Privacy policy
1. What this site collects
- Contact form. When you submit the form we collect the details you enter — name, company, work email, what you ship and typical volumes — and send them by email to our team so we can reply. We do not store them elsewhere on this site.
- No cookies are set and no analytics run.
- Fonts, video and audio are served from this site's own domain; no third-party requests are made from your browser when you simply read the pages.
- The hosting provider (Cloudflare) processes IP addresses and technical request data in server logs to deliver and secure the site. Our lawful basis is our legitimate interest in the security and availability of the website; these logs are retained only for a short period by our provider and are not used to identify you.
2. Why, and on what basis
We use form details only to respond to your enquiry. The lawful basis is our legitimate interest in answering business enquiries (EU GDPR Article 6(1)(f)). Enquiries are sent to hello@htametall.com and kept no longer than needed to deal with them and any follow-up, then deleted, and in any case within 24 months of our last contact about the enquiry.
3. Who processes the data
Beyond HTA Metall, the details are handled by our website host (Cloudflare) and Microsoft (Microsoft 365, which delivers the enquiry email), acting as processors on our instructions.
4. Your rights
The tick box on the contact form records that you have read this notice; it is not the legal basis for the processing. We rely on our legitimate interest in answering business enquiries, and you can object to that processing at any time. If we ever ask for your consent for anything else, you will be able to withdraw it just as easily as you gave it.
Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. To exercise them, or to reach our data protection contact, email hello@htametall.com. You also have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592 — cpdp.bg.
5. International transfers
Cloudflare and Microsoft may process data in the United States. Where data is transferred outside the EEA we rely on the European Commission’s Standard Contractual Clauses. To request a copy of the safeguards, email hello@htametall.com.
6. Security
All traffic to this site uses HTTPS/TLS, and the mailbox that receives enquiries is access-controlled. We keep our security measures under review.
7. Children
This website is intended for business users. It is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has contacted us, email hello@htametall.com and we will delete the information.
8. Changes
This page will be versioned; material changes will be noted here.