Privacy Policy & GDPR
Last Updated: June 9, 2026
1. Data Controller
The data controller responsible for the personal data collected and processed through the Dev Smart Academy platform is "Dev-Art Solutions" Ltd., UIC 206506266. We process your data in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and applicable Bulgarian data protection laws.
2. Types of Data We Process
We collect personal data voluntarily provided by you during registration or usage of our services: username, email address, encrypted password, language preferences, study settings, and technical data collected via system logs (cookies, IP address, visit time).
3. Purposes and Legal Basis for Processing
Your personal data is processed to: provide and personalize our educational services, manage your user profile, send automatic recall notifications based on your settings, and communicate with you regarding your inquiries. The legal basis is the performance of a service contract (Terms and Conditions) and your explicit consent.
4. Data Retention
We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, or until you delete your user profile on the platform.
5. Your Rights
Under GDPR, you have the right to access, rectify, or erase your personal data ("right to be forgotten"), restrict processing, data portability, and the right to object to processing. You may exercise these rights at any time by contacting us.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or destruction. Passwords are saved in an encrypted format, and all data transfers are conducted via secure HTTPS protocol.
