Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains how ENR Media LTD ("ENR Media", "we", "us") collects and uses personal data when you visit enrmedia.eu or contact us through this website. We handle your data in line with the EU General Data Protection Regulation (GDPR) and Bulgarian data-protection law.

1. Who we are (Data Controller)

2. What data we collect

Contact form

When you use our contact form, we collect the information you provide: your name, email address and your message, plus optionally your company and a topic. To protect the form against spam and abuse, we also process limited technical data with each submission: your IP address, an approximate country, and your browser type (user agent).

Hosting data

Our site is hosted on Cloudflare. As with any website, our hosting provider may process standard connection data (such as IP address and request information) to deliver the site securely and reliably.

Analytics

We use privacy-friendly, cookieless analytics (Cloudflare Web Analytics) to understand aggregate traffic such as page views and referrers. It does not use cookies, does not track you across websites, and does not build a profile of you.

Cookies

This website does not use tracking or advertising cookies. We store a single technical preference in your browser (your light/dark theme choice), which stays on your device and is never sent to us.

3. Why we use it, and our legal basis

• To answer your enquiry, we use your details to respond and, where relevant, to take steps toward a possible engagement. Legal basis: steps prior to / performance of a contract and our legitimate interest in responding (Art. 6(1)(b) and (f) GDPR).
• To keep the form and site secure, we process limited technical data to prevent spam and abuse. Legal basis: our legitimate interest in security (Art. 6(1)(f) GDPR).
• To understand site usage via aggregate, cookieless analytics. Legal basis: our legitimate interest in improving the site (Art. 6(1)(f) GDPR).

4. Who we share it with

We do not sell your personal data. We share it only with service providers ("processors") who help us run the website and respond to you:

• Make.com (Make / Celonis), processes contact-form submissions so they reach our inbox.
• Cloudflare, Inc., website hosting, content delivery, security and cookieless analytics.

These providers act on our instructions under data-processing agreements. Where processing takes place outside the EU/EEA, it is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

5. How long we keep it

We keep contact-form messages for as long as needed to handle your enquiry and for a reasonable period afterwards for our records, then delete them. Security and aggregate analytics data are kept only for short periods.

6. Your rights

Under the GDPR you have the right to access your data; have it corrected or deleted; restrict or object to its processing; receive it in a portable format; and withdraw consent where processing relies on consent. To exercise any of these, email [email protected].

You also have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (CPDP / КЗЛД), cpdp.bg.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows the current version.