Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, applicable national data protection law). In this privacy policy we inform you about the key aspects of data processing within the scope of this website. Personal data is any information relating to an identified or identifiable natural person.

3. Your rights

In principle, you have the following rights with regard to the personal data we hold about you:

To exercise your rights, an informal message to the contact details listed above is sufficient. In addition, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Art. 77 GDPR). The competent supervisory authority for the controller is the Bulgarian Commission for Personal Data Protection (Komisia za zashtita na lichnite danni, KZLD), based in Sofia. You may also contact the supervisory authority of your habitual residence.

4. Hosting and server log files

This website is operated by an external service provider (host). The personal data collected on this website is stored on the host's servers. When you access the website, the host automatically collects information transmitted by your browser in so-called server log files. These are:

• browser type and browser version
• operating system used
• referrer URL (the previously visited page)
• host name or IP address of the accessing device
• date and time of the server request

The collection of this data is technically necessary to deliver the website, ensure its stability and security and prevent misuse. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). We do not merge this data with other data sources. The log files are deleted after a short storage period, unless they are required to preserve evidence in the event of security incidents.

5. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://". When encryption is active, the data you transmit to us cannot be read by third parties.

6. Local storage

This website does not use any tracking or marketing cookies. To store your language preference, we use your browser's local storage under the key "isoryx-lang". Only the language code you have selected (e.g. "en") is stored locally on your device; no personal data is transmitted to us as a result. The legal basis is Art. 6 (1) (f) GDPR (provision of a functional, user-friendly website). You can delete the local storage at any time via your browser settings.

7. Contact by email and telephone

If you contact us by email or telephone, your details (e.g. name, email address, telephone number and the content of your enquiry) will be stored and processed for the purpose of handling your enquiry. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6 (1) (f) GDPR). We do not pass on this data without your consent and delete it once processing is complete and no statutory retention obligations preclude this.

8. Order and online calculator

You can place an order or enquiry via our online calculator (order form). In doing so, we process the data you enter in order to process your order and contact you. The following are collected:

• name
• email address
• telephone number (optional)
• delivery or billing address
• order details (product, area, colour, quantities and any comments you provide)

The legal basis for the processing is Art. 6 (1) (b) GDPR (performance of a contract or implementation of pre-contractual measures). Providing the mandatory fields is necessary to process your order; without this information we cannot fulfil the order. Your order data is stored in our database; a PDF is generated for confirmation and a confirmation email is sent to the address you provided. The data is stored for as long as is necessary for processing and beyond that within the applicable statutory (in particular commercial and tax) retention periods.

9. Chatbot / AI assistant

On our website we offer a chatbot (AI assistant) that answers questions about ISORYX. When you use the chatbot, your entered message, the previous conversation history and the selected language are processed and transmitted to our service provider OpenAI in order to generate a response. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in efficiently answering user enquiries). Please do not enter any personal or confidential data in the chat, as your input is forwarded to the service provider for processing. This processing may involve a transfer of data to the USA (see the section "Data transfer to third countries").

10. Recipients and processors

Your personal data is only transferred to third parties to the extent described here. We use carefully selected service providers who process data exclusively on our behalf and in accordance with our instructions (processing pursuant to Art. 28 GDPR). These include in particular our hosting provider, the email service provider used to send confirmation emails and the provider of the chatbot (OpenAI). Your data is not passed on or sold for advertising purposes.

11. Data transfer to third countries

When using individual services – in particular the chatbot – personal data may be transferred to countries outside the European Union (in particular the USA). Such a transfer only takes place if an adequate level of data protection is guaranteed, for example on the basis of an adequacy decision by the European Commission or through the conclusion of the EU standard contractual clauses (Art. 44 et seq. GDPR).

12. Currency and amendment of this privacy policy

This privacy policy is dated June 2026. As our website develops or due to changes in legal or regulatory requirements, it may become necessary to adapt this privacy policy. The version published on this page applies in each case.