Privacy Policy

euroyield.bg · Effective: March 2026 · Last updated: April 2026

1. Data Controller

The data controller is EuroYield, registered in Bulgaria (registration number: 181064061), address: 1618 Sofia, st. Kupenite 3, Bulgaria.

For data protection enquiries, contact: support@euroyield.bg

2. What Personal Data We Collect

2.1. Data You Provide

EuroYield does not require you to create an account. When you purchase a Report, the following data is processed:

Email address — provided at checkout for payment confirmation and order receipt.
Payment data — processed by MyPOS on our behalf. EuroYield does not store card numbers, CVVs, or bank account details.

2.2. Data We Collect Automatically

When you visit euroyield.bg, we may collect:

IP address and approximate location (country/city level).
Browser type and version, operating system.
Pages visited, time of visit, referring URL.
Cookies — see Section 6.

2.3. Property Listing URL

When you submit a listing URL for analysis, we process that URL to generate your Report. This URL is treated as content data, not personal data, unless it could identify an individual. We retain submitted URLs for the purposes described in Section 4.

3. How We Use Your Data

We use your personal data for the following purposes:

Order fulfilment: To process your payment, generate and deliver your Report.
Customer support: To respond to queries or refund requests.
Legal compliance: To fulfil our obligations under tax, accounting, and consumer protection law.
Platform improvement: Aggregated, anonymised usage data to understand how the Platform is used and improve it. No individual profiling.
Security: To detect and prevent fraud or unauthorised access.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

Contract performance (Art. 6(1)(b)): Processing your email and payment data to deliver the Report you purchased.
Legal obligation (Art. 6(1)(c)): Retaining transaction records for accounting and tax purposes.
Legitimate interests (Art. 6(1)(f)): Analysing aggregated usage patterns to improve the Platform; fraud prevention.

5. Data Sharing and Third-Party Processors

We do not sell your personal data. We share data only with:

5.1. MyPOS

MyPOS Europe Ltd processes payment data as our payment processor. MyPOS is a regulated electronic money institution authorised by the Bulgarian National Bank. Their privacy policy is available at mypos.com/en-gb/privacy-policy. MyPOS may transfer data outside the EEA under appropriate safeguards including EU Standard Contractual Clauses.

5.2. Hosting and Infrastructure

The Platform is hosted on Hetzner Online GmbH. Server infrastructure is located in Nuremberg, Germany. Data transfers, if any, outside the EEA are governed by standard contractual clauses.

5.3. Legal Disclosure

We may disclose personal data to law enforcement or regulatory authorities where required by law or to protect the rights and safety of EuroYield or third parties.

6. Cookies

6.1. What Cookies We Use

EuroYield uses the following categories of cookies:

Strictly necessary: Session management, security tokens. These cannot be disabled as the Platform would not function without them.
Analytics (with consent): Aggregated usage statistics to understand how the Platform is used. We do not currently use third-party analytics.
Payment: MyPOS may set cookies required for payment processing.

6.2. Cookie Consent

Non-essential cookies are only placed with your consent, obtained via the cookie banner shown on your first visit. You may withdraw consent or manage cookie preferences at any time via the cookie settings link in the site footer.

7. Data Retention

We retain personal data for the following periods:

Transaction records (email, order reference): 5 years from the transaction date, as required by Bulgarian accounting law.
Support correspondence: 2 years from resolution.
Access logs: 90 days, then deleted.
Cookies: As stated at the time of consent; session cookies expire when you close your browser.

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your data, subject to legal retention requirements.
Restriction: Request that we restrict processing of your data in certain circumstances.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdraw consent: Where processing is consent-based, withdraw at any time without affecting prior processing.

To exercise any right, contact us at support@euroyield.bg. We will respond within 30 days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at www.cpdp.bg, or with the supervisory authority in your country of residence.

9. International Data Transfers

EuroYield primarily processes data within the European Economic Area. Where data is transferred to third countries (e.g., via MyPOS or hosting infrastructure), such transfers are made under appropriate safeguards including EU Standard Contractual Clauses.

10. Data Security

EuroYield implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Payment data is handled exclusively by MyPOS and is never stored on EuroYield's servers.

11. Children

EuroYield is not directed at persons under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform and will take effect from the date stated at the top of this document. Continued use of the Platform after the effective date constitutes acceptance.

13. Contact

For privacy-related queries, data subject requests, or to report a concern:

EuroYield 1618 Sofia, st. Kupenite 3, Bulgaria Email: support@euroyield.bg

Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg | +359 2 91 53 519