Privacy Policy
This privacy policy explains how we process your personal data. As the operator is established in the European Union, we process your data in accordance with the EU General Data Protection Regulation (GDPR). If you access this website from outside the EU, additional local data protection rules may apply to you.
1. Data controller
The controller responsible for data processing is:
FH Industrial EOOD
Georgi Rakovski Street 145, floor 1, apt. 6
1000 Sofia, Bulgaria
Represented by the Managing Director: Frank Herforth
Phone: +49 176 45845473
Email: mach2.bg@gmail.com
2. Hosting and server log files
This website is hosted on servers operated by Vercel Inc. (340 Pine Street, Suite 701, San Francisco, CA 94104, USA). Vercel is certified under the EU-US Data Privacy Framework. When you access the website, the host automatically stores connection data in server log files (IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser type). This processing is necessary for the secure and stable operation of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
3. Cookies
This website only uses strictly necessary storage (the cookie-consent status in your browser's local storage). We do not use any tracking, analytics or advertising cookies, and we do not share data with third parties for advertising purposes. Legal basis: Art. 6(1)(f) GDPR.
4. Contact and referral to the partner clinic
We do not collect personal data through a form on this website. If you contact us through the channels offered (phone or WhatsApp), we process the data you provide (e.g. name, contact details, information about your treatment enquiry) solely to handle your enquiry and to arrange treatment.
To schedule an appointment, prepare a cost estimate and carry out the treatment, we pass on the necessary data to our partner clinic, the Sofia Implant Centre (251G Ring Road, Sofia 1715, Bulgaria). Both the operator and the clinic are based in Bulgaria, within the European Union / EEA; no transfer to a third country outside the EU/EEA takes place. Legal basis: Art. 6(1)(b) GDPR (steps to enter into and perform a contract) and, insofar as health data is concerned, Art. 9(2)(a) GDPR (your explicit consent).
Retention: We keep your enquiry data only for as long as necessary to handle your enquiry and arrange treatment, and no longer than any applicable statutory retention periods. If no treatment goes ahead, we delete your enquiry data at the latest six months after our last contact.
5. Contact via WhatsApp
If you contact us via WhatsApp, communication takes place through the service of WhatsApp Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland), a Meta company. When you send messages, your phone number and message content are processed by WhatsApp; we have no control over this. Use of WhatsApp is based on your voluntary decision to contact us (Art. 6(1)(a) and (b) GDPR). If you prefer not to use WhatsApp, please contact us by phone or email.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21) under the GDPR. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise your rights, please contact: mach2.bg@gmail.com.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for the controller is the Bulgarian Commission for Personal Data Protection (KZLD, cpdp.bg). You may also contact the data protection authority in your country of residence.
7. AI-assisted content
Parts of this website were produced with the help of AI tools. The operators of this website are the human parties responsible; AI is used as a production aid.