Binary Rise Privacy Policy & Cookie Compliance Document

General Cookie Information & Usage Framework

The Binary Rise website utilizes cookies and similar tracking technologies to guarantee technical functionality, analyze traffic metrics, and improve prospective client experience.

Under EU ePrivacy and GDPR regulations, cookies are classified and deployed based on strict necessity and user consent:

Essential / Strictly Necessary Cookies: Required for fundamental platform operation, secure form routing, and load balancing. These cookies do not require prior user consent under Article 5(3) of the ePrivacy Directive as they are strictly necessary for providing the online service.
Analytical & Performance Cookies: Gather aggregate, pseudonymized data regarding site interactions, session durations, and traffic sources to measure website efficiency and content performance. Deployed strictly upon explicit opt-in consent via the site cookie banner.
Functional & Preference Cookies: Allow the site to remember user-selected options (e.g., regional preferences or session inquiry states) for a seamless browsing session. Deployed upon user consent.

Cookie Category	Purpose	Legal Basis (GDPR)	Typical Lifespan
Essential / Technical	Session maintenance, secure inquiry processing, anti-spam validation	Legitimate Interest (Art. 6(1)(f))	Session / Up to 30 days
Analytical / Performance	Anonymized user interaction metrics, page load performance	Consent (Art. 6(1)(a))	Up to 13 months
Functional / Preference	Storing preference choices, locale parameters, responsive UI states	Consent (Art. 6(1)(a))	Up to 12 months

Visitors may update their cookie preferences at any time by accessing the Cookie Settings link in the footer of the Binary Rise website or by clearing their browser cache.

What Data We Collect

Binary Rise collects personal and technical data strictly necessary to fulfill business inquiry requests, provide custom software development proposals, and maintain portal security.

A. Voluntarily Provided Data (Contact & Discovery Forms)

When prospective clients interact with our contact forms, request technical discovery sessions, or send direct inquiries to contact@binary-rise.com, we collect:

Full Name of the contacting party
Corporate Email Address (e.g., user@company.com)
Company / Organization Name
Contact Phone Number (optional)
Project Specifications & Discovery Content (details submitted regarding project scope, squad requirements, or advisory needs)

B. Automatically Collected Technical Usage Data

When navigating the website, technical log data is automatically generated:

Internet Protocol (IP) Address (anonymized/truncated where required by regional privacy protocols)
Browser Metadata (browser type, version, language, and operating system)
Device Characteristics (device category, screen resolution)
Access Metrics (timestamps, referral URLs, page paths, and session duration)

Why We Collect It & Data Access Framework

Legal Bases for Data Processing (GDPR Art. 6)

Pre-Contractual & Contractual Steps (Art. 6(1)(b)): Processing inquiries to prepare Statements of Work (SOWs), evaluate technical squad requirements, and initiate commercial engagements.
Legitimate Interest (Art. 6(1)(f)): Protecting network security, evaluating business inquiries, maintaining operational reliability, and managing enterprise client relationships.
Consent (Art. 6(1)(a)): Deploying non-essential cookies and sending requested updates or proposal documentation.

Who Can Access Your Data (Internal & Sub-processors)

Data collected through Binary Rise is handled with strict confidentiality and enterprise-grade security protocols inherited from ClusterDesktop EOOD:

Internal Operations Team: Access is restricted strictly to authorized executive leadership and business discovery personnel, including Teo Parashkevov and Yuliana Parashkevova, for lead qualification and proposal drafting.
Third-Party Technical Sub-Processors: We utilize vetted third-party infrastructure providers (e.g., secure web hosting platforms, encrypted cloud backup services, and specialized CRM intake platforms). All sub-processors are bound by GDPR-compliant Data Processing Agreements (DPAs) under GDPR Art. 28.
Legal and Regulatory Authorities: Disclosures are made only if required by compulsory Bulgarian or EU legal statutes.
No Commercial Data Transfer: Binary Rise and ClusterDesktop EOOD strictly refrain from selling, renting, or trading personal data or business lead information to third parties for independent marketing purposes.

Data Retention Period

Personal data collected via the Binary Rise website is retained only as long as necessary to fulfill the initial inquiry purpose or satisfy statutory obligations.

Data Classification	Retention Period	Strategic & Legal Rationale
Pre-Contractual Discovery Leads	24 Months	Retained for ongoing commercial follow-up, SOW adjustments, and capacity planning.
Active Client & Contractual Records	5 to 10 Years	Mandatory compliance under Bulgarian financial, tax, and commercial legal obligations.
Technical Web Logs & Security Data	30 Days	Required to monitor infrastructure health, mitigate security threats, and prevent spam.
Analytical & Cookie Tracking Data	Up to 13 Months	Used for seasonal site analytics, UX refinement, and performance tracking.

Upon expiration of the applicable retention period, personal data is permanently erased or securely anonymized.

How to Request Data Deletion & Exercise GDPR Rights

Under Chapter III of the GDPR, visitors and clients whose personal data is processed by ClusterDesktop EOOD via Binary Rise possess the following rights:

Right of Access (Art. 15): Obtain confirmation as to whether your personal data is being processed and receive a copy of that data.
Right to Rectification (Art. 16): Request the correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten") (Art. 17): Request the complete deletion of your personal data when it is no longer required for the purpose for which it was collected.
Right to Restriction of Processing (Art. 18): Request temporary limitation of processing while a data dispute or request is being resolved.
Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21): Object to data processing grounded in legitimate interest or direct B2B marketing.

Step-by-Step Instructions to Request Data Deletion or Exercise Rights

Submit Written Notice: Send an email explicitly requesting data erasure, access, or modification to either of the following administrative endpoints: Primary Lead Contact: contact@binary-rise.com; Direct Data Controller Email: yp@mycd.email.
Identity Verification: To protect your personal information, our team will confirm your identity by cross-referencing the sender's email address with the original inquiry or contract records.
Execution & Response Timeline (SLA): Acknowledgment is delivered within 48 hours of receipt. Data erasure, access provision, or processing restriction will be completed within 30 calendar days at zero cost to the requester.

Supervisory Authority Oversight: If you believe your data privacy rights have been infringed, you retain the right to lodge a complaint with the Bulgarian supervisory authority:

Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Republic of Bulgaria. Website: www.cpdp.bg | Email: kzld@cpdp.bg