Legal information

Privacy

This notice explains which personal data is processed when you visit intelvia.net or contact us. Last updated: 16 September 2026.

Person responsible

INTELVIA EOOD
Hrabrets 9
Stolipinovo, Eastern District
4006 Plovdiv, Bulgaria
Represented by: Ethien Ivanov
E-mail: info@intelvia.net

Provision and security of the website

The website is provided through OpenAI Sites using Cloudflare infrastructure. When you visit, technically necessary connection data is processed, in particular your IP address, the time, the requested address, and information about your browser and operating system. This serves to deliver the website, analyse errors and prevent misuse. The legal basis is our legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR.

The website contains no advertising pixels or visitor behaviour analytics services integrated by us. Fonts and images are loaded from the website itself. Further information about processing by the infrastructure providers is available from OpenAI and Cloudflare.

Cookies and browser storage

The hosting infrastructure may set technically necessary security cookies. These help prevent automated attacks and operate independently of your optional consent to form verification. We do not use analytics or advertising cookies. Where section 25 TDDDG applies, strictly necessary storage access is based on subsection 2, no. 2; the associated processing of personal data is based on Article 6(1)(f) GDPR.

We store both refusal and consent in your browser for up to 180 days so that your choice is respected on subsequent visits. This storage serves only this setting, without a visitor identifier or tracking. It is necessary to implement your privacy choice. An updated information version, an expired choice or deletion of browser storage triggers a new request. If your browser blocks storage, your choice applies only to the open page. Information about security cookies and international processing can be found in the Cookie information from Cloudflare.

Language preference

This website is available in German, English and Bulgarian. On your first visit, we use the country provided by our hosting service and, where appropriate, your browser language to select a language version. Translations are stored with the website; no external translation service is loaded in your browser. If you choose a language in the footer, the intelvia-language cookie remembers your preference for up to 180 days. It contains only the language code, not a visitor identifier. You can change your choice or delete the cookie at any time.

Contact and project requests

When you contact us through the form or by email, we process your contact details and message to handle your enquiry. The form requires your name, email address and project description; selecting a service is optional. The form cannot be sent without the required information. Alternatively, you can contact us directly by email.

Enquiries about our services are processed to take steps prior to entering into a contract under Article 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR. We do not make automated decisions about your enquiry with legal or similarly significant effects, or carry out profiling for advertising.

Sending the form message

Form messages are sent through Resend (Plus Five Five, Inc., USA) to our business mailbox at united-domains. Resend receives the contact details entered and the message text. Ireland is configured as the sending region. However, Resend stores message content and delivery logs in the USA; the sending region does not mean that storage is exclusively within the EU. We do not track opens or clicks for these messages. The website does not create an additional enquiry database.

For standard plans, Resend describes retention of messages and delivery logs for 30 days and backups for seven days. These periods apply to Resend, not our business mailbox. Processing and possible international transfers are addressed in the Resend data processing addendum It contains standard EU contractual clauses. Further information: Data protection at Resend and Data protection at united-domains.

Voluntary security check of the form

Cloudflare Turnstile is loaded only if you have selected “Allow” in the cookie banner or privacy settings and that permission is still valid. Without valid consent, simply opening the page or filling in the form does not activate the service. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Technical signals such as IP address, browser characteristics, TLS connection characteristics and the website visited are processed to detect automated spam enquiries. Our application does not send the text of your project enquiry to Turnstile.

The legal basis for our integration is your consent under Article 6(1)(a) GDPR; where access to your device requires consent, section 25(1) TDDDG also applies. Cloudflare processes signals as a processor for protection purposes and under its own responsibility to improve its bot detection. Processing in the USA is possible. Cloudflare describes standard contractual clauses and other transfer mechanisms in its Data processing addendum. Details and contact information for processing under its own responsibility are provided in the Turnstile privacy addendum.

You may withdraw consent at any time through “Privacy settings” in the footer. The page then reloads to stop any third-party code that has already been loaded. This does not affect the lawfulness of processing before withdrawal. A message already sent is not recalled. Without consent, the same contact option remains available directly by email at info@intelvia.net Open.

When a form enquiry is submitted, the version of the consent information and the time of consent reported by the browser are sent with the enquiry and stored for documentation. The legal basis is Article 6(1)(c) in conjunction with Article 7(1) GDPR. No additional visitor identifier is created.

Sample shop and local storage

An existing cart is restored only when you open the STUDIO shop. Once you add sample products, your selection is saved in your browser’s session storage. An empty cart is not stored. It contains the sample products and quantities you selected. It remains for the browser session and is not transmitted to a shop or payment service. No orders or payments are created. The storage is used exclusively for the cart function you use. The legal basis is our legitimate interest in providing this function you requested under Article 6(1)(f) GDPR; where applicable, necessary storage access is covered by section 25(2), no. 2 TDDDG.

Processing outside the European Economic Area

The infrastructure of OpenAI and Cloudflare and email delivery through Resend may involve processing, in particular in the USA. The respective privacy notices and data processing addenda explain recipients and transfer mechanisms, including EU standard contractual clauses. You can request information about the safeguards applicable to your data and a copy using our contact address above. Consent to form verification does not replace any required safeguards for international transfers.

Storage duration

We retain enquiries for as long as needed to handle them, for subsequent cooperation or to protect legitimate claims. The data is then deleted unless statutory retention obligations prevent this. Technical operating data is subject to the retention periods of the services used that are necessary for delivery, security and error analysis.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time with future effect. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. Please contact info@intelvia.net.

You may also lodge a complaint with a data protection supervisory authority, particularly in your place of residence, workplace or the place of the alleged infringement. The Bulgarian supervisory authority is the Commission for Personal Data Protection.