Last Updated: 2026/02/11
- Who are we?
- We are “EQUITSHARE” LTD, UIC 207739316, with seat and registered office: Mladost, bl. 102, app. 71, email: [email protected], telephone: +359888 739875 (hereinafter referred to as the “Controller” or “The Company”). By this Privacy Policy, the Company provides information on how it will use personal data related to the use of the https://www.equitshare.com website and the provision of services for the Creation and operation of employee stock ownership plans and related services.
- What personal data does the Company process about you?
- The personal data that the Company will process are as follows:
- For use of the website:
We may automatically collect certain information about your use of the Website, such as the identifier of the device used to access it, which is obtained by us when you visit the Website. This information is stored only for the duration of the visit session;
Your IP address as part of the access log information;
This site also uses cookies. See point 3. below. - For the provision of services for the demonstration and establishment and operation of employee stock ownership plans and related services:
- Information about your employees, shareholders, investors: first name, last name and family name; ID number; Contact details: email, address and phone;
- Any personal data relating to you and your employees, including special categories of such data, the processing of which is necessary for the Company in order to perform a contract with you for the provision of certain services.
- For use of the website:
- The personal data that the Company will process are as follows:
- Cookies
- What are cookies?
- A cookie is a short piece of text information sent to your browser from a website you have visited. It helps the site remember information about your visit and your settings. This can make your next visit easier and the site more useful to you.
- Cookies are used for many purposes – to remember your preferences and settings for site view, font, language, to offer you ads relevant to your interests, to keep statistics on visits to a page, the site to “remember” that you are logged in, etc.
- Websites often collect information about how users interact with them – this can include the pages people visit most often, whether they get error messages from any of them, how they navigate the site, etc. Based on the analysis of this information, actions are taken to improve the services and performance of the sites to ensure a pleasant and seamless user experience.
- Types of cookies:
- We use both necessary and analytical cookies. They allow us to analyze the use of the Website so that we can measure and improve its performance. All information which these cookies collect is aggregated and does not relate to you personally. If you block or refuse these cookies, we will not be able to monitor the Website’s performance. Cookies, other than the necessary ones are collected on the basis of your consent.
- Necessary:
- These cookies are strictly necessary for providing authentication and security features on our app. They do not store personal data, and are active only during your session or for a predefined period of time.
- Authentication Cookies – these cookies store tokens that allow us to verify your identity and maintain your login status during your session. They enable you to access protected resources without needing to log in repeatedly during your session.
- Security Cookies – in addition to authentication, these cookies help maintain the security of your session by ensuring that your authentication tokens are properly refreshed when needed and that only valid sessions are allowed.
- Local Storage cookies – storing user pages preferences – menu expand & shrink, modelling tables view changes;
- Third party cookies:
- Elementor, in relation to website frontend. For more information see their cookie policy – https://elementor.com/terms/cookie-policy
- WordPress in relation to website engine. For more information see their cookie policy – https://developer.wordpress.org/advanced-administration/wordpress/cookies/
- Google Analytics in relation to website traffic tracking. For more information see their cookie policy:
- https://marketingplatform.google.com/about/analytics/terms/us/ ;
- https://policies.google.com/privacy ;
- https://support.google.com/analytics/answer/11397207?hl=en ;
- https://support.google.com/analytics/answer/6004245 .
- Necessary:
- We use both necessary and analytical cookies. They allow us to analyze the use of the Website so that we can measure and improve its performance. All information which these cookies collect is aggregated and does not relate to you personally. If you block or refuse these cookies, we will not be able to monitor the Website’s performance. Cookies, other than the necessary ones are collected on the basis of your consent.
- How to control cookies?
- You can control and/or delete cookies whenever you wish. For more information visit https://www.cookiesandyou.com/ . You can delete all or selected cookies already stored on your computer, and you can also set most browsers to block them. However, if you do this, you may have to manually set some parameters each time you visit a site. In addition, some services and features may not work.
- Changes to the Cookie Policy
- Any future changes to our Cookie Policy will be published on the Website. Where necessary, we will notify you of any changes to the Cookie Policy by other means in accordance with the Website Terms of Use published on the Website. All changes will take effect immediately, except where otherwise stated.
- This policy is effective as of 1.11.2024
- What are cookies?
- For what purposes will the Company use your data?
- The personal data you provide will only be used for the purposes of:
- providing access to website functionality;
- the performance by the Company of its obligations under the contract concluded with you, respectively only for the steps requested by you before the conclusion of a contract;
- processing of information for the purposes of the Company’s performance of its statutory obligations under applicable law;
- processing information to defend against legal claims;
- The personal data you provide will only be used for the purposes of:
- On what basis does the Company process your personal data?
- The processing of your data referred to in point 2. for the use of the website is necessary to ensure the visit and functionality of the website for the duration of the current visit session on the basis of Article 6(1)(f) – legitimate interest, and on the basis of consent 6(1)(a) of the GDPR for the cookies outside the necessary ones.
- The processing of your data and the data of your employees, shareholders, investors, is necessary for the performance of a contract concluded between you and the Company, under which the Company undertakes to provide you with certain services in return for remuneration, or for the Company to take certain steps at your request before concluding a contract under Art. 6 (1) (b) of the GDPR. When the Company is required by the applicable law to process your personal data, it is processed on the ground of the performance of legal obligations under 6(1)(c) of the GDPR. In limited situations, such as processing data for the protection against legal claims, the Company can process personal data under Article 6(1)(f) – legitimate interest.
- Who can the Company share your personal data with?
- The Company is committed to maintaining the confidentiality of information relating to you and to complying with all legal requirements regarding its sharing and disclosure. The Company may disclose your personal information to the following recipients where it is lawful and/or necessary to do so:
- Partner organisations and contractors for the purpose of performing the contract with you;
- Service providers: the Company uses third parties/parties to provide accounting services, maintenance of its information systems and technology, etc. The Company only shares your personal data with service providers when they have a legitimate reason to use it to provide the relevant service. The Company will only make such disclosures to third parties where there is a valid reason to do so and on the basis of a written contract or other document under which the recipients will provide an adequate level of protection.
- Central and local authorities and other public authorities for the purpose of preventing and detecting crime, and to regulatory authorities who have the power to require information from the Company;
- The Company’s attorneys, professional advisors and auditors.
- Is data transferred to other countries?
- The Company uses Amazon Web Services (AWS) for hosting and server services located in data centers within the European Economic Area (EEA). AWS ensures compliance with key information security standards including ISO/IEC 27001, GDPR and SOC 2. More information about AWS standards can be found on their website: AWS Compliance Programs – https://aws.amazon.com/compliance/
- The controller will not transfer your personal data to countries or territories outside the European Economic Area unless that country or territory guarantees a sufficiently high level of protection, or unless you expressly consent to your data being transferred to other countries, or if such transfer is necessary for the performance of a contract with you.
- For how long does the Company store your personal data?
- Identifier of the device used for access is processed for the time of the visit to the website. IP address – for the period of 6 months.
- The controller shall keep your personal data and the individual documents relating to a particular contract with you for no longer than is necessary for the performance of the contract and for any other permissible and related purpose (such as protection against legal claims) for a period of up to 5 years after the termination of the contract. The controller shall retain the data for longer periods when it needs to comply with the legal requirements of the applicable laws such as the Accounting Act and the Anti-Money Laundering Act.
- How does the Company protect personal data?
- The Company will take all necessary actions and measures to ensure the security of the personal data and to avoid access, collection, use, disclosure, copying, modification, disposal, deletion or other unauthorized use by unauthorized persons. The Company employs industry-standard security measures, including data encryption, access controls, regular security audits, and staff training programs, to protect your personal data from unauthorized access, loss, or misuse
- Your rights in relation to your personal data
- At any time while the Company holds or processes your personal data, you, the data subject, have the following rights:
- Right of access – you have the right to access and obtain a copy of your personal data processed by the Company;
- Right to rectification – you have the right to request that your personal data be rectified if it is incomplete or inaccurate;
- Right to be forgotten – in certain circumstances you have the right to request the removal from our records of personal data relating to you;
- The right to request the restriction of the processing of your personal data – in certain circumstances you have the right to request the restriction of the processing of your personal data;
- Right to data portability – in certain circumstances, you have the right to request that your data processed by the Company be transferred to another organization;
- Right to object – you have the right to object to certain types of processing of personal data, e.g. for direct marketing purposes;
- Right to object to the automatic processing of your personal data, including profiling – you also have the right to have the legal effects of the automatic processing or profiling affect you;
- If you wish to lodge a complaint about the way the Company/third party processes your personal data, you have the right to lodge a complaint directly with the Bulgarian Commission for Personal Data Protection (CPDP) under article 77 of the GDPR at the following address: 1592 Sofia Blvd. 1595 Prospekt “Prof. 0035929153518; fax: 0035929153525; e-mail address: [email protected] , or to file a lawsuit against the Company if you believe that your privacy and personal data protection rights have been violated.
- How can you exercise your rights?
- To exercise any of your rights, you can write to the Company’s email address, or fill in a form at the Company’s office.
- The Company will respond to any request for access to personal data as soon as possible in the form in which you have made your request to it, either in writing on paper or in electronic form, but no later than one month after making the request.
- The Company may ask you to provide additional information necessary to confirm your identity. You can contact the Company in Bulgarian or English.
- How do I contact the Company regarding this data protection information?
- For more information about the protection of your personal data, the exercise of any of the above rights or any other questions related to the security and protection of your personal data, you cancontact the Company at the following address:
- Email: [email protected] ;
- Phone: +359 888 739875;
- Visit address: Sofia, Campus X, bul. Aleksandar Malinov Boulevard 31