Privacy policy
What happens to your personal data when you browse the site, book a consultation, write to me or donate: what is collected, why, who else receives it and what rights you have.
Last updated:
Contents
In short
- The site uses no cookies. Visitor statistics are anonymous and do not track you.
- There are no forms on the site itself. You write to me by email, phone or message, and booking and payment happen with external providers.
- External content (the booking calendar, the videos) loads only after you act.
- Consultation documents and recordings are not kept: they are deleted once the task is done. Accounting records are kept for 10 years, as the law requires.
- I do not sell personal data or use it for automated decisions or profiling.
Who is responsible for your data
This is the personal website of Marina Muchakova. The consultations you book through it are provided and invoiced by Vesta Consult. The controller of the personal data collected through this site is therefore Tax Expert EOOD (Vesta Consult), company ID (EIK) 206059468, address: Office A-1, 1st floor, 8 Hubcha St., Krasno Selo, Sofia, Bulgaria.
For anything about your personal data, write to office@vesta-bg.eu or call +359 887 460 907.
When you browse the site
Hosting. The site is hosted on GitHub Pages (GitHub). On every visit GitHub records your IP address in server logs for security purposes. I have no access to these logs. Legal basis: the legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR).
Fonts and images load from the site itself, with no requests to Google or other providers.
Browser settings. If you choose the light or dark theme, your choice is stored in your browser (localStorage, key mm-theme). This entry contains no personal data, is never sent to me, and you can delete it in your browser settings.
Visitor statistics. I use Plausible Analytics (Plausible Insights OÜ, Estonia), with servers in the EU. Plausible uses no cookies and does not store IP addresses. An identifier is calculated from the IP address and the browser; it changes every day and cannot be used to recognise you. I only see aggregated data: visits to each page, where visitors come from (a website or a search engine), country, device type and browser, clicks to external websites, downloads and the choice of consultation format. Legal basis: the legitimate interest in knowing which pages are useful (Art. 6(1)(f) GDPR).
Advertising. The site uses no advertising or social media “pixels”.
Social networks. The Facebook, LinkedIn, YouTube, TikTok and X icons are plain links. Nothing loads from these networks until you open the link.
When you book a consultation
Calendar. Booking runs on Cal.com. The calendar loads only after you choose a meeting format. You enter the details the form asks for (name, email and, if you like, a description of your question). Cal.com processes them on my behalf and sends them to me. Inside the calendar, Cal.com may use cookies and similar technologies under its own policy.
Payment. Payment is processed by Stripe and goes to Vesta Consult’s account. Your card details are entered with Stripe and never reach me. I only receive the payment details: amount, date and email. If you ask for an invoice, Vesta Consult issues it using the details you send to office@vesta-bg.eu.
The meeting takes place on Google Meet or, if we have arranged it, at the office. I use the information and documents you share only for the consultation and delete them once the task is done: for example, after I send you the finished document or after we fill in your tax return.
Recording. I record the meeting only if you ask in advance. The recording is kept on Google Drive until you download it and is deleted as soon as you confirm. If you do not confirm, I delete it after one week. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Legal bases: the consultation contract (Art. 6(1)(b) GDPR) and legal obligations under accounting and tax law (Art. 6(1)(c)).
When you write or call
The official channel for correspondence is the email address office@vesta-bg.eu. Correspondence there is handled by Vesta Consult, and Vesta Consult’s privacy policy (opens in a new tab) also applies to it.
When you email me, write on Viber, WhatsApp or Telegram, or call me, I process the data you send yourself (name, contact details, the content of the message) in order to reply. Legal basis: steps taken at your request before entering into a contract, or the legitimate interest in answering your enquiry (Art. 6(1)(b) and (f) GDPR).
The messaging apps are provided by their own companies and process data under their own policies.
When you donate
Donations go through Stripe (by card) or Revolut. They process the payment entirely. I receive the details the provider shows (a name or email and the amount) and use them only to record the donation. Legal basis: carrying out the donation and legal obligations under accounting law (Art. 6(1)(b) and (c) GDPR).
Videos
The videos are on YouTube (Google). The player loads from youtube-nocookie.com only after you press “Play”. From then on, YouTube may store information in your browser and processes your IP address under Google’s privacy policy.
Who else receives data
- GitHub: hosting the site;
- Plausible: anonymous visitor statistics (servers in the EU);
- Cal.com: booking consultations;
- Stripe: card payments and donations;
- Revolut: donations via Revolut;
- Google: meetings on Google Meet, recordings on Google Drive (only if you ask for one) and videos on YouTube (once you play them);
- Viber, WhatsApp, Telegram: only if you write to me there;
- public authorities (e.g. the National Revenue Agency), only where the law requires it.
Transfers outside the EU
Some of the providers (GitHub, Cal.com, Stripe, Google) are in the United States or transfer data there. This happens under the safeguards of Chapter V of the GDPR: the European Commission’s adequacy decision under the EU–US Data Privacy Framework, or standard contractual clauses.
How long I keep data
- Booking and payment (name, email, date, amount, invoice details): entered in Vesta Consult’s accounts and kept for 10 years, the legal period for accounting records.
- Documents and statements for the consultation: deleted as soon as the task is done.
- Meeting recording: until you confirm you have downloaded it, and for one week at most.
- Correspondence: the site stores no correspondence. Emails to office@vesta-bg.eu are kept under Vesta Consult’s policy.
- Server logs: under GitHub’s policy.
Your rights
You have the right:
- to access your data and get a copy of it (Art. 15 GDPR);
- to have inaccurate data corrected (Art. 16);
- to have your data erased (Art. 17), unless the law requires me to keep it;
- to restrict processing (Art. 18);
- to receive your data in a structured, machine-readable format (Art. 20);
- to object to processing based on legitimate interest (Art. 21).
Write to office@vesta-bg.eu. I will reply without undue delay and within one month at the latest (Art. 12(3) GDPR).
Right to complain
If you believe your data is processed unlawfully, you can complain to the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg (opens in a new tab), or to the data protection authority in the EU country where you live or work.
Changes to this policy
If I change how data is processed (for example, by adding a new provider), I will update this page and its last-updated date.