SL Enterprises EOOD respects the privacy of people who visit SL-Hub.com, contact the team, submit a booking request or opt in to Insights updates. This policy explains the main data-handling practices of the public B2B website.
1. Controller and privacy contact
The controller is SL Enterprises EOOD, UIC/EIK 205276531, 30–32 Gen. E. I. Totleben Blvd., Krasno Selo District, Floor 2, 1606 Sofia, Stolichna, Bulgaria. Public and privacy contact: info@sl-hub.com. The company representative identified for this public business surface is Siniša Dagary.
2. Data categories and sources
We receive data directly from you when you use a contact form, a Growth booking request, an Insights subscription form or email us. Depending on the form, this may include name, company, professional email address, message context, preferred discussion date and time, form source, privacy-notice version, consent language and consent timestamp. We also process limited technical information necessary to operate, secure and, if you opt in, measure use of the website.
3. Purposes and lawful bases
We use professional enquiry and booking information to understand and respond to a request, evaluate a potential B2B conversation, prepare a follow-up and protect the website. The intended legal basis is our legitimate interest in responsible professional communication, unless another basis applies in the context. We use Insights email data only where you give separate affirmative marketing consent. Privacy-checkbox acceptance records that you received the notice; it does not turn every enquiry into marketing consent.
4. Recipients, processors and transfers
Access to public-form lead records is restricted to the authorised administrator and personnel who need the information for the stated purpose. Hosting, database, email delivery, security and administration providers may act as processors under appropriate contractual safeguards. For a new Insights subscription with separate affirmative marketing consent, Brevo (Sendinblue SAS) processes only the subscriber email address and operational membership in the dedicated Insights list under documented instructions; contact and booking enquiries are not synced to Brevo. Brevo's DPA states that its services may involve processing outside the EEA by Brevo, its affiliates or sub-processors and identifies safeguards including Standard Contractual Clauses, supplementary measures and, where applicable, the EU-US Data Privacy Framework. If you opt in to optional audience measurement, the website loads a script from our self-hosted Umami analytics at `analytics.sl-hub.com`, operated by SL Enterprises EOOD on Railway infrastructure in the EU (Netherlands, region europe-west4). Umami is cookieless, does not store IP addresses and produces aggregated statistics only. The site does not use this measurement for advertising audiences or cross-site profiling. Before any email campaign or material processor, transfer or analytics change, SL Enterprises EOOD will complete the applicable processor, transfer, unsubscribe and deliverability review. We do not send website lead data to external AI providers under the current operating policy.
5. Retention and security
We keep information only for as long as necessary for the stated purpose, a documented retention review, dispute management and applicable legal obligations. The proposed operating benchmark is up to 24 months after the last meaningful B2B contact for an inactive enquiry, unless a signed relationship, legal requirement or documented dispute requires longer retention. Insights data are retained until consent withdrawal or a retention review determines that continued communication is no longer justified. We apply access restriction, data minimisation, technical security controls and a no-sensitive-data rule for public forms.
6. Your rights and complaints
Subject to applicable law, you may request access, rectification, erasure, restriction, objection, portability or withdrawal of consent for future marketing processing. Email info@sl-hub.com with a clear request. We may request reasonable identity-verification information before disclosing or changing data. You may also complain to the Bulgarian Commission for Personal Data Protection at www.cpdp.bg, kzld@cpdp.bg, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria.
7. AI and material changes
AI-assisted editorial tools may support website content subject to human review and editorial responsibility. The current policy prohibits biometric categorisation, emotion recognition, lead profiling and solely automated decisions about people. A visitor-facing AI assistant, if activated, will carry an in-context AI disclosure and be governed by the separate AI Systems & Transparency Notice. We will update this policy before a material processing, processor, transfer, analytics or AI-use change becomes active.