LEGAL
Privacy Policy
Effective: 15 June 2026
This page explains how Worc Global Distribution EOOD (“WORC”, “we”) handles personal data on worcglobal.com.
Who we are
WORC is a Bulgarian company registered in Sofia.
- Legal name: Worc Global Distribution EOOD
- Registered address: {{REGISTERED_ADDRESS_PUBLIC}}
- Company registration number (EIK): {{EIK_NUMBER}}
- VAT: BG208571921
- Contact: {{CONTACT_EMAIL}}
What we collect
We collect personal data when you submit a form on this website (Contact, Partner Financing programme notifications). The forms ask for your name, work email, role, organisation, and any message you choose to send.
We also automatically log technical information needed to operate the site: your IP address, the page you visited, your browser type, and the time of the visit. These logs help us keep the site secure and detect abuse.
We do not run analytics. We do not place advertising cookies. We do not profile visitors.
Why we collect it
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to your enquiry when you submit a form | Pre-contractual measures at your request — Article 6(1)(b) |
| Improve the service we offer based on aggregated form data | Legitimate interest — Article 6(1)(f) |
| Keep the website secure (IP logs, spam protection) | Legitimate interest — Article 6(1)(f) |
| Notify you about a programme you asked to be notified about (e.g. Partner Financing) | Consent — Article 6(1)(a). You can withdraw at any time. |
Who has access
Your data is handled by WORC personnel on a need-to-know basis.
We use the following sub-processors:
- Netlify, Inc. — hosts the website and processes form submissions on our behalf. Netlify is established in the United States; transfers are governed by Standard Contractual Clauses approved by the European Commission. See Netlify's privacy notice.
We do not sell your data. We do not share it with advertisers. We disclose data to third parties only when required by law.
International transfers
Form submissions are stored on Netlify infrastructure. Netlify is a US company. Transfers outside the European Economic Area are covered by the EU Standard Contractual Clauses (SCCs).
How long we keep it
- Form submissions: 24 months from your last contact with us, then deleted.
- Programme notification lists: until you unsubscribe, or 36 months of inactivity, whichever is sooner.
- Server logs: 90 days, then aggregated and anonymised.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Have your data deleted.
- Restrict how we use it.
- Object to processing based on legitimate interest.
- Receive your data in a portable format.
- Lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (CPDP). You may also complain to the supervisory authority of your country of residence.
To exercise any of these rights, email {{PRIVACY_EMAIL}}. We respond within 30 days.
Changes to this policy
We update this policy when our processing changes. The current version is dated at the top of the page. Material changes will be communicated by email where we have your address.
Contact
- Privacy questions: {{PRIVACY_EMAIL}}
- General contact: {{CONTACT_EMAIL}}
- Postal: {{REGISTERED_ADDRESS_PUBLIC}}