Legal
How we handle personal data on this website, in line with the EU General Data Protection Regulation (GDPR).
Last updated: 5 June 2026
Concept X EOOD is the controller of personal data collected through this website. We are a foundry and machine shop registered in Vratsa, Bulgaria.
Registered office: West Industrial Zone, Vratsa 3000, Bulgaria. Company number (UIC): 204826901, VAT BG204826901. You can reach us at [email protected] or +359 87 846 0061.
We only collect personal data that you choose to send us.
When you use the enquiry form or email us, we receive your name, company, email address and the contents of your message. We use this to answer your enquiry, prepare a quotation and, where it leads to an order, to carry out the work. The legal basis is our legitimate interest in responding to business enquiries and taking steps at your request before entering into a contract.
Our hosting provider keeps standard server logs, including IP address, browser type and the time of each request, to keep the site running and secure. The legal basis is our legitimate interest in operating the site.
This website sets only one strictly necessary cookie, which records that you have seen the cookie notice so we do not ask again. You can reopen the notice at any time from the link in the footer.
For visitor statistics we use a privacy-friendly, cookieless analytics tool, hosted in the EU on our own infrastructure. It sets no cookies and stores nothing on your device. It records aggregated, anonymised usage data, such as page views, approximate region, browser and referring site, and does not track you across other websites. We rely on our legitimate interest in understanding how the site is used; because it stores nothing on your device, it needs no consent.
We do not sell personal data.
Enquiries sent through the form are delivered to our mailbox by Web3Forms, a form-delivery service acting as our processor. We also use a business email and hosting provider to receive and store correspondence. These providers process data only to provide their service to us.
Where a provider processes data outside the European Economic Area, that transfer is covered by appropriate safeguards, such as the European Commission's standard contractual clauses.
We keep enquiry correspondence for as long as needed to deal with your enquiry and any business relationship that follows, and to meet legal and accounting obligations. We delete it when it is no longer needed.
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these, email [email protected].
You also have the right to complain to the Bulgarian Commission for Personal Data Protection (CPDP), the supervisory authority, if you believe we have handled your data unlawfully.
We may update this policy from time to time. The date at the top shows when it was last changed.