisory authority, including in the EU country of your habitual residence, workplace or the alleged infringement.

Questions about privacy

For privacy questions or to exercise your data protection rights, contact DevInPro at:

For general project enquiries, visit our Contact page.