Privacy Policy

Storix Energy Asset Management ("Storix Energy", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit our website (www.storix.energy) or interact with us.

This policy is compliant with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection legislation.

1. Who We Are

Storix Energy Asset Management is a renewable energy asset management company operating in Bulgaria. For the purposes of data protection law, we are the data controller of your personal data.

If you have any questions about this policy or how we handle your data, please contact us at: office@storix.energy

2. What Data We Collect

We may collect and process the following categories of personal data:

Data you provide directly:

• Name and surname
• Email address
• Company or organisation name
• Content of messages or enquiries submitted via our contact form
• Portfolio or project details you choose to share

Data collected automatically:

• IP address and approximate location
• Browser type and version
• Pages visited and time spent on our website
• Referring website or source
• Device and operating system type

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries — when you submit our contact form, we use your details to reply and follow up on your request.
• To deliver our services — if you become a client, we process your data to fulfil our contractual obligations.
• To improve our website — anonymised analytics data helps us understand how visitors use our site and improve content and performance.
• To comply with legal obligations — we may process and retain certain data to comply with applicable laws and regulations.
• Legitimate business interests — such as managing our business operations, maintaining security, and preventing fraud.

4. Legal Basis for Processing

We rely on the following legal bases under GDPR:

• Consent — when you tick the consent checkbox on our contact form.
• Contractual necessity — when processing is required to perform a contract with you.
• Legitimate interests — for purposes such as website security, analytics, and business communications, where these interests are not overridden by your rights.
• Legal obligation — where processing is required to comply with applicable law.

5. How We Store and Protect Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:

• Secure transmission of data via HTTPS encryption
• Access controls limiting who can access personal data
• Regular review of our data handling practices

Your data is stored on servers located within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements:

• Contact form submissions: retained for up to 2 years or until the purpose of communication is fulfilled.
• Client data: retained for the duration of the contract and 7 years thereafter for legal and tax compliance purposes.
• Website analytics data: anonymised data retained for up to 26 months.

7. Sharing Your Data

We do not sell, rent, or trade your personal data with third parties for marketing purposes. We may share your data with:

• Service providers acting as data processors on our behalf (e.g. website hosting, email providers), under appropriate data processing agreements.
• Professional advisors (lawyers, accountants) where necessary and under confidentiality obligations.
• Regulatory authorities where required by law.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request deletion of your data in certain circumstances.
• Right to restrict processing — to request that we limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at office@storix.energy. We will respond within 30 days. You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria: www.cpdp.bg

9. Cookies

Our website uses cookies. For full details of the cookies we use and how to manage them, please read our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies independently.

11. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: office@storix.energy
• Website: www.storix.energy