Mobikom BULGARIA
STATUTORY JURISPRUDENCE • GENERAL DATA PROTECTION COMPLIANCE

General Data Protection Regulation Compliance Declaration

Official institutional declaration of compliance under European data protection legislation and the statutory mandates of the Bulgarian Personal Data Protection Act.

DATA PROTECTION BY DESIGN

1. Data Protection by Design and Default

Mobikom Bulgaria Ltd. implements Data Protection by Design and by Default (Article 25 GDPR) as a permanent architectural standard across all digital projects:

  • Total Exclusion of Tracking Cookies: The underlying delivery infrastructure physically lacks software mechanisms to write persistent identifiers or tracking tokens to client terminals.
  • Extinction of Consent Overlays: Because behavioral profiling and marketing telemetry are completely absent, operations fall outside the scope of Article 6(1)(a) consent mandates, eliminating intrusive cookie dialogs.
STATUTORY PROCESSING PRINCIPLES

2. Adherence to Core Processing Principles

All network operations strictly fulfill the core data protection principles set forth under European law:

  • Lawfulness and Transparency: Total absence of covert background trackers, unauthorized third-party scripts, or programmatic ad-tech data brokers.
  • Data Minimisation: Inbound connection metadata (IP addresses) is processed ephemerally within volatile RAM at the delivery edge solely for perimeter DDoS mitigation.
  • Storage Limitation: No persistent connection logs or profiling databases are retained on physical storage media. Closing the active user agent tab purges all transient state.
  • Integrity and Confidentiality: Mandatory TLS 1.3 encryption across all network routes, reinforced by HSTS Preload headers and strict Content Security Policies.
CLIENT-SIDE EXECUTION ENGINE

3. Processing Classification of Client Tools

All diagnostic calculators, spreadsheets, and document modules in our tools suite operate under a decentralized client-side execution model:

The processing of source documents, manuscripts, images, and contracts executes 100% locally within the client user agent's volatile memory (RAM). Mobikom Bulgaria Ltd. does not function as a Data Processor under Article 28 of the GDPR, as no processed content or file payloads are ever transmitted over the network to our hosting infrastructure.

LEGAL RECOURSE AND RIGHTS

4. Fundamental Data Subject Rights

Citizens hold statutory rights under European data protection legislation regarding direct business correspondence:

  • Right of Access and Rectification: Upon inquiry to our verified mailboxes (desk@mobikom.bg), you hold the right to confirm any processing related to commercial inquiries.
  • Right to Erasure: You hold the right to demand the erasure of business communication records at any time, except where statutory commercial retention requirements apply.
  • Right to Object: You may object to any further communications at any point.
OVERSIGHT AND INTERNATIONAL COMPLIANCE

5. International Standards and Lead Supervisory Authority

Our operations strictly satisfy privacy benchmarks across European and United States jurisdictions:

  • COPPA Compliance (Children Under 13): Due to zero data collection, the platform does not profile, collect, or solicit personal information from minors under 13 years of age.
  • CCPA / CPRA Compliance (California): The company and its media network do not sell, rent, or share personal information with third parties (Zero Sale of Personal Data).

Lead Supervisory Authority in Bulgaria:
Commission for Personal Data Protection (CPDP)
Postal Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria • Website: https://www.cpdp.bg