Privacy policy

1. Controller and contact

The controller of data submitted through Skills AI Bulgaria forms is Dzmitry Arlou. Use the form below or the Telegram link for questions and data rights requests; no website account is required. This policy covers the information website and enquiries. There are no payments or learner accounts here.

2. Data we use

An enquiry includes your name, phone with country code, optional message, website language and the privacy policy version to which consent was given. For a data rights request, your name is optional; we use the phone from earlier correspondence, the request type and message.

Cloudflare handles IP addresses and browser signals to deliver and protect the website. The form does not forward your IP to Telegram. Do not submit identity documents, identification numbers, health information or other people’s data. For a minor learner, a parent or legal representative should use their own contacts.

3. Purposes and legal bases

We answer the specific enquiry on the basis of consent under GDPR Article 6(1)(a). This does not include advertising or reserve a place. You can withdraw consent at any time without affecting earlier lawful processing. Without contact details we cannot reply through this form.

Data rights requests are processed to fulfil legal obligations under Article 6(1)(c), without new consent. Website abuse prevention relies on the legitimate interest in keeping the site secure under Article 6(1)(f). There is no profiling or automated decision about access to learning.

4. Recipients and services

Form fields pass through Cloudflare Pages/Functions and the Telegram Bot API to the controller’s private chat. They are not posted to a group or channel. Telegram is a cloud service; bot messages do not have the end-to-end encryption of secret chats.

Cloudflare provides hosting and Turnstile protection. Cloudflare and Telegram have international infrastructure and may process data outside the EEA. Their terms, safeguards and contacts are described in the policies linked below. You may ask the controller about a particular transfer and the applicable safeguards.

5. Retention and deletion

Unprocessed enquiries are kept for up to 90 days from receipt. If correspondence continues, contact details are deleted within 90 days of the last contact unless a separate contractual relationship with prior information begins or the law requires otherwise.

The controller deletes messages and working copies when the period ends or on a valid request. Minimal correspondence about a rights request is kept for up to 90 days after completion, except for a specific legal obligation or dispute. Providers describe their own technical data retention in their policies.

6. Your rights

Where the legal conditions apply, you may request access, correction, erasure, restriction or portability, or object to processing based on legitimate interest. Use the deletion form or Telegram to withdraw enquiry consent.

We respond without undue delay, normally within one month of receipt. If a GDPR extension is necessary, we will explain the reason and deadline within the first month. We may verify ownership through the earlier contact; do not send an identity document on your own initiative. Delivery of a request does not mean deletion has already occurred.

You may complain to the Bulgarian CPDP or the competent authority in the country of your habitual residence, workplace or alleged infringement.

7. Browser storage and external content

The site remembers an explicit language choice in browser local storage under skills-ai-language. You can clear it in browser settings. We use no advertising pixels or advertising analytics. Turnstile uses technical signals to protect against bots.

Archive articles may load Pexels or Unsplash images; these services receive the technical request, including IP address. Messenger links and other external sites are governed by their providers’ policies.