Privacy Policy

1. Introduction

AstraCore ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (astracore.eu / astracore.ai) or use our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Bulgarian and EU data protection law.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We may collect the following categories of personal data:

• Contact information — name, business email address, phone number, and company name when you submit a demo request or contact form.
• Usage data — IP address, browser type, pages visited, and time spent on the site, collected via cookies and analytics tools.
• Communication data — content of messages you send us via email or contact forms.

4. How We Use Your Data

We use the data we collect to:

• Respond to your demo requests and enquiries.
• Provide, operate, and improve our services.
• Send you relevant product updates and marketing communications (only with your consent or where we have a legitimate interest).
• Comply with legal obligations.
• Analyse website usage to improve user experience (via anonymised analytics).

5. Legal Bases for Processing

We rely on the following legal bases under GDPR Article 6:

• Contract — processing necessary to fulfil a contract with you or take pre-contractual steps at your request.
• Legitimate interests — improving our services and communicating with prospective customers.
• Consent — for marketing communications and non-essential cookies.
• Legal obligation — where required by law.

6. Cookies and Analytics

We use cookies and similar tracking technologies to enhance your experience. We use Umami Analytics, a privacy-friendly, GDPR-compliant analytics tool that does not use cookies and does not collect personally identifiable information.

Essential cookies are necessary for the website to function and cannot be disabled. You may manage non-essential cookies through your browser settings.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data with trusted third-party service providers who process data on our behalf, including:

• Brevo (Sendinblue) — email delivery (SMTP).
• Cloud hosting and infrastructure providers operating within the EU/EEA.

All third-party processors are bound by data processing agreements and are required to maintain appropriate security measures.

8. International Transfers

We primarily process your data within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate safeguards are in place in accordance with GDPR Chapter V.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Contact form submissions are retained for up to 2 years unless an ongoing business relationship exists.

10. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time (where processing is consent-based).
• Lodge a complaint with the Commission for Personal Data Protection of Bulgaria (CPDP) or another supervisory authority.

To exercise any of these rights, contact us at team@astracore.eu.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at team@astracore.eu.