Effective: 04.06.2026Last updated: 04.06.2026 GDPR compliant
Contents
Personal data controller
What data do we collect
Purposes and legal basis for processing
Storage period
Recipients and third parties
Cookies
Your rights
Data security
Changes to the policy
Contacts and complaints
- Personal data controller
The controller of your personal data is “Nikora Home Plus” EOOD (trade name Home Plus / NikoraPlus), registered in the Commercial Register at the Registry Agency. The company operates the website nikoraplus.isgcm.com and provides turnkey renovation, interior design and furnishing services.
Company
Nikora Home Plus EOOD
Phone
0700 100 89
office@homeplus.bg
Working hours
Mon.–Fri. 08:30–18:00 / Sat.–Sun. 09:00–15:00
- What personal data do we collect
We collect personal data only when necessary to provide our services or to fulfill a legal obligation. Data categories include:
CategoryExamplesMethod of collectionIdentification dataNamesContact form, email, telephoneContact detailsEmail address, telephone numberContact form, direct communicationProperty dataAddress, description, photosWhen requesting a viewing or offerContract dataInvoice information, Personal Identification Number/UnicodeWhen signing a contractTechnical dataIP address, browser, deviceAutomatically when visiting the siteBehavioral dataPages visited, durationCookies and analytical tools
We do not collect or process special categories of data (so-called “sensitive data”) within the meaning of Art. 9 of the GDPR.
- Purposes and legal basis for processing
PurposeLegal basis (GDPR)Response to inquiries and offersArt. 6(1)(b) — pre-contractual measuresPerformance of a service contractArt. 6(1)(b) — performance of a contractIssuance of invoices and accountingArt. 6(1)(c) – legal obligationSending marketing materialsArt. 6(1)(a) – consentAnalysis and improvement of the websiteArt. 6(1)(f) – legitimate interestSecurity and fraud preventionArt. 6(1)(f) – legitimate interest
Where the processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of the processing before the withdrawal.
- Storage period
Contact inquiries without a contract: up to 12 months after the last communication.
Contractual data and invoices: 10 years according to the Accounting Act.
Technical logs: up to 6 months.
Data based on consent (marketing): until the consent is withdrawn.
Cookies: according to the website’s cookie policy.
After the relevant period has expired, the data is deleted or irreversibly anonymized.
- Recipients and data transfer
Your data is not sold or provided to third parties for their own marketing purposes. We may share data with:
Service providers (data processors): hosting provider, accounting firm, courier services – only within the scope of necessity and under a data processing contract.
Nikora’s partners: Furniture House “Nikora” (nikorabg.com) – when implementing joint projects, after explicit information.
Competent authorities: if legally obliged (NA, court, police).
We do not transfer data to third countries outside the EU/EEA, unless a service provider is established there – in which case we apply standard contractual clauses (SCC) within the meaning of Art. 46 GDPR.
- Cookies
The site uses cookies. Detailed information can be found in our Cookie Policy. In short:
Required cookiesNecessary for the functioning of the site. Do not require consent.
Analytic cookiesHelp us understand how visitors use the site (e.g. Google Analytics). Require your consent.
Marketing cookiesUsed to display personalized ads. Require your explicit consent.
You can manage your cookie preferences through the banner on your first visit or from your browser settings.
- Your rights
According to the GDPR and the Personal Data Protection Act (PDPA), you have the following rights:
Access
To receive a copy of the data we process about you.
Rectification
To request the correction of inaccurate or incomplete data.
Erasure
“Right to be forgotten” if there are grounds.
Restriction
To restrict processing if the accuracy is contested.
Portability
To receive the data in a machine-readable format.
Objection
To object to processing based on legitimate interest.
To exercise your rights, send a written request to info@homeplus.bg. We will respond within 30 days.
- Security of personal data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or disclosure, including:
SSL/TLS encryption of the connection between the browser and the server;
access control to systems with personal data on the principle of “minimum access”;
regular backups and recovery procedures;
training of personnel on data protection.