Privacy Policy

1. Data controller

BioHarmena EOOD, Plovdiv, Bulgaria, is the controller of the personal data processed through this site and in providing our services. We process your data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Bulgarian law.

2. What data we process

• Booking data: name, contact details, the session chosen, date and time.
• Health information you voluntarily share before a session (for example implants, pregnancy, sensitivities). This is special-category data under Article 9 GDPR and we process it only on the basis of your explicit consent, and solely so we can run the session safely.
• Communications: the content of enquiries you send us.
• Technical data: IP address, device type and site usage data, collected through cookies with your consent.

3. Purposes and legal bases

• Performance of a contract for a booked session — Article 6(1)(b).
• Compliance with legal obligations (accounting, tax) — Article 6(1)(c).
• Legitimate interest in security and in responding to enquiries — Article 6(1)(f).
• Consent — for health information (Article 9(2)(a)) and for non-essential cookies (Article 6(1)(a)).

You may withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

4. Recipients

We share data only with carefully selected processors acting on our instructions — for example our hosting provider. We enter into data protection agreements with them. We do not sell your personal data.

5. International transfers

We aim to process data within the European Economic Area. Where data is transferred outside it, we apply appropriate safeguards, such as the European Commission's standard contractual clauses.

6. Retention

We keep personal data only as long as necessary for the relevant purpose or as required by law. Health information is deleted as soon as it is no longer needed to run sessions safely.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction and portability, as well as the right to object to processing based on legitimate interest.

You have the right to lodge a complaint with the Commission for Personal Data Protection in Bulgaria or with the supervisory authority where you live in the EU.

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

9. Changes

We may update this policy if our activities or the law change. The current version is always available on the site.