Privacy Policy
1. Who we are
The data controller is Rivikon. You can contact us at info@rivikon.bg.
2. What data we collect
- Site visitors: IP address, browser type, language, aggregated usage statistics.
- Prospective customers: name, email, phone, company, message - when you submit a demo or enquiry form.
- Dashboard users: email, role, login times and actions in the system (audit log).
- End users of the car park: licence plates, timestamps, payment amounts. We do not collect names, national ID numbers or other identifying data about drivers.
3. Why we process the data
- To provide the service and access control.
- For revenue reporting and mandatory financial documentation.
- For communication about quotes, updates and technical support.
- For security and the prevention of abuse.
4. How long we keep the data
Prospective customer data - up to 24 months after the last contact. Parking operation data - according to the agreed plan (30 days for Basic, 12 months for Pro, individually for Enterprise). Financial records - 10 years, in line with Bulgarian law.
5. Who we share the data with
We do not sell or provide your data to third parties for marketing purposes. We use the following data processors:
- Cloud hosting (EU) - for storing operational data.
- Email provider - for transactional messages.
- Accounting - for invoicing (contact data and amounts only).
6. Your rights
Under GDPR you have the right to: access your data, rectification, erasure, restriction of processing, portability and objection. Send a request to info@rivikon.bg - we will respond within 30 days.
7. Cookies
The site uses only strictly necessary cookies (language preference and a session for forms). We do not use marketing or tracking cookies. When analytics are introduced, this section will be updated and a consent banner will appear.
8. Security
Data is stored encrypted at rest and in transit (TLS 1.3). Access to administrative systems requires two-factor authentication. We regularly conduct security audits and tests.
9. Changes to this policy
We may update this policy. Significant changes are communicated by email to registered users at least 14 days in advance.
10. Supervisory authority
If you believe your rights have been violated, you can file a complaint with the Commission for Personal Data Protection - 2 Tsvetan Lazarov Blvd, Sofia 1592, cpdp.bg.