General Data Protection Regulation (GDPR) Notice

This notice explains the legal bases we rely on, the safeguards we apply, and the GDPR rights you can exercise in relation to your personal data.

Legal bases for processing

  • Contractual necessity – to prepare and execute brokerage, management, or consultancy agreements.
  • Legal obligation – to meet requirements under property, tax, accounting, and anti-money-laundering laws.
  • Legitimate interest – to maintain business continuity, protect our services, and ensure accurate records.
  • Consent – to send marketing communication or share information with partners when you explicitly agree.

We retain personal data only for as long as it is necessary to fulfil the purposes described or to comply with statutory obligations. Afterwards the data is deleted or anonymised.

We share information only with partners and suppliers who assist our operations and are contractually bound to uphold strong data protection standards.

Your GDPR rights

  • Right of access – receive confirmation and a copy of your personal data.
  • Right to rectification – correct inaccurate or incomplete data.
  • Right to erasure – request deletion when data is no longer needed or processing is unlawful.
  • Right to data portability – obtain your data in a structured format or transfer it to another controller.

You can exercise your rights by sending us a written request. We respond within one month and may request additional information to confirm your identity.

How to reach us

Send GDPR enquiries to dpo@bordcom.bg or write to Sofia, ul. Sv. Kiril i Metodiy 138. We respond within one month.