Privacy Notice
Thank you for visiting leonavis.io. Protecting your personal data is important to us. Below we inform you about the nature, scope and purpose of the processing of personal data as well as about your rights under the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data controller
Data controller within the meaning of Article 4 No. 7 GDPR:
LEONAVIS Ltd.
Vitosha Blvd 48
1000 Sofia
Bulgaria
Email: Support@leonavis.io
Contact form: leonavis.io/en/#briefing
UIC / Registration number: 208168105
2. Provision of the website and creation of server log files
Each time our website is accessed, our hosting provider automatically collects technical information that your browser transmits ("server log files"):
- IP address of the accessing device
- Date and time of access
- Page / file accessed
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
Purpose: Delivery of the website, ensuring system
security and stability, error analysis.
Legal basis: Article 6 (1) lit. f GDPR (legitimate
interest in a secure and functioning web presence).
Retention period: Server log files are automatically
deleted or anonymized after 14 days at the latest, unless retention
is required for security or evidentiary purposes.
Data processor: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. A data processing agreement pursuant to Article 28 GDPR has been concluded with the hosting provider.
3. Contact
3.1 Contact by email
If you contact us by email, your information (name, email address, content of your message) is stored and processed by us exclusively to answer your enquiry and for any follow-up questions.
3.2 Contact form
Our website offers a contact form. When using the form, we collect the following data:
- Name (mandatory field)
- Company (optional)
- Email address (mandatory field)
- Topic (mandatory field)
- Message (mandatory field)
- Technical metadata: IP address, time of submission, browser identifier (user agent) — to protect against abusive use and spam
The data is transmitted via an encrypted TLS connection and
forwarded to our business email address
Support@leonavis.io.
Purpose: Answering your enquiry, initiating an
advisory engagement.
Legal basis: Article 6 (1) lit. b GDPR (initiation
/ performance of a contract) and Article 6 (1) lit. f GDPR
(legitimate interest in efficient communication).
Retention period: Your data will be deleted as soon
as the purpose of processing no longer applies, at the latest after
the expiry of statutory retention periods (e.g. §§ 147 AO, 257 HGB,
10 years for commercial and tax records).
4. Scheduling via Calendly
We use the scheduling software Calendly for booking introductory calls. Provider is Calendly LLC, 271 17th Street NW, Atlanta, GA 30363, USA.
When you access the scheduling section and interact with the embedded calendar, the following data is transmitted to Calendly:
- IP address
- Browser and device metadata
- Upon booking: name, email address, selected time slot, any answers to additional questions
Calendly LLC is certified under the EU-U.S. Data Privacy Framework.
An adequacy decision (Implementing Decision (EU) 2023/1795) is in
place between the EU Commission and the USA, so the transfer of data
to the USA is permissible under Article 45 GDPR.
Purpose: Booking and managing advisory appointments.
Legal basis: Article 6 (1) lit. b GDPR (initiation
/ performance of a contract) and Article 6 (1) lit. a GDPR
(consent through active use of the widget).
Calendly privacy notice:
https://calendly.com/pages/privacy
5. Integration of external fonts (Google Fonts)
To ensure a uniform display of fonts, this website uses web fonts provided by Google (Google Fonts). When you access a page, your browser loads the required web fonts, which for technical reasons establishes a connection to Google servers (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address may be transmitted to Google in the process.
Legal basis: Article 6 (1) lit. f GDPR (legitimate
interest in an appealing and consistent presentation of our online
offering).
Google privacy notice:
https://policies.google.com/privacy
6. Cookies
This website does not set any technically unnecessary cookies. The embedded Calendly widget may set its own cookies when you actively interact with it; these are documented in the Calendly privacy notice linked above.
7. Recipients and data processors at a glance
- Hostinger International Ltd. (Cyprus / EU) — Server hosting. DPA in place.
- Calendly LLC (USA) — Scheduling. EU-U.S. DPF-certified.
- Google Ireland Ltd. (Ireland / EU) — Provision of web fonts.
8. Your rights as a data subject
Under the GDPR you have the following rights:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw consent granted (Article 7 (3) GDPR)
To exercise your rights, please contact us at Support@leonavis.io.
9. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular:
- Bulgaria (lead supervisory authority): Commission for Personal Data Protection (KZLD), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia.
- Germany: the state data protection authority responsible for your place of residence. Overview: www.bfdi.bund.de
10. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the lock icon in your browser's address bar and by the "https://" at the beginning of the address.
11. Currency and update of this privacy notice
This privacy notice is currently valid. Due to the further development of our website and offerings or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy notice. The current version of this privacy notice can be accessed at any time at leonavis.io/en/privacy.html.