Black Rock Capital, operated by Kostantin Stambolov, is the data controller for personal data collected through this Site and in connection with professional engagements.
Contact: office@blackrockcapital.bg
BRC collects only the minimum data necessary to operate the Site and conduct its business. The categories of data collected are:
| Category | Data collected | Source |
|---|---|---|
| Enquiry data | Name, email address, company name, message content | Contact form, email, booking calendar |
| Usage data | Pages visited, time on site, browser type, device type, approximate location (country/city level), referral source | Google Analytics (anonymised) |
| Communication data | Email correspondence and call notes relevant to a prospective or active engagement | Direct communication |
BRC does not collect sensitive personal data, payment card data, or data from minors. BRC does not operate advertising campaigns, retargeting, or any form of behavioural marketing.
Personal data is used only for the following purposes:
BRC does not sell, rent, or share personal data with third parties for commercial purposes. BRC does not use personal data for automated decision-making, profiling, or commercial scoring. Limited use of AI-assisted tools for internal productivity (transcription, summarisation, drafting) is described in Section 6.
BRC processes personal data under the following legal bases:
This Site uses Google Analytics 4 to collect anonymised usage data. Google Analytics uses cookies and similar technologies to report aggregate statistics about how visitors interact with the Site — such as which pages are most visited and how people arrive at the Site.
BRC has configured Google Analytics with IP anonymisation enabled. This means that full IP addresses are not stored. The data collected is aggregated and does not identify individual visitors.
Google Analytics data is processed by Google LLC, which may transfer data to servers outside the European Economic Area. Google LLC participates in the EU-US Data Privacy Framework. For more information, see Google's Privacy Policy.
You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.
BRC uses AI-assisted tools to support internal work in connection with engagements:
These tools process data on behalf of BRC under data processing agreements. BRC selects providers that process data within the European Economic Area or under equivalent safeguards (such as Standard Contractual Clauses or the EU-US Data Privacy Framework), do not use input data to train their models, and provide encryption in transit and at rest.
BRC does not use AI for automated decision-making about clients, prospects, or visitors that produces legal or similarly significant effects on them. AI-assisted output supports human judgment — it does not replace it.
For a current list of AI tools used in connection with your engagement, contact office@blackrockcapital.bg.
The Site uses a limited number of cookies:
You can manage or disable cookies through your browser settings at any time. Disabling analytics cookies does not affect your ability to use the Site.
BRC retains personal data only for as long as necessary for the purpose for which it was collected:
BRC takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Communication is conducted via encrypted channels. Engagement documentation is stored securely with access limited to BRC's principal.
No method of transmission over the internet is entirely secure. While BRC takes appropriate precautions, it cannot guarantee the absolute security of data transmitted electronically.
Under GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, contact office@blackrockcapital.bg. BRC will respond within 30 days. If you are not satisfied with how BRC handles your request, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of Bulgaria, or with the supervisory authority in your country of residence.
The Site and BRC's engagement work integrate the following third-party services, each operating under their own privacy policies:
BRC has no control over the data practices of these third parties once you interact with their services directly.
BRC may update this Privacy Policy from time to time to reflect changes in practice or legal requirements. The effective date at the top of this page indicates when the Policy was last revised. Continued use of the Site following any update constitutes acknowledgement of the revised Policy.
For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, contact:
Kostantin Stambolov · Black Rock Capital
office@blackrockcapital.bg