GDPR Compliance Policy

Groma Hold Ltd.

1. Data Controller Information

Groma Hold Ltd. is the data controller under Regulation (EU) 2016/679 (GDPR).

• Company name: Groma Hold Ltd.

• Legal form: Single-member limited liability company (EООD)

• UIC: 101611650

• VAT number: BG101611650

• Address: Bulgaria, Belo Pole village (2709), Production Base

• Managing Director: Viktor Georgiev Velev

2. Legal Grounds for Processing

We process personal data on the following legal bases:

• Art. 6(1)(a) – Consent

• Art. 6(1)(b) – Performance of a contract or pre-contractual steps

• Art. 6(1)(c) – Legal obligation

• Art. 6(1)(f) – Legitimate interest, including improving services and ensuring website security

3. Technical and Organisational Measures

We implement various measures to protect personal data, including:

• SSL encryption

• Access control and user authentication

• Protection against unauthorized access and malicious attacks

• Server-level and infrastructure security

• Regular updates and monitoring

4. Data Subject Rights (Articles 12–23 GDPR)

Data subjects have the right to:

• Access their data

• Rectify inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent

• Submit a complaint to the supervisory authority

Supervisory Authority:
Commission for Personal Data Protection (CPDP)
Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., Bulgaria

5. Sharing Data with Third Parties

Personal data may be shared only when GDPR compliance is ensured, and only with:

• Hosting and IT providers

• Analytical service providers (anonymised data)

• Public authorities when legally required

We do not transfer or sell personal data to third parties.

6. International Data Transfers

We generally do not transfer personal data outside the European Union.
If such transfer becomes necessary, it will be carried out using:

• Standard Contractual Clauses (SCCs)

• Adequate technical and organisational safeguards

7. Record Keeping and Documentation

We maintain internal records regarding:

• The categories of data processed

• The legal grounds for processing

• Technical and organisational measures

• Security incidents (if any)

8. Contact Information

For all GDPR-related matters, you may contact:

Groma Hold Ltd.
Bulgaria, Belo Pole village (2709), Production Base
Email: info@gromahold.bg
Phone: +359 73 86 12 00