You have questions? +359 882 288 975 Find Jobs

Privacy Policy

Legal NoticeData protection information when using our website

We treat the protection of your personal data with great responsibility. The collection, processing and use of your personal data are performed in accordance with the legal provisions, the applicable data protection laws, and in particular with the General Data Protection Regulation of the European Union. The following statement will familiarize you with the manner in which we guarantee the protection of your personal data, with the types of data being collected as well as with the purposes of such collection.
Personal data comprise information that refers to an identified or identifiable person. This primarily includes information that allows making inferences about your identity, such as your name, phone number, address or email address. The statistical data that we collect, for instance, when you visit our website, cannot be related to your identity and therefore do not fit into the concept of personal information.
Data processing is the responsibility of

Hypoport Sofia EOOD
ul. Lyuba Velichkova 7,
1407 Sofia

You can find our full contact details here
You can contact Hypoport AG’s Data Protection Officer at: datenschutz (at)

Data processing on the website

Information purposes when visiting the website

Every time you use our website, we collect the access data that your browser automatically transmits to allow your visit to the website. Access data more specifically include:

  • IP address of the requesting device;
  • date and time of the request;
  • address of the website being accessed as well as that of the requesting website;
  • information about the browser and operating system being used;
  • online identifiers (e.g., device identifiers, session IDs)

The information processing of such access data is required to allow a visit to the website and to guarantee the continuous functionality and security of our systems. The legal basis for such data processing is set forth in Article 6 (1) (1) (b) of the General Data Protection Regulation (GDPR).

In addition, for the aforementioned purposes, access data is temporarily stored in internal logs to generate statistical information about the use of our website, to further develop our website in view of the habits of use by our visitors (e.g., increasing the relative share of mobile devices used for log into the pages) and in general for the administration of our website. The legal basis for this data processing is set forth in Article 6 (1) (f) of GDRP, taking into consideration our justified interest in the appropriate optimization of our website

The information stored in the log files does not allow us to draw direct conclusions about you in person – in particular, after 7 days, we only keep the IP addresses in abridged, anonymous form. Log files are stored for 30 days and archived after subsequent anonymization.

Cookies and web analytics

Some of our services require us to use cookies. A cookie is a small text file that is stored on your device through the browser. Cookies are not used to run programs or upload viruses to your computer.

In fact, the main purpose of our own cookies is to provide a customized offer and to save a maximum amount of your time when you use our services.

More specifically, we use our own cookies:

  • for load distribution;
  • to record that you have been shown information placed on our website so as to prevent its reappearance the next time you visit the website;
  • to temporarily store records that you have made on our website in case you reload the page.

In such a way, we want to provide you with the opportunity to use our website in a more convenient and personalized manner. These services are based on our legitimate interests described above and as the legal grounds thereof is set forth in Article 6 (1) (f) of GDRP

You may prevent the saving of cookies by refusing to accept cookies through this website in your browser settings. Failure to accept cookies may, in individual cases, result in significant functional restrictions on our website

We also use cookies and related technologies (such as web beacons) from partners for the purposes of analytics and marketing. The legal basis for the processing of the data described in the following sections is Article 6 (1) (f) of GDRP  and is based on our legitimate interest in continuous optimization of our website through a design that is customized subject to the particular needs.

Google services

Our Website uses various services from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Data generated within this context may be transmitted by Google to a server in the USA for evaluation and may be stored there. In cases where personal data are transferred to the United States, Google complies with the EU-U.S. Privacy Shield

If you use a Google Account, depending on the settings stored in the latter, Google may relate the data collected as a part of the Services, in particular your browser history for web visits and applications used with your Google Account, to information from your Google Account in order to personalize ads. If you do not want this identification through your Google Account, you must sign out of Google before visiting our contact page

You may find further information in that regard in Google’s privacy policy.

Google Analytics – systematic computational analysis of data or statistical arrays

Google Analytics uses cookies and similar technologies in order to analyze and enhance our website based on your user behaviour. Within this process however, your IP address will be abridged before the review of statistical data about usage so as to prevent the drawing of any conclusions about your identity. For that purpose, Google Analytics has been expanded on our website with the code “anonymizeIP” to ensure anonymous coverage of IP addresses.

Google will process the information obtained via cookies in order to analyze website usage, to draw up activity reports regarding website visits for the website operator, and to provide other services related to the use of the website and the Internet.

You may configure your browser to reject cookies or to the recording of data generated  via cookies and related to the use of our websites by changing the cookie settings in the Google Privacy Statement. In addition, you may also prevent Google from processing such data by downloading and installing the browser add-on provided by Google (the latter does not function on mobile devices).

Links to other websites and online offers

Our website may refer the users to websites and online offers of third parties who are not associated with us. If you click on these links, we certainly no longer have any influence on what data are collected by the respective provider and what data are recorded by such provider. You may find detailed information on the collection and use of data in the privacy statement of the respective provider. As the collection and processing of data from third parties falls beyond our control, we do not accept any responsibility in that regard.

Storage period

Once the application process is completed, your data will be stored for a period of 6 months in the event of rejection. After the deadline, the data will be anonymized to be available for later statistical evaluation. This does not apply if legal provisions prevent deletion or if further storage is required, e.g. in a procedure under the General Equal Treatment Act [Allgemeines Gleichbehandlungsgesetz – AGG] for the purpose of providing evidence, or if you have provided your consent for a longer storage period.

In the event of successful application, the information provided on your part may be further processed by us for employment purposes.

Rights of data subjects

Your rights

You are entitled to request information about the processing of your personal data on our part at any time. We will explain the data processing to you for the sake of your awareness and will further provide you with an overview of the data stored about you.

If your data stored by us are incorrect or outdated, you are entitled to request the correction of such data.

You may also request the deletion of your data. If deletion is not possible due to other legal provisions, the data will be blocked so as to accessible for such legal purpose only.

Moreover, you may also restrict the processing of your data, e.g. if you consider that the data we have stored are incorrect. You are also entitled to data portability, which means that upon request we can send you a digital copy of the personal data provided on your part.

In order to exercise your rights described above, you may contact us at any time by using the aforementioned contact details. This also applies if you wish to receive copies of guarantees proving an adequate level of data protection.

In addition, you are entitled to object to the processing of data pursuant to Article 6 (1) (e) or (f) of GDRP. Ultimately, you are entitled to lodge a complaint with the data protection supervisory authority in charge of our company. You may exercise this right through a supervisory authority in the Member State of residence, subject to your place of work or the place of the alleged infringement. The responsible supervisory authority in Berlin is: the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstrasse. 219, 10969 Berlin.

Right of refusal and objection

Pursuant to Article 7 (2) of GDRP , you are entitled to withdraw your consent that you have provided to us at any time. Such an action would result in termination of any data processing that is carried out on the grounds of such consent. The consent withdrawal does not affect the lawfulness of the processing based on such consent prior to the withdrawal thereof.

Insofar we process your data on the grounds of legitimate interests in accordance with Article 6 (1) (f) of GDRP, you are entitled to object to the processing of your data pursuant to Article 21 of GDRP , provided that there are reasons to do so, arising from your particular situation, or if the objection refers to direct mail advertising. In the latter case, you have the right to object, which is of a general nature, and which we will implement as you do not need to specify any reasons in that regard.

If you wish to exercise your right of withdrawal or objection, it is sufficient to address an informal message to the contact details specified above.

Data security

We maintain and update technical measures in order to ensure the security of your data, and more specifically, to ensure the protection of your personal data from the risks ensuing from data transmission as well as from any third parties becoming aware thereof. These measures are in any case adapted to the current state of the art. To protect the personal data that you have provided through our website, we use Transport Layer Security (TLS) (the standard protocol for ensuring secure web communications) that encrypts the information entered on your part.

Changes to this Privacy Policy

From time to time we update this privacy statement, for instance if we are adapting our website or if legal or formal requirements change.


If you have any questions, complaints, suggestions, or if you are uncertain about this privacy statement, or if you would like to obtain information about the use or disclosure of your personal data, as well as if you would like to correct, supplement or delete your personal data, or if you would like to withdraw your consent to the processing of your personal data, please email us at: