Privacy Policy

1. Data Protection at a Glance

NewLevelHR takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this Privacy Policy.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Email: info@newlevelhr.com

Represented by: Mariyana Velkova, Managing Director.

3. Data Collection on Our Website

Contact Form / Email: If you send us inquiries via email or the contact form, your details (including your email address and name) will be stored for the purpose of processing the inquiry. We do not share this data without your explicit consent.

Server Log Files: The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files" (e.g., IP address, browser type, time of server request). This data cannot be assigned to specific persons and is used solely for technical optimization.

4. Hosting and Server Log Files

This website is a static website delivered by our hosting provider. Each time the site is accessed, the hosting provider automatically processes the following data in server log files: the IP address of the requesting device, the browser type and version (user agent), the date and time of the request and the requested URL.

This data is processed to ensure the secure and stable operation of the website, to detect and defend against attacks and to analyse technical faults. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in the security and availability of the website). The log data is not merged with other data sources.

Retention period: up to 30 days. Log data that must be retained for evidential purposes is excluded from deletion until the relevant incident has been finally clarified.

5. Contact Form

If you use the contact form on this website, we process the data you enter in the form fields:

• Name
• Email address
• Company (optional)
• Topic
• Message
• Your consent to this Privacy Policy

In addition, your IP address and the time of submission are processed. These two data points are used solely for spam protection and rate limiting and are not used for any other purpose.

Your message is transmitted to us by email to info@newlevelhr.com via the mail service of our hosting provider or a transactional email provider and is then processed in our email system.

The legal basis is Art. 6(1)(b) GDPR where your inquiry is aimed at concluding a contract or relates to pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries addressed to us).

Retention period: 12 months after the last contact, unless a business relationship follows. Statutory retention obligations remain unaffected.

We do not share the data from your inquiry with third parties for marketing purposes.

6. Booking a Call (Calendly)

To book a free consultation, we provide a link to the scheduling service Calendly (Calendly LLC, USA), which opens in a new tab. No data is transmitted to Calendly by merely visiting our website. Only when you use the booking link and enter your details on Calendly’s pages are the data you provide there (such as your name, email address and the selected appointment) processed by Calendly.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request) and Art. 6(1)(f) GDPR (our legitimate interest in simple appointment scheduling). Calendly processes data in the United States. The transfer is based on the EU standard contractual clauses and/or Calendly’s certification under the EU-US Data Privacy Framework. Details can be found in Calendly’s privacy policy: calendly.com/privacy.

7. Cookies and Consent

Without your consent, this website only uses storage that is strictly necessary for its operation: your cookie choice, whether you have dismissed the language suggestion, and whether the intro animation has already been shown. These entries do not track you and are not shared with third parties (Art. 6(1)(f) GDPR).

Optional analytics or marketing cookies are set only after you have given your consent through the cookie dialog (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future via the “Cookie settings” button in the footer of every page.

A complete list of the cookies and local storage entries used by this website can be found in our Cookie Policy.

8. Fonts and External Resources

The fonts used on this website are hosted on our own server. No connection is established to Google Fonts or other content delivery networks when a page loads, and no data is transmitted to such providers for this purpose.

Scripts and stylesheets are likewise delivered from our own hosting. External services are only loaded when you actively use a corresponding function (such as the booking link) or have given your consent.

9. Analytics

By default, this website does not use any analytics or tracking tools. Should we in future use a privacy-friendly analytics tool to measure page views in aggregate, it will be named in this section before activation and loaded only after your consent through the cookie dialog.

10. Legal Basis for Processing

Data processing is carried out on the basis of:

• Art. 6(1)(b) GDPR: For the performance of a contract or prior to entering into a contract.
• Art. 6(1)(a) GDPR: Based on consent you have given us (e.g., subscribing to a newsletter or submitting a CV).
• Art. 6(1)(f) GDPR: To protect our legitimate business interests (website security and optimization).

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "Right to be forgotten" (Art. 17 GDPR)
• Right to restrict processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

If you wish to exercise any of these rights, please contact us at info@newlevelhr.com. You also have the right to lodge a complaint with the competent supervisory authority (in Bulgaria: Commission for Personal Data Protection, CPDP).

12. Supervisory Authority

The supervisory authority competent for NewLevelHR is:

Website: www.cpdp.bg

If you reside in another EU Member State, you may also contact the supervisory authority of your place of residence.

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy so that it always reflects the current legal requirements or changes to our services, for example when new services are introduced. The version published on this website at the time of your visit applies.

Effective date: September 2026.