Privacy policy

In force from 21 October 2026.

1. Who is responsible for your data

The controller is Lead Link Solution EOOD, bul. Vitosha 66, fl. 4, 1463 Sofia, Bulgaria, EIK 208667154. For anything about your data, write to piotr@leadlinksolutions.eu.

2. Whose data we process and where it comes from

• People we write to about business. Name, job title, company, work email address, LinkedIn profile and public information about the company (for example job postings, results, advertising). Sources: company websites, LinkedIn, public registers and media, and business contact databases in the tools we use.
• People who contact us or book a call: the data in their message and in the booking form.
• Clients and their staff during our work together.
• Website visitors. The hosting company logs technical data (IP address, browser, time of visit). The website uses no cookies and no analytics or advertising tools.

3. Why and on what legal basis

• Establishing business contact and sending a first message to a person whose role relates to the topic: our legitimate interest in building business relationships with companies (Article 6(1)(f) GDPR).
• Sending an offer or materials after you reply: your consent, or steps taken at your request before entering into a contract (Article 6(1)(a) and (b) GDPR).
• Performing a contract with a client: Article 6(1)(b) GDPR, and for the client's contact persons our legitimate interest (point (f)).
• Invoicing and tax obligations: a legal obligation (Article 6(1)(c) GDPR).
• Establishing, exercising and defending legal claims: our legitimate interest (point (f)).

When we write on behalf of a client, the client is the controller and we process the data on its behalf under a data processing agreement. We say so in the message.

4. Who receives the data

Providers who process data on our behalf: Google (email and documents), Instantly and Zapmail (sending and mailboxes), LinkedIn (messages and Sales Navigator), Calendly (booking calls), Netlify (website hosting), Anthropic (an assistant that helps us with research and with preparing messages; a person checks every message) and our accounting office. We do not sell data.

5. Transfers outside the European Economic Area

Some providers are based in the USA. Data goes there under the mechanisms provided for in the GDPR: the European Commission's adequacy decision (EU-US Data Privacy Framework) for companies covered by it, or standard contractual clauses.

6. How long we keep the data

• Data of people we wrote to who did not reply: no longer than 12 months from the last contact.
• After an objection: we delete the data and keep only the email address on a do-not-contact list, so that we do not write to it again.
• Correspondence with clients and interested people: for the duration of our work together and until the limitation periods for claims expire.
• Accounting documents: for the period required by accounting and tax law.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability (where we process it on the basis of consent or a contract), and to withdraw consent at any time.

Right to object. You can object at any time to the processing of your data for direct marketing. We then stop, with no conditions. Just reply "no" to our message or write to piotr@leadlinksolutions.eu.

You can also lodge a complaint with a supervisory authority: in Bulgaria the Commission for Personal Data Protection (cpdp.bg), in Poland the President of the Personal Data Protection Office (uodo.gov.pl), and in general the authority in the country where you live or work.

8. Other information

Providing data is voluntary; without it we cannot answer a message or enter into a contract. We choose companies on the basis of public information about them. We do not make decisions about people based solely on automated processing that would have legal effects. The date at the top of this page shows when this policy last changed.