Mon – Fri 10:00 – 19:00 · Sat 10:00 – 14:0032 Obikolna St., Druzhba 2, Sofia +359 88 913 9838
BGEN
Book a repair

Privacy policy

Last updated:

This notice describes what personal data “Aleko’s Projects” collects through this website, why, and for how long it is kept.

1. Data controller

Aleko’s Projects, 32 Obikolna St., Druzhba 2, 1582 Sofia, Bulgaria. Contact: info@alekoprojects.com, +359 88 913 9838.

2. What we collect

When you submit a repair request we collect only what is needed to return your device working:

  • Name — to know whose device it is.
  • Phone — to reach you about diagnostics, the quote and collection.
  • E-mail (optional) — an alternative contact channel.
  • Device and problem description — for the repair itself.
  • Preferred contact method.

We do not collect your address, national ID, banking details or anything else through this site. Payment happens in person and never passes through the website.

3. Legal basis

We process this data to perform a contract (GDPR Art. 6(1)(b)) — without it we cannot accept and return your device.

4. Service card and PIN

Submitting a request generates a card number and a PIN. The PIN is stored only as an irreversible cryptographic digest (SHA-256), never in readable form. That is why it cannot be recovered — not even by us.

5. Repair notifications

Notifications are optional and only turned on with the “Turn on notifications” button on the service card. We then keep, linked to the card:

  • the push address your browser issues for this site;
  • two encryption keys that make each message readable by your browser alone;
  • the language the notifications should be in.

A notification shows only the card number and what changed — no name, notes or amounts. The legal basis is your consent (GDPR Art. 6(1)(a)), which you withdraw at any time with the “Turn off notifications” button.

This data is deleted when you turn notifications off, when the push service reports the address is no longer valid, and within 30 days of the repair being completed or cancelled.

6. Cookies and local storage

The site itself sets a single, strictly necessary cookie. There is no analytics and no advertising:

  • aleko_admin — administrator only, set on signing into the panel.

If you turn notifications on, your browser also keeps an entry in its local storage (aleko:followed): the card number and a key that opens the card on that device without the PIN. It never leaves the device and is removed when you turn notifications off.

The map in the Contact section comes from Google and may set its own cookies — see section 7.

7. Third parties

The site is hosted on Cloudflare, Inc. infrastructure. The request form is protected by Cloudflare Turnstile, a bot-protection service that does not track users across sites and does not build an advertising profile.

The map in the Contact section is embedded from Google Maps (Google Ireland Limited). It loads only once you scroll to it. Your browser then connects to Google's servers, which receive your IP address and may set their own cookies under Google's privacy policy.

Notifications are delivered by your browser's push service — Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, Microsoft for Edge. Messages reach it encrypted, and it cannot read them. The same way, encrypted, Aleko gets a notification for every new request — with the category and the device, without your name or phone number.

8. Retention

Service card data is kept for 24 months after the repair is completed — covering the 6-month warranty and any follow-up questions. The card is then deleted.

9. Your rights

You have the right to request:

  • access to the data we hold about you;
  • correction of inaccurate data;
  • erasure once there is no longer a basis to keep it;
  • restriction of processing;
  • data portability.

Write to info@alekoprojects.com. We reply within 30 days. You also have the right to complain to the Bulgarian Commission for Personal Data Protection.