Privacy and GDPR
BBS EDB Ltd · Version 2026-10-11.2
Controller: BBS EDB Ltd, EIK/UIC 204840908, VAT BG204840908, 11 Blvd Cherni Vrah, Sofia 1421, Bulgaria – help@repanow.com. We process identity, contacts, company and equipment details, requests, messages, reports, consents and payment references to operate accounts and contracts (GDPR Article 6(1)(b)), comply with tax and legal obligations (6(1)(c)), and proportionately protect the service and handle disputes (6(1)(f)). Optional marketing requires separate, revocable consent (6(1)(a)). Data necessary for service is mandatory; without it the service may be unavailable.
Data is accessible to authorised staff, involved technicians and necessary hosting, email and payment providers within their respective roles. Stripe handles complete card data: REPANOW does not retain full card numbers or security codes. Chats and reports form service documentation. Do not submit passwords, sensitive data or unnecessary information. System-proposed technician matching can be reviewed by a person and is not an automated legal decision.
Providers and international transfers. The table on this page identifies Cloudflare (Workers, D1 and R2) for hosting, database and documents, Microsoft 365, GoDaddy and Stripe for payments. Providers process only data necessary for their functions under their respective roles. Transfers outside the EEA take place on the basis of EU Standard Contractual Clauses (Decision 2021/914) or other safeguards under GDPR Chapter V, including applicable adequacy decisions and necessary supplementary measures. The linked official documents describe safeguards and subprocessors. Request relevant details and copies of safeguards at help@repanow.com.
We retain data to operate accounts and jobs and, after closure, to meet tax duties, handle complaints and protect rights within applicable periods. Unnecessary data is deleted or anonymised. Transfers outside the EEA require GDPR safeguards; provider, destination and safeguard details may be requested at help@repanow.com. You may request access, correction, erasure, restriction, portability or objection and withdraw consent without affecting prior lawful processing. You may complain to the competent supervisory authority, including where you reside. Requests are normally handled within one month, subject to permitted extensions.
Providers, destinations and safeguards
| Provider | Service | Countries and transfers | Safeguards and documentation |
|---|---|---|---|
| Cloudflare, Inc. (Workers, D1, R2) | Application hosting, database, document and image storage, protection against malicious traffic. | Database and document storage under European Union jurisdiction (data stored in the EU); Cloudflare global network for site delivery and protection against malicious traffic, including the United States. | Cloudflare’s DPA provides EU Standard Contractual Clauses (SCCs, Decision 2021/914) for restricted transfers and applicable additional safeguards. |
| Microsoft — Microsoft 365 / Exchange Online | Service emails, invitations, password recovery and support correspondence. Mailbox managed through GoDaddy. | Microsoft 365 infrastructure in the EU and its international network; possible transfers or access from the United States and Microsoft subprocessor locations. | Microsoft’s DPA includes SCCs for in-scope services and other applicable transfer mechanisms. |
| GoDaddy | Domain and Microsoft 365 mailbox contract management; business account details and related service support. | United States and operational or subprocessor locations listed in GoDaddy’s privacy policy. | Contractual and privacy-policy transfer mechanisms apply. |
| Stripe | Payments, fraud prevention and financial obligations when checkout is used. REPANOW stores references and amounts, not full card details. | Ireland/EEA for European services; possible transfers to the United States and countries of Stripe’s listed subprocessors. | Stripe’s Data Transfers Addendum provides EU SCCs and other applicable mechanisms. The Stripe contracting entity and role depend on the service and agreement. |