Last updated: 17 September 2026
Privacy Policy and GDPR Mandatory Information
Mandatory Information on the Rights of Individuals Regarding Personal Data Protection
Information about the Data Controller:
- Company Name: Meteorites Ltd (operating as Next Equipment)
- UIC / BULSTAT: 118583892 · VAT: BG118583892
- Registered Office: Bulgaria, 7500 Silistra, 3 P. K. Yavorov Str., fl. 6, ap. 16
- Correspondence Address: Bulgaria, 7500 Silistra, 3 P. K. Yavorov Str., fl. 6, ap. 16
- Telephone: +359 878 12 33 33
- E-mail: office@nextequipment.eu
- Website: www.nextequipment.eu
Information about the Competent Supervisory Authority:
- Name: Commission for Personal Data Protection (CPDP)
- Headquarters and Address: Bulgaria, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
- Correspondence Address: Bulgaria, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
- Telephone: +359 2 915 3 518
- Website: www.cpdp.bg
Meteorites Ltd (hereinafter referred to as the “Controller” or the “Company”) operates in accordance with the Bulgarian Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR). This document aims to inform you about all aspects of the processing of your personal data by the Company and the rights you have in connection with this processing.
Basis, Purposes, and Principles for Processing Personal Data
Art. 1. The Controller collects and processes your personal data in connection with the use of the informational website www.nextequipment.eu and business communications, based on Art. 6, para. 1 of the GDPR, specifically:
- Explicit consent provided by you (e.g., when sending an inquiry via email or a contact form);
- Steps taken at your request prior to entering into a contract;
- Compliance with a legal obligation that applies to the Controller;
- For the purposes of the legitimate interests pursued by the Controller (e.g., ensuring website security).
Art. 2. (1) We collect and process personal data for the following purposes:
- Responding to business inquiries and providing technical information;
- Individualization of a party for potential future contracts;
- Accounting and statistical purposes;
- Information security protection.
(2) We strictly observe the following principles: lawfulness, fairness, transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity, and confidentiality.
What Types of Personal Data We Process
Art. 3. (1) The Company performs the following operations with your personal data:
- Handling inquiries and correspondence: The purpose of this operation is to administer the communication with potential clients and partners who contact us through the website. Given the limited scope of data, a Data Protection Impact Assessment (DPIA) is not required.
(2) The Controller processes the following categories of personal data:
- Identifying and Contact Data (Names, E-mail, Telephone): Collected solely for the purpose of contacting you back, responding to your inquiries, or sending a requested quote.
- Basis for processing: Art. 6, para. 1, letter (b) GDPR (pre-contractual relations) or letter (a) (explicit consent).
(3) The Controller does not collect or process sensitive personal data (e.g., revealing racial origin, political opinions, health data, biometric data, etc.). (4) The Company does not perform automated decision-making or profiling.
Cookies
Art. 4. The Controller uses “cookies” strictly to provide full functionality of the website, improve user experience, and for statistical purposes. You agree to this by using our website. Cookies do not constitute personal data and are not used to individually identify visitors. You can control or delete cookies through your browser settings.
Data Retention Period
Art. 5. (1) The Controller stores your personal data provided through correspondence only for the period necessary to respond to your inquiry and conclude any pre-contractual negotiations. (2) If a business contract is concluded, data is kept for statutory periods required by commercial and tax laws (usually 5 to 10 years). (3) The Controller will notify you if the retention period needs to be extended to fulfill a legal obligation or legitimate interest.
Transmission of Personal Data
Art. 6. (1) The Controller may transfer part or all of your personal data to data processors (e.g., IT and hosting providers) for the fulfillment of the processing purposes, subject to GDPR compliance. (2) The Controller does not transfer your data to third countries outside the EU without adequate protection measures.
Your Rights Regarding Personal Data
Art. 7. Right to Withdraw Consent: You can withdraw your consent for data processing at any time by sending a free-text email to office@nextequipment.eu. Art. 8. Right of Access: You have the right to request and receive confirmation from the Controller as to whether your personal data is being processed, and to receive a copy of it. Art. 9. Right to Rectification: You can request the correction of inaccurate or incomplete personal data associated with you. Art. 10. Right to Erasure (“Right to be Forgotten”): You have the right to request the deletion of your personal data without undue delay when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent, subject to legal exceptions. Art. 11. Right to Restriction: You can require the Controller to restrict the processing of your data in specific legal scenarios. Art. 12. Right to Data Portability: You can request your data in a structured, machine-readable format to transfer it to another controller. Art. 13. Right to Object: You may object at any time to the processing of your personal data based on legitimate interest or for direct marketing purposes.
Art. 14. Data Security Breaches: If the Controller detects a security breach posing a high risk to your rights, you will be notified without undue delay.
Art. 15. Right to Complain: In case of a violation of your rights, you have the right to file a complaint with the Commission for Personal Data Protection (CPDP) using the contact details provided at the top of this document.
Appendices: Forms for Exercising Your Rights
Note: The use of these forms is not strictly mandatory. You may exercise your rights by sending a free-text email to office@nextequipment.eu that clearly states your request.
Appendix No. 1: Form for Withdrawal of Consent
To: Meteorites Ltd (UIC: 118583892) E-mail: office@nextequipment.eu Your Name: ……………………………………………………………… E-mail used for correspondence: ………………………………….. I hereby withdraw my consent for the processing of my personal data provided for the purposes of receiving marketing materials or other communications.
Appendix No. 2: Request for Erasure (“Right to be Forgotten”)
To: Meteorites Ltd (UIC: 118583892) E-mail: office@nextequipment.eu Your Name: ……………………………………………………………… E-mail used for correspondence: ………………………………….. I request that all personal data collected, processed, and stored by you, provided by me or third parties related to me, be permanently deleted from your databases. I declare that I am aware that some of my personal data may continue to be processed and stored by the Controller solely for fulfilling statutory legal obligations.
Appendix No. 3: Request for Data Portability
To: Meteorites Ltd (UIC: 118583892) E-mail: office@nextequipment.eu Your Name: ……………………………………………………………… E-mail used for correspondence: ………………………………….. I request that all personal data related to me, processed in your databases, be sent in XML format to the following e-mail: …………………………………..
Appendix No. 4: Request for Rectification of Data
To: Meteorites Ltd (UIC: 118583892) E-mail: office@nextequipment.eu Your Name: ……………………………………………………………… E-mail used for correspondence: ………………………………….. I request that the following personal data collected and processed by you be corrected: Data subject to correction: ………………………………….. Please correct it as follows: …………………………………..