Our Commitment

As a firm specialising in accounting, HR and financial services, we process sensitive business and personal data every day. GDPR compliance is not merely an obligation for us — it is a core principle of how we work.

We apply the principle of Privacy by Design (Art. 25 GDPR) — data protection is built into our processes from the outset, not added as an afterthought.

How We Apply GDPR

→ We operate with a formal Data Processing Agreement (DPA) with all clients — Art. 28 GDPR

→ Data is processed solely for the purpose of providing our services

→ We never share data with third parties without explicit consent

→ We apply technical and organisational security measures — encryption, bcrypt, brute force protection

→ Documents in the client portal are deleted 24 hours after download

→ Data is retained only for the legally required periods

→ Client data isolation — each client can only access their own data

Your Rights Under GDPR

As a data subject, you have the following rights:

→ Right of access — you may request a copy of the personal data we process about you

→ Right to rectification — you may request correction of inaccurate data

→ Right to erasure — "right to be forgotten" where a legal basis exists

→ Right to restriction of processing — you may request restriction under certain circumstances

→ Right to data portability — you may receive your data in a structured, machine-readable format

→ Right to object — you may object to the processing of your personal data

→ Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

Data Processing Agreement (DPA)

All our clients receive a Data Processing Agreement in accordance with Article 28 of the GDPR. The agreement governs the purposes, means and conditions of personal data processing within the scope of our cooperation.

If you wish to receive a copy of the DPA or have any questions, please contact us.

How to Exercise Your Rights

Submit a written request by email to: office@kdkcorrective.com

We will respond within 30 days of receiving your request.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP):

→ Address: 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, Bulgaria

→ Phone: +359 2 91-53-519

→ Email: kzld@cpdp.bg

→ Website: www.cpdp.bg

Privacy Policy and Cookie Policy

For full information on the processing of personal data, please see our Privacy Policy and Cookie Policy.