Privacy Policy

Last updated: September 2026

Center for European Health Policies Ltd. ("CEHP", "we", "us" or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what personal information we collect through the website www.cehp.eu, how we use it, on what legal basis, and the rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the applicable data-protection legislation in the Republic of Bulgaria.

1. Data controller

Center for European Health Policies Ltd., a company registered in the Republic of Bulgaria, acts as data controller for the personal data processed through this website.

Contact for privacy matters: info@cehp.eu.

2. Personal data we collect

• Contact data you voluntarily provide via our contact form or by email — name, email address, company/organization, message content.
• Technical data automatically collected when you visit our website — IP address, browser type and version, device type, operating system, referring URL, pages viewed, and date and time of access.
• Communication data — records of correspondence between you and CEHP.

We do not knowingly collect data from children under the age of 16. We do not collect sensitive categories of personal data through this website.

3. Purposes and legal bases of processing

• To respond to your enquiries and provide the consulting services you request — legal basis: performance of a contract or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• To operate, secure and improve our website — legal basis: our legitimate interest in maintaining a functional and secure online presence (Art. 6(1)(f) GDPR).
• To comply with legal obligations, including tax and accounting duties — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Where we ask for it, to send you occasional information about our services — legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

4. Sharing your data

We do not sell your personal data. We may share it only with:

• Service providers acting as our processors (e.g. hosting, email, IT-support providers), bound by written agreements to protect your data.
• Competent public authorities where required by law.
• Professional advisers (lawyers, accountants, auditors) under confidentiality obligations.

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards under Chapter V of the GDPR are in place.

5. Retention

We retain personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. Enquiries received via the contact form are kept for up to 24 months after the last exchange, unless a business relationship is established.

6. Your rights

Under the GDPR, you have the right to: access your personal data; obtain rectification of inaccurate data; obtain erasure; restrict or object to processing; data portability; and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You may exercise these rights by writing to info@cehp.eu.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or with the supervisory authority in your country of residence.

7. Cookies

Our website uses only strictly necessary cookies required for its basic operation and does not use third-party advertising or profiling cookies. If we introduce optional analytics or marketing cookies in the future, we will ask for your consent before setting them.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

9. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version is always available on this page, with the "Last updated" date shown above.

10. Contact

For any questions or requests regarding this Privacy Policy, please contact us at info@cehp.eu.