Privacy & Cookie Policy

Information you choose to provide

If you email or telephone us, we receive the contact details and information you provide. Please send only what is necessary for your business enquiry. This website has no user profiles, registration, file uploads, patient records, biological-sample submission or online payment facility.

The contact forms currently have no connected submission or email-delivery service. Entered values remain in the current page's memory and are not sent by the form. Use the email address below to contact us. Brevo is planned for future enquiry delivery and is not currently connected; this notice will be updated before that processing starts.

Technical information

Loading the website sends your IP address and ordinary request information, such as the requested URL, browser details and request time, to the hosting infrastructure. Hosting and security systems can process technical logs to deliver pages, diagnose failures and prevent abuse. This happens even without analytics or a submitted form.

This website does not receive or analyse pathology slides, biological materials, DNA data or patient records. Medical illustrations describe services; they are not an upload or diagnostic service. Please do not include patient information or other sensitive personal data in a business enquiry.

Delivering and securing the website and handling business correspondence rely on legitimate interests under Article 6(1)(f) GDPR: providing company information, answering enquiries, troubleshooting and protecting systems. Where an individual requests steps before entering a contract with that individual, Article 6(1)(b) applies. Applicable legal obligations rely on Article 6(1)(c).

Providing enquiry details is voluntary, but we may be unable to reply without a contact address and sufficient context. Browsing does not subscribe you to marketing. The website has no active newsletter, advertising tracker or automated decision-making producing legal or similarly significant effects on you.

The website uses Vercel hosting and is technically maintained by TerraPlane LTD, the website source-code owner and licensor. DPS determines the purposes of website and enquiry processing; TerraPlane acts as its processor for maintenance and hosting on DPS's documented instructions under their data-processing agreement, not for independent use of visitor data. Authorised hosting and maintenance personnel can process the request and security data needed to operate it. Email transmission and mailbox providers also process correspondence. Competent authorities may receive information where legally required.

The website has no feature that sells enquiry data, sends it to research partners or publishes it. External websites have their own privacy notices. Visiting an external link subjects that visit to the external provider's practices.

The website configuration includes protective HTTP headers, locally hosted fonts and images, and separation of private configuration from public assets. Access to hosting and email must be limited to authorised people. No website or email transmission can be guaranteed completely secure.

Avoid confidential or sensitive information in ordinary email. Report suspected compromised website communications using the contact below. This notice makes no statement about the security or processing arrangements of a separate platform.

Form values exist in the page's memory until cleared, reloaded or closed. An explicitly selected language is stored only for the browser tab's session, until that session ends or the browser's site data is cleared. The website has no separate database of visitor enquiries or diagnostic records.

Correspondence is retained while needed to answer and follow up on the matter, and longer only for a resulting business relationship, a legal duty or legal claims. Hosting and security log retention depends on the provider, service plan and incident requirements. Ask us for the retention information applicable to your data; we do not assert an unverified fixed retention period.

Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability. You may object to legitimate-interest processing on grounds relating to your particular situation. Where consent is the basis, you may withdraw it without affecting earlier lawful processing. These rights are not all unconditional.

Write to the contact below. We may request proportionate information to verify identity. We respond without undue delay, normally within one month. If GDPR permits an extension of up to two further months, we explain it within the first month. You may complain to a supervisory authority without contacting us first.

The application currently sets no analytics, advertising or authentication cookies. After you choose a language, first-party session storage named dps.language contains en or bg for that tab's session. It is not sent automatically with HTTP requests or used for advertising identification. You can clear it through your browser's site-data controls; browser session restoration may restore session data. No preference is saved merely by opening a page. An older persistent language value, if present, is removed. Language also remains available directly in /en and /bg URLs when browser storage is blocked.

No Google Analytics, Tag Manager, Meta Pixel or Vercel Web Analytics script is integrated. Google Search Console is planned for search reporting for this marketing host, using an HTML verification file or meta tag. That verification does not install visitor-tracking scripts or analytics cookies. No optional cookie-consent banner is currently used. Browser-storage rules also apply to local storage, not just cookies. Before introducing optional storage or tracking, we will review the legal basis, update this policy and obtain consent where required. Hosting-level security measures require a separate description if enabled.

Hosting and email providers may process request or correspondence data outside the European Economic Area. We do not claim that all processing takes place in Bulgaria or exclusively in the EU.

Where GDPR requires safeguards, transfers must use an applicable adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses, with supplementary measures where necessary. Contact us for the arrangements applicable to a provider and information about obtaining a copy of the safeguards.

We update this page when processing changes and show the review date above. A new delivery service or optional analytics requires review before activation.

A policy update is information, not consent. Continued browsing does not waive your rights or provide consent for optional tracking. Legally required notice or consent must be provided separately.

Controller: Digital Pathology Solutions OOD, UIC 208237964. Address: 24 Kakrinsko Hanche Street, Hadzhi Dimitar residential area, Poduyane District, Sofia 1510, Bulgaria. Telephone: +359 88 467 6668. For privacy questions or rights requests, email:

You may complain to Bulgaria's Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, kzld@cpdp.bg, https://cpdp.bg, or another competent supervisory authority under GDPR.

office@digitalpathologysolutions.com