Privacy Policy
Last updated: [date]
Who We Are
This Privacy Policy explains how TBB Healthcare Solutions Ltd. / „ТББ Хелткеър Солюшънс“ ЕООД (“TBB Healthcare Solutions”, “we”, “us”, “our”) collects, uses and protects personal data through:
Data Controller:
TBB Healthcare Solutions Ltd.
UIC / Company Registration No.: [UIC]
Registered office: [address]
E-mail: info@tbbhealthcare.com
Intended Audience
This website is primarily intended for professional and B2B users, including medical device manufacturers, pharmaceutical companies, distributors, hospitals, healthcare organisations, healthcare suppliers and other industry participants.
The website is not intended to provide medical services to patients or to collect patient medical information.
Please do not submit health information, medical records or other special-category personal data through the website unless this has been specifically agreed with us through an appropriate secure channel.
Personal Data We May Collect
When you contact us, we may process:
- your name;
- company;
- position;
- e-mail address;
- telephone number;
- the contents of your enquiry;
- subsequent correspondence with you.
Our contact form may contain the following fields:
Name · Company · Position · E-mail · Telephone · Message
Depending on the website configuration, we may also process technical information such as IP address, browser, device, operating system, visit date and time, pages viewed and security logs.
How We Use Personal Data
We may use personal data to:
- respond to enquiries;
- discuss potential business cooperation;
- prepare proposals or quotations;
- take steps prior to entering into a contract;
- conduct follow-up business communications;
- manage current or potential business relationships;
- operate and secure the website;
- comply with legal obligations;
- establish, exercise or defend legal claims.
Legal Bases
Depending on the circumstances, processing may be based on:
Pre-contractual steps requested by you.
Legitimate interests, including responding to B2B enquiries, managing business relationships, developing our business and ensuring website and information security.
Legal obligations applicable to TBB Healthcare Solutions.
Consent, where required, including for certain optional analytics or marketing technologies.
Contact Enquiries
Information submitted through the website may be delivered to our corporate e-mail account and stored within the website administration system.
Access will be limited to persons who reasonably require it to respond to the enquiry or maintain the relevant systems.
Confidential Business Information
TBB Healthcare Solutions treats business enquiries with an appropriate level of confidentiality.
However, please do not use the public website form to provide trade secrets, highly confidential commercial documentation, confidential pricing, patient information or other highly sensitive information unless a secure method has first been agreed with us.
Submission of information through the website does not by itself constitute a non-disclosure agreement (NDA) or create a confidential, fiduciary, agency or advisory relationship.
Where confidential or proprietary information needs to be exchanged, the parties may enter into a separate confidentiality agreement.
Recipients and Service Providers
Where necessary, personal data may be accessible to:
- website hosting providers;
- website developers and technical administrators;
- corporate e-mail providers;
- IT and cybersecurity service providers;
- professional advisers;
- public authorities where required by law.
Access will be limited to what is necessary for the relevant service or legal requirement.
We do not sell personal data.
International Transfers
Some technology providers may process information outside the European Economic Area.
Where applicable, appropriate safeguards will be used in accordance with European data-protection requirements, including adequacy decisions or Standard Contractual Clauses.
Retention
We retain personal data only for as long as reasonably necessary.
As a general rule:
- enquiries that do not result in a business relationship may be retained for up to 24 months after the last substantive communication;
- contractual information may be retained for the duration of the relationship and thereafter as required for legal, accounting or claims purposes;
- technical logs may be retained according to reasonable security and operational requirements.
Longer retention may apply where required by law or necessary to protect legal interests.
Cookies and Analytics
The website may use strictly necessary cookies required for security and proper operation.
We may in the future use tools such as Google Analytics or other analytics services.
Optional analytics or marketing technologies will be used only in accordance with applicable requirements and, where required, after the visitor has made the relevant consent choice.
Once the website's final technology stack is confirmed, a separate or supplementary Cookie Policy should identify the individual cookies, providers, purposes and retention periods.
LinkedIn and Third-Party Services
The website may contain links to our LinkedIn presence and other third-party websites.
Those services operate under their own privacy policies.
If embedded LinkedIn content or other third-party integrations are introduced, this Privacy Policy and the website's consent settings may be updated accordingly.
Information Security
We use reasonable technical and organisational measures designed to protect personal and business information from unauthorised access, loss, disclosure, alteration or destruction.
No internet-based service can, however, guarantee absolute security.
Your Rights
Subject to applicable law, you may have rights to:
- access your personal data;
- correct inaccurate information;
- request deletion;
- restrict processing;
- receive or transfer certain data;
- object to certain processing;
- withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the relevant supervisory authority.
In Bulgaria:
Commission for Personal Data Protection (CPDP)
Requests may be sent to:
Changes to This Policy
We may update this Privacy Policy to reflect changes to our activities, website, technologies or applicable law.
The current version will always be published on this page.