Privacy Policy
Last updated: 9 August 2026
This Privacy Policy explains how FANTASY SOFTWARE PLTD EOOD ("Fantasy Software", "we", "us"), UIC 206884700, with registered office at 38 Damyan Gruev str., 1606 Sofia, Bulgaria, processes personal data in connection with this website, fantasysoft.co. It applies to this website only; where we build and operate software for clients, each client is the controller of the data in their own system and their own privacy notice applies.
Data controller
FANTASY SOFTWARE PLTD EOOD is the data controller for personal data processed through this website. You can reach us at [email protected] for any privacy-related question or request.
What we collect
- Contact correspondence. If you email or call us, we process your name, contact details, and the contents of your message in order to reply and to manage the business relationship.
- Analytics. This website uses Google Analytics to understand aggregate visitor behaviour (pages visited, approximate location, device type). Analytics data is pseudonymous; we do not use it to identify individual visitors.
- Server logs. Our hosting infrastructure keeps standard technical logs (IP address, request time, user agent) for security and troubleshooting, retained for a limited period.
Legal bases
We process correspondence on the basis of our legitimate interest in responding to enquiries and taking pre-contractual steps (Art. 6(1)(b) and (f) GDPR). Analytics and other non-essential cookies run on the basis of consent where required (Art. 6(1)(a) GDPR). Security logging relies on our legitimate interest in keeping the service safe (Art. 6(1)(f) GDPR).
Cookies
We use a small number of cookies and similar technologies. Details of each cookie, its purpose, and how to control them are set out in our Cookie Policy. You can withdraw consent to non-essential cookies at any time through your browser settings.
Retention
We keep business correspondence for as long as needed to handle the relationship and to meet legal record-keeping obligations, then delete or archive it. Analytics data is retained according to our Google Analytics configuration, and server logs are kept for a short, limited period.
Sharing and international transfers
We do not sell personal data. Data may be processed by our service providers (for example hosting and analytics) under data-processing agreements. Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (cpdp.bg).
Changes
We may update this policy from time to time. The "last updated" date above reflects the current version.
Contact
For any request regarding your personal data, contact [email protected].