PRIVACY POLICY

BorisMitov.com
Effective Date: February 2026 · Last Updated: February 2026

1. Introduction

Welcome to BorisMitov.com (the “Website”). This Privacy Policy explains how Boris Mitov (“I”, “me”, or “my”) collects, uses, stores, and protects your personal data when you visit this Website or use the services offered through it.

I am committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR), Bulgarian data protection legislation, and all applicable privacy laws.

By using this Website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Boris L. Mitov
Sofia, Bulgaria
Email: boris@nexthitech.com
Website: borismitov.com

As a data controller, I determine the purposes and means of processing your personal data and am responsible for ensuring your data is handled lawfully, fairly, and transparently.

3. What Personal Data I Collect

I collect and process the following types of personal data:

3.1 Information You Provide Directly

  • Contact Information: Name, email address, phone number (when you use contact forms, book services, or subscribe to newsletters)
  • Birth Data for Hologenic Readings: Date, time, and place of birth (provided voluntarily for the purpose of Hologenic Profile Readings)
  • Payment Information: Billing details processed securely by third-party payment processors (PayPal, Stripe)
  • Communication Content: Messages you send through contact forms, email, or during consultations
  • Service Preferences: Your interests in specific services (PanEuRhythmy, Solar Lifestyle consulting, travel workshops, etc.)

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, time zone, device information
  • Usage Data: Pages visited, time spent on pages, links clicked, referring URLs
  • Cookies and Similar Technologies: Small text files stored on your device (see Section 6 for details)

4. How I Use Your Personal Data

I process your personal data for the following purposes:

4.1 Service Delivery

  • To provide Hologenic Profile Readings, PanEuRhythmy classes, Solar Lifestyle consulting, and other requested services
  • To communicate with you about bookings, appointments, and service-related matters
  • To process payments and send receipts

4.2 Communication and Marketing

  • To send newsletters and updates about my work (only with your consent)
  • To respond to enquiries and provide customer support
  • To inform you about new services, events, or content relevant to your interests

4.3 Website Improvement

  • To analyse website usage and improve content, functionality, and user experience
  • To troubleshoot technical issues

4.4 Legal and Safety

  • To comply with legal obligations and protect my legal rights
  • To detect, prevent, and address fraud or security issues

5. Legal Basis for Processing

Under the GDPR, I process your personal data based on one or more of the following legal grounds:

  • Consent: Where you have explicitly consented (e.g., newsletter subscriptions, providing birth data for readings)
  • Contract: Where processing is necessary to fulfil a service contract with you (e.g., delivering a Hologenic Reading you have booked and paid for)
  • Legitimate Interests: Where processing is necessary for my legitimate business interests, provided these do not override your rights (e.g., website analytics, fraud prevention)
  • Legal Obligation: Where I am required by law to process your data (e.g., tax and accounting records)

6. Cookies and Tracking Technologies

This Website uses cookies to improve your browsing experience and analyse website traffic.

What are Cookies?

Cookies are small text files placed on your device by websites you visit. They help websites remember your preferences and understand how you use the site.

Types of Cookies I Use:

  • Essential Cookies: Necessary for the Website to function properly (e.g., security, session management)
  • Analytics Cookies: Help me understand how visitors use the Website (via Google Analytics or similar tools)
  • Marketing Cookies: Used to deliver relevant content and track the effectiveness of campaigns (if applicable)

Managing Cookies

You can control and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of this Website. For more information on managing cookies, visit: www.allaboutcookies.org

7. Third-Party Services and Data Sharing

I do not sell, rent, or trade your personal data. However, I share your data with trusted third-party service providers who assist in operating this Website and delivering services. These include:

  • Website Hosting and Infrastructure: The hosting provider stores website data on secure servers
  • Payment Processors: PayPal and Stripe process payment transactions securely. I do not store full credit card details
  • Email Service Providers: For sending newsletters and transactional emails (e.g., booking confirmations)
  • Analytics Tools: Google Analytics (or similar) to understand website traffic and user behaviour
  • Social Media Platforms: When you interact with social media links or plugins (Facebook, Instagram, LinkedIn, etc.), those platforms may collect data according to their own privacy policies
  • Powur (Solar Consulting Referrals): If you express interest in solar energy solutions through my consulting services, I may refer you to Powur, and your contact details will be shared with them for that purpose

All third-party processors are required to handle your data securely and only for the purposes specified by me. They are contractually obligated to comply with GDPR and applicable data protection laws.

8. International Data Transfers

Some of the third-party services I use (including Google, PayPal, Stripe, and email providers) may transfer and process your data outside the European Economic Area (EEA). Where this occurs, I ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your data to the same standard required within the EEA.

9. Data Retention

I retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

  • Contact form and enquiry data: up to 2 years from last contact
  • Client service records (readings, bookings, payments): up to 7 years for accounting and legal compliance purposes
  • Newsletter subscriber data: until you unsubscribe or withdraw consent
  • Website analytics data: in accordance with the retention settings of the analytics platform used (typically 26 months)
  • Birth data provided for readings: retained only as long as you remain an active client or as required for follow-up services

10. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of Access (Article 15)

You have the right to request a copy of the personal data I hold about you and information about how it is used.

Right to Rectification (Article 16)

You have the right to request correction of any inaccurate or incomplete personal data I hold about you.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing.

Right to Restriction of Processing (Article 18)

You have the right to request that I restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.

Right to Data Portability (Article 20)

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests, including for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact me at: boris@nexthitech.com. I will respond within 30 days. In complex cases this may be extended to 60 days, and I will notify you if this is the case.

If you are not satisfied with my response, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP):

Commission for Personal Data Protection (KZLD / CPDP)
2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria
Website: cpdp.bg
Email: kzld@cpdp.bg

11. Data Security

I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

  • SSL/HTTPS encryption on the Website
  • Secure and access-controlled email systems
  • Strong password policies and two-factor authentication where available
  • Use of reputable, GDPR-compliant third-party processors
  • Regular reviews of data handling practices

While I take all reasonable precautions, no data transmission over the internet or storage system can be guaranteed as 100% secure. If you have reason to believe your data has been compromised, please contact me immediately.

12. Children’s Privacy

This Website is not directed at children under the age of 16. I do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided personal data through this Website, please contact me and I will take steps to delete that information.

13. Links to Other Websites

This Website contains links to my other platforms (solarlifestyle.net, nexthitech.com, paneurythmy.com, bmcreations.com, discoverandtravel.com, spacetourism.reviews) and to third-party websites (Powur, social media platforms, etc.). Each of these websites operates under its own privacy policy. I am not responsible for the privacy practices of any third-party website and encourage you to review their policies before providing any personal data.

14. Changes to This Privacy Policy

I reserve the right to update this Privacy Policy at any time to reflect changes in my practices, services, or applicable law. When I make material changes, I will update the “Last Updated” date at the top of this page.

I encourage you to review this Privacy Policy periodically. Continued use of the Website after changes have been posted constitutes your acceptance of those changes.

15. Contact Me

If you have any questions, concerns, or requests regarding this Privacy Policy or how I handle your personal data, please contact me:

Boris L. Mitov
Email: boris@nexthitech.com
Website: borismitov.com

This Privacy Policy was last updated on February 20, 2026.