Last updated: 23 July 2026
This Privacy Policy explains how Biogardn.com collects and processes personal data when you use https://biogardn.com.
Personal data is processed in accordance with applicable data-protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
1. Data Controller
The controller responsible for personal data processed through Biogardn.com is:
[Dimiter Mitev]
Website: https://biogardn.com
Contact email: office@biogardn.com
If no Data Protection Officer has been appointed, no DPO contact details need to be provided.
2. Personal Data We May Process
Depending on how you use the website, we may process:
- your name, where voluntarily provided;
- your email address;
- information submitted through contact forms;
- newsletter subscription information;
- correspondence sent to us;
- IP address;
- browser and device information;
- approximate technical location information where provided by analytics services;
- pages visited, clicks and website interactions;
- cookie and similar technology identifiers;
- technical information used for security and abuse prevention.
We aim to collect only the personal data that is necessary for the relevant purpose.
3. Purposes and Legal Bases for Processing
Contact forms and correspondence
When you contact us through a form or by email, we process the information you provide in order to review and respond to your enquiry.
The legal basis may be our legitimate interest in communicating with visitors and business contacts or taking steps at your request before entering into a possible contractual relationship, where applicable.
Newsletter
If you subscribe to the Biogardn newsletter, we process your email address to send you new articles, updates and other content you have agreed to receive.
The legal basis is your consent.
You may withdraw your consent at any time by using the unsubscribe link included in our emails or by contacting office@biogardn.com.
Analytics
We may use analytics services, including Google Analytics, to understand how visitors use the website and to improve our content and functionality.
Where analytics technologies are not strictly necessary for the website to function, they are used only where the required consent has been obtained.
Advertising
Biogardn.com may use Google AdSense or other advertising services.
Where advertising technologies use non-essential cookies or similar identifiers, they are activated subject to applicable consent requirements.
Google requires publishers serving personalised ads to users in the EEA, the UK and Switzerland to use a Google-certified Consent Management Platform integrated with the IAB Transparency and Consent Framework.
Affiliate links
Biogardn.com participates in affiliate programmes and may use platforms such as Profitshare, Amazon Associates and GetYourGuide.
When you follow an affiliate link, the relevant platform or merchant may use cookies or similar tracking technologies to attribute a purchase or action to Biogardn.com.
Processing by those providers is also governed by their own privacy policies.
Security
We may process technical data for the purposes of preventing spam, fraud, abuse and unauthorised access.
The legal basis is our legitimate interest in maintaining the security and proper operation of the website.
4. Cookies and Similar Technologies
Biogardn.com uses cookies and similar technologies.
Strictly necessary cookies may be used without prior consent where they are required to provide a service explicitly requested by the user or for essential technical operation.
Non-essential cookies, including certain analytics, advertising and tracking technologies, are used only after consent where consent is legally required.
Users must be able to accept or reject non-essential cookies and subsequently change their preferences. The EDPB distinguishes essential from non-essential cookies and does not deploy non-essential cookies where the required choice has not been made.
More information is available in our Cookie Policy.
5. Recipients and Service Providers
Depending on the functions you use, personal data may be processed by providers of:
- hosting and technical infrastructure;
- WordPress services and plugins;
- contact forms;
- email marketing and newsletter services;
- analytics;
- advertising;
- affiliate tracking;
- spam protection and website security.
Where applicable, these providers may process personal data on our behalf or as independent controllers under their own terms.
6. International Data Transfers
Some service providers may process personal data outside the European Union or European Economic Area.
Where applicable, transfers are made on the basis of an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism under the GDPR.
GDPR transparency requirements include informing individuals about transfers outside the EU and the safeguards used for those transfers.
7. Retention Periods
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.
In particular:
- contact-form submissions and correspondence are kept for a reasonable period needed to handle the enquiry and any follow-up communication;
- newsletter data is generally kept until you unsubscribe or withdraw consent, unless a legal obligation requires otherwise;
- technical and analytics information is retained according to the settings and retention periods of the relevant provider;
- information that must be kept by law is retained for the applicable statutory period.
8. Your Rights
Subject to the conditions of the GDPR, you may have the right to:
- be informed about the processing of your personal data;
- access your personal data;
- request correction of inaccurate or incomplete information;
- request erasure where the legal requirements are met;
- request restriction of processing;
- object to certain processing;
- receive your data in a portable format where the right to data portability applies;
- withdraw consent at any time where processing is based on consent;
- exercise rights relating to solely automated decision-making where applicable;
- lodge a complaint with a competent data-protection authority.
These are among the principal rights recognised by the GDPR.
To exercise your rights, contact:
Requests are generally handled without undue delay and within one month, subject to the extensions permitted by the GDPR.
9. Complaints
You have the right to lodge a complaint with a competent supervisory authority if you believe your personal data has been processed unlawfully.
For Bulgaria, the supervisory authority is the:
Commission for Personal Data Protection (CPDP / КЗЛД)
You may also contact the relevant supervisory authority in the EU/EEA country where you live or work, where applicable.
10. Children’s Data
Biogardn.com is not directed at children and we do not knowingly collect personal data from children through the website.
If we become aware that such data has been provided without an appropriate legal basis, we will take reasonable steps to remove it.
11. Automated Decision-Making
Biogardn.com does not use personal data submitted through contact forms or newsletter subscriptions to make decisions based solely on automated processing that produce legal or similarly significant effects.
Third-party advertising or analytics providers may use automated technologies in accordance with their own policies and the consent choices made by the user.
12. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or unlawful disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
13. External Links
Biogardn.com contains links to third-party websites and services.
We are not responsible for their privacy practices. We recommend reviewing the privacy policy of any external website you visit.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The date of the latest revision will be shown at the top of this page.
15. Contact
For questions about this Privacy Policy or to exercise your data-protection rights: