Log in List a company

Privacy Policy.

Effective from 12 November 2026 for existing users. For new users, this version applies from the moment they accept it upon registration.

This policy explains how we process the personal data of people who use In Gabrovo, in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act.

1. Administrator

Администратор на личните данни е Диджитъл Ню Ера ЕООД, ЕИК 207276590, със седалище и адрес на управление гр. София 1680, р-н Красно село, ж.к. Борово, ул. „Солун“ № 47, вх. Б, ет. 1, ап. 3А, представлявано от управителя Васил Здравков Гърбов. Връзка по всички въпроси за личните данни: hello@ingabrovo.com.

2. What data do we process?

  • Account details: name, email address and password, stored solely as an encrypted hash.
  • Proof of consent: date, version of the documents and an encrypted hash of the IP address upon acceptance of the terms and conditions.
  • Company profile and listings: the details you enter: description, contact details, prices, photos. The EIK is verified but not published.
  • Professional profile: role, experience, skills, most recent job, education, languages and, optionally, a photo. The profile replaces a CV and no files are uploaded. We do not ask for date of birth, gender, nationality, marital status or exact address. The profile is anonymous by default: your name and photo are only displayed if you choose to have a public profile. Contact details are never displayed.
  • Invitations: which company invited which profile, the message, and whether and when the invitation was accepted.
  • Public anonymous profile: a separate entry containing only your role, experience, skills, most recent position, degree and specialism, language, driving licence, willingness to travel, sector and, optionally, city. No name, photo, contact details, employer, educational institution or dates. It is created when your profile is published and disappears as soon as you hide it or delete your profile.
  • Messages sent to your anonymous profile: the sender’s name, email address, telephone number and message. We forward these to your email and keep a copy for up to 12 months.
  • Photos: before uploading, the browser resizes them, thereby removing any hidden data they contain, including the phone’s location.
  • Enquiries and messages: name, email address, telephone number (optional) and the text of the message.
  • Technical data: IP address and browser details, required for protection against misuse (limiting the number of login and registration attempts) and for the operation of the server.
  • Information about the person submitting a post: whenever a post is submitted, we store the IP address, browser and time in encrypted form so that, in the event of fraud, we can pass this information on to the relevant authorities.
  • Data on platform usage: which pages you visit, when, and how much active time you spend on them (counted only whilst the page is visible); which website you come from (the name only); what you search for using the filters; logins, posts, actions on the dashboard, enquiries and invitations. For logged-in members, this data is linked to their account. For visitors who are not logged in, it is linked only to a daily fingerprint, which changes every day and does not allow them to be recognised. For this reason, we do not use cookies and do not store anything in your browser.
  • User interactions: who sent a request or invitation to which post or profile, when, and what the outcome of the invitation was.

3. Objectives and legal basis

  • Creating and maintaining an account, and publishing and displaying your posts: performance of a contract (Article 6(1)(b) of the GDPR).
  • Forwarding an enquiry to the individual or company to whom it is addressed: your request and the performance of a contract; we require your explicit consent for the forwarding itself.
  • Display of the professional profile, including the name and contact details, of Gabrovo Informal’s partner companies and of accounts with the ‘Partner’ role: explicit consent, given by ticking the box in the profile (Article 6(1)(a) of the GDPR). This consent may be withdrawn at any time using the toggle switch in the dashboard.
  • An anonymous profile in the public list ‘Specialists in the region’, forwarding of messages to that profile and emails regarding relevant job advertisements: performance of a contract (Article 6(1)(b) of the GDPR), as this is the service you request when creating the profile. They are hidden and removed from the dashboard.
  • Statistics from anonymous profiles: legitimate interest (Article 6(1)(f) of the GDPR). Only shows groups of at least three people and only where there are at least five profiles.
  • Disclosure of your name, postal address and telephone number to a company whose invitation you have accepted: your request and the performance of a contract (Article 6(1)(b) of the GDPR).
  • Security, protection against fraud, spam and attacks, and proof of consent: legitimate interest (Article 6(1)(f) of the GDPR).
  • Вътрешен анализ на ползването на платформата (активност, поведение, връзки между потребителите) за сигурност, откриване на измами и злоупотреби и подобряване на услугата: законен интерес (чл. 6, ал. 1, б. „е“ ОРЗД). Анализът е вътрешен, не служи за реклама и не се продава, и не води до решения с правни последици за вас. Можете да възразите по всяко време на hello@ingabrovo.com.
  • Retention of data relating to the author of a post and its disclosure to the police or the public prosecutor’s office following a report of fraud: legitimate interest and legal obligation (Article 6(1)(f) and (c) of the General Data Protection Regulation).
  • Compliance with legal obligations and responding to authorities: legal obligation (Article 6(1)(c) of the GDPR).
  • Traffic measurement, only if enabled: consent given via the cookie banner (Article 6(1)(a) of the GDPR).

We do not sell personal data, we do not use it for advertising purposes, and we do not make automated decisions that have legal consequences for you.

4. Who can see the data?

  • All visitors: the published company profiles, adverts and the contact details within them, as these serve as a means of communication. The professional profile is not visible to the public.
  • Partner companies and accounts with the ‘Partner’ role: your professional profile, provided you have given your consent. With your current consent, they can see your name, photo and contact details; with your previous consent, they can see your profile without contact details and invite you. The partner processes your contact details as an independent data controller and solely for the purpose of making a job offer or proposing a collaboration.
  • To all visitors: your anonymous profile will appear in the ‘Specialists in the region’ list until you hide it. Anyone who messages you via this profile cannot see your email address unless you reply to them.
  • Employers who have posted job adverts: a link to your anonymous profile when it matches their advert.
  • Recipient of the enquiry: the details you have provided in it.
  • Data processors: the hosting provider and the email service provider through which we send emails. They process the data solely in accordance with our instructions.
  • Analytical tools: for internal analysis, we may use external tools, including artificial intelligence services, as data processors. We provide them with pseudonymised data: without names or email addresses, using codes instead of account details.
  • Public authorities: where required by law, and in the event of a report of fraud, the details of the person who submitted the post.

Data is processed within the European Union. If a service provider transfers data outside the European Union, the transfer is based on a European Commission adequacy decision (the EU–US Privacy Shield) or standard contractual clauses.

5. Deadlines

  • The account and the data it contains: for as long as the account exists. An unverified account is automatically deleted after 7 days.
  • Posts: until you delete them or close your account. A deleted post is removed permanently, along with its photos and files.
  • Enquiries: up to 12 months, after which they are automatically deleted.
  • Invitations: valid for up to 12 months, after which they are automatically deleted. If you delete your account, they are deleted immediately.
  • Information on the limit on login attempts: up to 1 hour.
  • Data relating to use of the platform: up to 13 months, after which it is automatically deleted. The daily browsing history of visitors who have not logged in cannot be linked together once the day has ended.
  • Data relating to the publisher: for as long as the publication exists, and in the event of a report of fraud, until the proceedings are concluded.
  • Proof of consent: to be provided with the account; for posts: to be provided with the post.
  • Backups: in accordance with the hosting cycle, after which they are overwritten.

6. Your rights

Имате право на достъп до данните си, на поправка, на изтриване, на ограничаване на обработването, на преносимост, на възражение срещу обработване на основание законен интерес и на оттегляне на съгласие по всяко време, без това да засяга законността на обработването дотогава. Пишете ни на hello@ingabrovo.com; отговаряме до един месец. Повечето данни можете да промените или изтриете сами от таблото си.

You have the right to lodge a complaint with the Personal Data Protection Commission: Sofia 1592, 2 Prof. Tsvetan Lazarov Boulevard, www.cpdp.bg.

7. Security

We implement technical and organisational measures: an encrypted connection (HTTPS), passwords stored only as encrypted hashes, email verification, a limit on login attempts, restricted access to the administration panel, and no document uploads. No system on the internet is completely secure; in the event of a breach that jeopardises your rights, we will notify you and inform the Commission for Personal Data Protection within the timeframe stipulated by law.

8. Children

The platform is not intended for persons under the age of 18, and we do not knowingly collect their data.

9. Changes

If there are any changes, we will update this page and the date at the top. In the event of significant changes, we will notify members by post or when they log in.