Privacy notice

Who is responsible

Dragomir Rashev, operating under the name Sunday Morning Consulting, is responsible for the personal information covered by this notice. For privacy enquiries, email drago@sundaymorningconsulting.com.

Enquiries and correspondence

When you contact me, I receive the information you provide, such as your name, contact details, organisation, message and attachments. Please share only what is needed to discuss your enquiry.

I use this information to reply, understand the work you need and discuss a possible engagement. The legal basis is taking steps at your request before a contract where you are the prospective contracting party, or my legitimate interest in handling business enquiries where you represent an organisation. You choose what to send; without enough contact or project information I may not be able to answer your enquiry.

Email and external links

The business mailbox is supplied through GoDaddy Professional Email powered by Titan. Messages are also accessed using Outlook Classic. These services and their relevant subcontractors process information as needed to deliver and protect the email service.

LinkedIn articles and profile links take you to LinkedIn. Email links open your email application. Those services handle information under their own privacy notices.

Hosting and technical information

The website is hosted on Cloudflare Pages, provided by Cloudflare. Delivering and protecting the site involves processing technical information, which may include your IP address, browser and device information, requested pages and the time of a request. The purpose is reliable delivery, fault diagnosis and protection against misuse. My legal basis for this processing is my legitimate interest in operating a secure, functioning website.

Cloudflare also describes its own processing purposes in its Privacy Policy. Its Data Processing Addendum explains processing performed on behalf of customers.

Cookies and website features

The site has no contact form, checkout, advertising trackers, embedded social feeds or analytics added by me. Fonts and images are served with the site. There are no visitor accounts or newsletter subscriptions on this website.

Cloudflare security features may use strictly necessary cookies if a security check is triggered. I do not use cookies to track visitors for advertising. Adding optional analytics or embedded services would require a fresh privacy and consent review.

Providers and international processing

Hosting and email providers may process information outside the European Economic Area. Their published data-processing terms describe the safeguards for restricted transfers, including the European Commission’s standard contractual clauses where applicable. Details are available in Cloudflare’s terms and GoDaddy’s terms. Contact me if you need information about the safeguards relevant to your data.

How long information is kept

Enquiry correspondence that does not lead to work is deleted within 12 months of the last meaningful contact, unless an ongoing discussion or a specific legal need justifies keeping it longer.

For an engagement, information is kept for delivery and administration of the work, then for the applicable statutory record-keeping periods and any period needed to establish, exercise or defend legal claims. The applicable record type and obligation determine that period.

Technical information held by hosting and email providers is retained under their service and privacy terms for the relevant delivery, security or legal purpose. I have not configured a separate website access-log archive.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. These rights are subject to the conditions in data-protection law.

Contact me using the email above to make a request. You can also complain to Bulgaria’s Commission for Personal Data Protection or another competent supervisory authority.

The website does not make automated decisions about you or profile you. This notice will be updated if the relevant services or processing arrangements change.