I. GENERAL INFORMATION
As a data controller, “Gentle House Ltd.” (the “Company”) strictly adheres to legal and regulatory provisions regarding the collection and processing of personal data. Ensuring customer satisfaction in all aspects, especially concerning your data, is our priority. Therefore, we consider it our duty to exercise due care in processing your personal data and to take all possible measures to protect it from unlawful actions.

We hereby provide you with information about the processing of your personal data, your data protection rights, and information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).

Our aim is to offer innovative and secure solutions to our clients through recognized standards and high-tech approaches, ensuring the safety of the information and data entrusted to us.

II. DETAILS OF THE DATA CONTROLLER:
Gentle House Ltd., UIC: BG201688587
Registered address:
107 Golyama Mogila St.,
Sofia, 1000
Website: https://www.gentlehouse.bg/

III. PURPOSES OF DATA COLLECTION AND PROCESSING
In the course of our business activities, we collect and process data for the following primary purposes:
A. Recruitment and Human Resource Management
B. Execution of Contracts with Partners and Suppliers
C. Execution of Client Contracts and Service Provision
D. Video Surveillance

A. Recruitment and Human Resource Management
Recruitment
We collect and process data necessary for recruitment purposes when you apply for a position with us. This typically includes information you choose to share with us, such as your educational background, professional experience, hobbies, and interests, if you find it relevant.

We retain collected data for up to six months after the conclusion of the recruitment process. If we wish to keep your data for a longer period (e.g., for future job openings), we will explicitly request your consent during the recruitment process and inform you of the retention period.

If you provide us with copies or originals of documents during recruitment, they are stored for up to six months and then destroyed. You have the right to request their return within this period.

Human Resource Management
For employees of Gentle House Ltd., the data collected and stored generally complies with Bulgarian labor and social security legislation. This includes processing special categories of data, such as health information. In certain cases, we may collect and process data for our legitimate interests, such as property protection and management. Further details on how we process employee data are provided in our internal document, the “Privacy Notice for the Processing of Employee Personal Data of Gentle House Ltd.”

B. Execution of Contracts with Partners and Suppliers
If you are our partner or supplier, we collect certain data in relation to establishing and developing our business relationships. This includes identifying information, contact details for you or your employees working with us (e.g., names, personal identification number if necessary, address, and phone/email).
Data is retained for a period not exceeding the maximum statutory limitation period following the completion of the relevant contract to protect both your and our interests.

C. Execution of Client Contracts and Service Provision
When executing a contract with you or taking steps prior to its conclusion, we collect and process identifying and contact data, such as names, personal identification numbers, addresses, and phone/email information.

If you assign a specific service to us, we collect the legally required data to ensure proper authorization, such as in cases of power of attorney. This data is used strictly for the purposes of fulfilling the contract, including providing updates, notifications about important changes, and protecting your and our rights as needed.

For detailed information about processing your data, refer to the “Privacy Notice for the Processing of Client Personal Data of Gentle House Ltd.”

D. Marketing Activities
If you are already a client or partner, we may contact you by email within our legitimate interest to share information about new projects. Our legitimate interest relates to developing our products and services. If you prefer not to receive such communication, you can opt out by sending a brief email.

D. Video Surveillance
Video surveillance is conducted at our central office in Sofia and other locations to ensure the protection of assets. Recordings are stored for a minimal period in compliance with legislation.

Gentle House Ltd. implements the necessary technical and organizational measures to protect your privacy. Access to the data is strictly regulated and limited to authorized personnel or contracted third parties under strict confidentiality agreements.

IV. LEGAL GROUNDS FOR PROCESSING AND CONSENT
We collect and process your data only in compliance with the principles of legality and good faith. Processing is based on the following grounds:

• Pre-contractual relations or contract execution.
• Legal obligations.
• Legitimate interest, such as property protection and business development.

Consent is required for specific processing activities, and we will always inform and request your prior consent when applicable.

V. SOURCES OF INFORMATION
We collect data directly from you or your representatives before or during our contractual relations. We may also use publicly available sources, such as official registries, media, or public sanction lists.

VI. DATA SHARING
Gentle House Ltd. shares your data only with entities legally authorized to receive it, including state authorities. Access may also be granted to service providers (e.g., IT maintenance) under strict confidentiality obligations.

Gentle House Ltd. does not transfer data outside the EU.

VII. YOUR RIGHTS
Under data protection laws, you have the right to:

• Access and obtain information about your data.
• Correct inaccuracies.
• Request deletion (subject to legal retention requirements).
• Restrict processing temporarily.
• Object to processing.
• Data portability.

We respond to your requests within one month, with possible extensions communicated in advance.

VIII. RIGHT TO COMPLAIN
If you believe we violate your rights, contact us or file a complaint with the Commission for Personal Data Protection (CPDP) via their website https://www.cpdp.bg/.

IX. ADDITIONAL INFORMATION
Providing necessary personal data is mandatory to establish and maintain contractual relations. Failure to do so prevents us from forming or continuing such relations.

Our policy is regularly updated to reflect changes and improvements. Stay informed via our website https://www.gentlehouse.bg/.