1. Who is responsible for your data
The controller of personal data collected through this site is IBS Bulgaria, the company behind TIMEON.GURU.
For questions and requests about your personal data, write to support@timeon.guru.
2. What this policy covers
This policy covers the timeon.guru website: its pages, the trial form, the GURU newsletter and your correspondence with us.
It does not cover employee data that your organization enters into the TIMEON.GURU system. For that data your organization is the controller and we are the processor under a data processing agreement (DPA). In short:
- it is stored in the European Union, in our primary data centre, Equinix in Sofia;
- the list of sub-processors and the DPA are available on request;
- when the subscription ends, the data is destroyed immediately, following set procedures.
Everything about system security, certificates and documents for your review is in the Trust Center.
3. What data we collect and why
| When | What data | Why | Legal basis |
|---|---|---|---|
| When you open the site | IP address, browser type, requested page, time of the request | To show you the site and protect it from attacks | Legitimate interest (Art. 6(1)(f) GDPR) |
| When we count visits | Requested page, referring page, browser and device type, country | To know which pages are read and improve the site. Cloudflare Web Analytics uses no cookies and builds no profiles of individual visitors | Legitimate interest (Art. 6(1)(f)) |
| When you request a trial or a demo, or contact us through the form | Name, company, work email, team size, what you are interested in and your message (optional), language, country (from the IP address), campaign source (UTM) | To check that the request comes from a company, and have one of our specialists contact you and prepare the trial, demo or offer | Steps before entering a contract (Art. 6(1)(b)) and legitimate interest in preventing abuse (Art. 6(1)(f)) |
| When the form is protected from bots | Technical browser signals checked by Cloudflare Turnstile | To stop automated and malicious requests | Legitimate interest (Art. 6(1)(f)) |
| When your email is checked | The domain of your email (the part after @) | To check that the domain accepts mail. We send only the domain, not the full address | Legitimate interest (Art. 6(1)(f)) |
| When you subscribe to the GURU newsletter (the sign-up form or the box in the trial form) | Email and language; with the box in the form also your name | To send you the GURU newsletter. The subscription starts once you confirm it from the email you will get | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| When you open the chat | IP address, the pages you view on the site and the content of the conversation | To answer you live | Steps at your request before entering a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) |
| When you write to us | The data in your message | To reply to you | Legitimate interest (Art. 6(1)(f)) |
A request sent through the form is recorded in the enquiry system of IBS Bulgaria and from there in our request system (Requests), where one of our specialists takes it on. The sales team gets a short notification in Zoom. If you ticked the box for the GURU newsletter, your email is also added to the newsletter list (see “The GURU newsletter”).
5. Who we share data with
Requests are processed in the systems of IBS Bulgaria. We also use providers who process data only on our instructions and under a contract with us:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Website hosting, protection from attacks and bots (Turnstile), cookie-free visit statistics (Web Analytics), storage of requests | Global network; requests are stored in the EU |
| Intuit Mailchimp | Sending the GURU newsletter, if you subscribed | USA; standard contractual clauses |
| Zoom | Notifying our sales team of a new request | USA |
| YouTube (Google) | Embedded videos, only if you play one | USA |
| Tawk.to | Live chat, only if you open it | USA |
Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
We do not sell personal data or share it with third parties for their own purposes.
6. How long we keep data
| Data | Period |
|---|---|
| Technical website logs | Up to 7 days |
| Counter against too many requests from one address | 1 hour. The IP address is stored only in hashed form |
| Requests sent through the form | Stored in the EU and deleted automatically 12 months after we receive them. If you become a customer, the data is processed under the contract |
| GURU newsletter subscription | Until you unsubscribe |
| Correspondence | As long as needed for your request |
8. Your rights
You have the right to:
- get a copy of your data;
- ask for inaccurate data to be corrected;
- ask for deletion;
- restrict processing;
- receive your data in a portable format;
- object to processing based on legitimate interest;
- withdraw your consent to news at any time.
Write to support@timeon.guru. We reply within one month.
You can also lodge a complaint with the Bulgarian Commission for Personal Data Protection or the supervisory authority in your country.
9. How we protect data
The connection to the site is encrypted. Only the IBS Bulgaria staff who handle requests can see them, each with a personal sign-in. Our information security management system is certified to ISO/IEC 27001 and ISO/IEC 27017. See the Trust Center for details.
10. Changes to this policy
When we change this policy, we update the date at the top of the page. For significant changes we notify subscribers by email.