Privacy Policy

I. About Us

CNTS Ltd (Center for New Technological Systems) is a company offering comprehensive services in the field of marketing and social research and consulting. CNTS Ltd is the developer and operator of the BlitzPoll platform, through which third parties — organizations and companies — receive anonymized feedback from their customers, citizens, and users.

For questions related to the processing of personal data, you can contact us at privacy@cnts.bg.

II. Applicable Legislation

This policy has been prepared in accordance with:

Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR);
The Personal Data Protection Act (PDPA) of the Republic of Bulgaria.

III. Roles in Data Processing

CNTS Ltd acts as the data controller for users of the BlitzPoll platform.

Organizations and companies that use BlitzPoll to collect feedback may act as joint controllers or data processors only when the user has explicitly consented to sharing their data with a specific organization.

IV. Types of Personal Data

Depending on how you use the BlitzPoll platform, we may process the following categories of personal data:

Contact data: email address and other information you voluntarily provide during registration.
Demographic data: year of birth, gender, and location — provided voluntarily for profiling and analytics purposes.
Additional profile data: any other information the user voluntarily chooses to add to their profile.

Users enter data only for themselves. The platform does not envisage or allow entry of personal data of third parties.

V. Age Restriction

The BlitzPoll platform is not intended for individuals under the age of 16. If we discover that data has been collected from a person under 16, that data will be immediately deleted.

VI. Purposes and Legal Bases for Processing

We process personal data on the following legal grounds under Art. 6(1) of the GDPR:

Performance of a contract (Art. 6(1)(b)): processing is necessary to provide the platform services accessible upon registration.
Consent (Art. 6(1)(a)): when the user voluntarily provides additional data or consents to sharing information with a specific organization.
Legal obligation (Art. 6(1)(c)): when processing is necessary to comply with applicable legislation.
Legitimate interest (Art. 6(1)(f)): to maintain platform security and prevent abuse, while respecting users' rights.

VII. How We Collect Data

We collect personal data through the following means:

Registration: when creating a user profile on BlitzPoll.
Platform usage: data generated through your interaction with the platform (questionnaire responses, preferences, settings).
Email communication: when you contact us at the provided email addresses.

VIII. Disclosure of Data to Third Parties

Feedback provided through BlitzPoll is transmitted to client organizations in anonymized form by default.

A user's personal data is disclosed to a specific organization only with the user's explicit consent, with the organization clearly identified at the time consent is given.

We do not sell, rent, or share personal data with third parties for marketing purposes.

IX. Data Retention Period

Personal data is retained for the duration of the active user profile. After profile deletion, data is retained for an additional period of 180 days, after which it is permanently deleted.

Anonymized and aggregated data has no retention limit, as it does not constitute personal data.

X. Security and Breach Notification

We implement appropriate technical and organizational measures to protect personal data:

Data is stored on servers within the European Union.
Communication is protected through SSL/TLS encryption.
Data at rest is encrypted.
No international transfer of personal data outside the EU is carried out.

In the event of a personal data breach, CNTS Ltd will notify the Commission for Personal Data Protection (CPDP) within 72 hours of becoming aware of the breach, as well as affected individuals where applicable.

XI. Cookies

The BlitzPoll platform uses a single cookie — kazvabg_cookie. This cookie is encrypted and is used for:

Recognizing the user on return visits;
Preserving user preferences and functionality;
Storing interaction history;
Preventing abuse.

The platform does not use Google Analytics, marketing cookies, advertising pixels, or tracking tools.

For more information, see our Cookie Policy.

XII. Rights of Data Subjects

Under the GDPR, you have the following rights regarding your personal data:

Right of access: to obtain information about whether and what personal data we process about you.
Right to rectification: to request correction of inaccurate data.
Right to erasure: to request deletion of your data.
Right to restriction: to request restriction of processing.
Right to object: to object to processing based on legitimate interest.
Right to portability: to receive your data in a structured, machine-readable format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.

XIII. How to Exercise Your Rights

You can exercise your rights in the following ways:

Self-service: through the profile deletion function on the BlitzPoll platform.
By email: by sending a request to privacy@cnts.bg.
By post: to: CNTS Ltd, 44 Dunav Street, 1000 Sofia, Bulgaria.

We will respond to your request within 1 month of receipt.

XIV. Marketing Communications

CNTS Ltd does not send marketing communications to BlitzPoll users. Communication with users is limited to:

Technical and system notifications;
Platform maintenance messages;
Responses to user inquiries.

XV. Version and Changes

CNTS Ltd reserves the right to update this policy. When changes occur, the updated version will be published on the BlitzPoll platform. A public changelog is not maintained.

Last updated: 26.03.2025

XVI. Right to Complain

If you believe the processing of your personal data violates your rights, you have the right to file a complaint with:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia
www.cpdp.bg

Before filing a complaint, we encourage you to contact us at privacy@cnts.bg so we can attempt to resolve the matter.

XVII. Contact

For questions about this personal data protection policy:

Company: CNTS Ltd
Address: 44 Dunav Street, 1000 Sofia, Bulgaria
Email: privacy@cnts.bg