This Privacy Policy explains what personal data Nebora Cloud collects through this website and in the course of our business, why we use it, how long we keep it and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who we are
The controller of your personal data is:
Nebora Cloud, Sofia, Bulgaria · info@neboracloud.com
For any question about this policy or your data, write to info@neboracloud.com. We answer data protection requests in English and Bulgarian.
2. Data we collect
- Contact form: your full name, company, email address, the topic and service you select and your message.
- Correspondence: the content of emails and portal messages exchanged with our team, including the contact details you use.
- Customers: contract, billing and contact data of your organization and the people it names as contacts, and Client Portal account data.
- Data center visitors: name, company, identity document details, access card logs and CCTV images recorded at BG-SOF-1.
- Technical data: IP address, browser type and time of access, kept in the server logs of this website.
We do not ask for special categories of data (such as health data) and ask you not to send them through the contact form.
3. Why we use it and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering your inquiry | Contact form, correspondence | Steps before a contract, Art. 6(1)(b); legitimate interest, Art. 6(1)(f) |
| Providing our services | Customer and portal data | Performance of a contract, Art. 6(1)(b) |
| Invoicing and accounting | Billing data | Legal obligation, Art. 6(1)(c) |
| Physical security of the data center | Visitor data, access logs, CCTV | Legitimate interest, Art. 6(1)(f) |
| Running and securing this website | Technical data | Legitimate interest, Art. 6(1)(f) |
We do not use your data for automated decision-making or profiling, and we do not sell it.
5. Where your data is stored
We store and process personal data in the European Union, primarily in our own data center BG-SOF-1 in Sofia.
If a service provider transfers data outside the European Economic Area, we make sure an adequacy decision or the European Commission’s Standard Contractual Clauses apply.
6. How long we keep it
| Data | Retention period |
|---|---|
| Inquiries that do not lead to a contract | 24 months after the last contact |
| Contract and customer data | For the term of the contract and 5 years after it ends |
| Invoices and accounting records | 10 years, as required by Bulgarian accounting law |
| Data center CCTV images | 30 days, unless needed to investigate an incident |
| Website server logs | 90 days |
7. How we protect it
Our information security management system is certified to ISO/IEC 27001. Personal data is encrypted in transit and at rest, access is limited to staff who need it, and access rights are reviewed regularly.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased when there is no longer a reason to keep it;
- restrict how we use your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, where processing is based on consent.
To use any of these rights, email info@neboracloud.com. We reply within one month and may ask you to confirm your identity first.
9. Complaints
If you believe we have not handled your data correctly, please contact us first so we can put it right. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or with the supervisory authority in your EU country.
10. Data in our customers’ systems
When customers store personal data on our cloud, backup or colocation services, the customer is the controller and we act as a processor. That processing is covered by the data processing agreement in the customer’s contract, not by this policy.
11. Changes to this policy
We update this policy when our practices or the law change. The date at the top of the page shows the latest version.
Questions about this document?
Write to us at info@neboracloud.com and we will reply within one business day.