Last updated: 30 August 2026
1. Controller and Contact Details
Controller: EuroVisa Group Ltd., a company registered in Bulgaria under UIC 208719074.
Registered office and management address: 1 Pop Bogomil Street, Floor 1, Office 5, Oborishte District, 1202 Sofia, Bulgaria.
Website: eurovisa-group.com
Privacy email: info@eurovisa-group.com
WhatsApp Business: +34 677 968 317
This policy explains how EuroVisa Group handles personal information received through direct email, WhatsApp, normal website operation and, if activated and accepted by the visitor, optional website analytics. The detailed online form is currently disabled, has no active delivery provider and does not transmit information.
2. Information We Receive
If you email or send a WhatsApp message, we receive the contact details, message, timestamps and any information you choose to include. The structured pre-assessment widget asks for nationality, current country of residence, main objective, European country of interest and a short case summary. Those answers are held only in the open panel and are cleared when you close it. At the final step, you may create a prefilled draft in WhatsApp or your email application. EuroVisa Group receives the answers only if you choose to send that draft.
Hosting or security providers may also create limited technical logs, such as IP address, request time, requested URL, browser or device information and security events, where necessary to deliver and protect the website. EuroVisa Group does not collect payment information through this website.
If you accept optional analytics, Google Analytics 4 may receive the page path and title, the referring site's origin without its path or query string, limited and validated campaign parameters, coarse interaction events, browser and device information, language, approximate location derived from technical information, and first-party analytics identifiers. EuroVisa Group's implementation is designed not to send names, email addresses, telephone numbers, form answers, WhatsApp draft or message content, passport details, free-text case information or other user-provided identifiers to Google Analytics.
3. Purposes and Legal Bases
- Applicant enquiries: to respond to a pre-assessment or service enquiry and take steps requested before a possible agreement — Article 6(1)(b) GDPR.
- Professional enquiries: to respond to lawyers, employers and prospective professional partners and manage relevant professional communications — Article 6(1)(f), our legitimate interest in managing business communications and relationships. Article 6(1)(b) applies instead only where the individual is personally requesting steps before entering their own possible agreement with EuroVisa Group.
- Website delivery and security: to maintain availability, prevent abuse and investigate security incidents — Article 6(1)(f), our legitimate interest in operating a secure website.
- Optional website analytics: to understand aggregate visits, limited traffic sources and selected website interactions so that the website can be evaluated and improved — Article 6(1)(a), your consent. Where applicable electronic-communications rules require permission to store or access information on your device, the same affirmative choice is relied upon.
- Legal duties: to comply with a specific legal obligation where one applies — Article 6(1)(c).
- Legal claims: to establish, exercise or defend legal claims where necessary — Article 6(1)(f).
We do not use enquiry information for marketing unless you separately choose to receive it. Where marketing consent is used, the basis is Article 6(1)(a) and consent may be withdrawn at any time.
4. Recipients and Professional Referrals
EuroVisa Group does not sell, rent or trade personal information. Access is limited to authorised people who need it for the relevant purpose and to service providers supporting hosting, email, security or communications.
When you choose WhatsApp, WhatsApp handles the draft and message under its own privacy information. When you choose email, your email application and the relevant email infrastructure providers handle the draft and message under their own settings and privacy terms.
If you accept optional analytics, limited website-use information is disclosed to Google Analytics, a service supplied to EEA customers by Google Ireland Limited. Google processes Analytics customer data under its applicable service and data-protection terms. More information is available in Google's explanation of information from sites that use its services and the Google Privacy Policy.
Information is disclosed to an independent lawyer or another appropriately qualified professional only where the recipient and purpose have been identified, the disclosure is necessary for the service you requested or you have separately authorised it, and only the information required for that scope is shared. The selected professional may act as an independent controller and should provide their own privacy information. Information may also be disclosed to courts, authorities or advisers where applicable law requires or permits it.
5. Cookies and Website Technology
The website uses a first-party preference cookie named evg_cookie_consent_v1 only after you choose whether to allow analytics. It stores either “granted” or “denied” for up to six months so that the website can respect and remember your choice. It does not contain an account identifier or any pre-assessment answer.
Google Analytics 4 is optional and is blocked unless the service has been activated by EuroVisa Group with a valid measurement identifier and you then select “Accept analytics” or enable Analytics in “Cookie settings”. Before consent, the Google tag is not loaded and no consent-status ping or analytics measurement is sent to Google. Rejecting analytics leaves the site's necessary functions available.
After consent, Google Analytics may set first-party cookies such as _ga and a property-specific _ga_<identifier> cookie. This implementation limits those cookies to no more than six months. Advertising storage, advertising user data and advertising personalisation remain denied. Google signals, advertising-personalisation signals, automatic user-provided data collection and enhanced measurement must remain disabled in the Analytics property.
EuroVisa Group records a page view and a small allowlist of interaction events, such as opening the structured pre-assessment, continuing to WhatsApp, or selecting an email or WhatsApp contact channel. These events do not include the visitor's answers or message content. Full query strings are not sent: only validated utm_source, utm_medium and utm_campaign values may be included for traffic-source reporting.
You can change or withdraw your choice at any time using “Cookie settings” in the footer. Withdrawing consent prevents further Analytics loading on later page views and causes the website to attempt to delete its first-party _ga cookies. Withdrawal does not affect processing that was lawful before withdrawal.
Entering answers in the structured widget does not send them to EuroVisa Group, WhatsApp or an email provider. Selecting “Continue on WhatsApp” passes the answers to WhatsApp in a prefilled draft. Selecting “Send by Email” passes them to your email application in a prefilled draft. In either case, the draft is not sent to EuroVisa Group until you choose to send it.
The detailed online form remains disabled and no third-party form handler is active. Any material change to Analytics, introduction of a form provider or addition of another tracking technology requires this policy and the consent controls to be reviewed before activation.
6. International Data Transfers
A person contacting EuroVisa Group from outside the European Economic Area does not by itself mean that EuroVisa Group transfers personal information outside the EEA. When you choose WhatsApp, however, WhatsApp may process the draft or message internationally under its own privacy information.
If you accept optional analytics, Google may process Analytics information in countries outside the EEA. Google describes the transfer mechanisms it uses, including applicable adequacy frameworks and Standard Contractual Clauses, in its data-transfer framework information. EuroVisa Group keeps the Analytics account settings, applicable Google terms and transfer information under review.
EuroVisa Group will not disclose an enquiry to a professional outside the EEA without first identifying the recipient, destination and the applicable transfer basis or safeguard. Where a transfer outside the EEA requires protection under Chapter V GDPR, it will proceed only under an applicable adequacy decision or appropriate safeguard. Information about the relevant safeguard and how to obtain a copy will be provided on request.
7. Retention
If an applicant enquiry does not lead to an engagement, EuroVisa Group normally retains the correspondence for up to six months after the last substantive contact and then deletes or anonymises it, unless a longer period is necessary for a legal obligation or legal claim. Professional enquiries that do not lead to a relationship are normally retained for up to twelve months after the last substantive contact.
If an engagement begins, the relevant agreement or case privacy information will explain the applicable retention period. Technical and security logs, where generated, are retained according to the provider settings and only for as long as reasonably necessary for delivery, security and incident investigation. Records required by law or genuinely necessary for a claim may be kept for the applicable statutory or limitation period.
The analytics-consent preference is retained for up to six months. The GA4 property is configured to the shortest available user-level and event-level data-retention period of two months. Google's retention control does not necessarily remove previously generated aggregate reporting, and Google may retain information for the periods described in its own applicable terms and policies.
8. Your Data-Protection Rights
Depending on the processing and its legal basis, you may request access, rectification, erasure or restriction; object to processing based on legitimate interests; and receive data portability where processing is automated and based on consent or contract. Where consent is used, you may withdraw it at any time without affecting processing that was lawful before withdrawal. Analytics consent can be withdrawn immediately through “Cookie settings” in the footer. These rights are not absolute and applicable legal exceptions may apply.
Send requests to info@eurovisa-group.com. We normally respond within one month. Where a request is complex, that period may be extended by up to two further months; if so, we will explain the extension.
9. Complaints
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria. Current submission requirements are available on the official CPDP website. You may also complain to the supervisory authority in the EU Member State of your habitual residence, place of work or the alleged infringement.
10. Sensitive Information and Security
Do not send passport or identity-document numbers or copies, residence-permit scans, financial records, health or biometric information, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, sex life or sexual orientation, or criminal-conviction or offence information through the website, email or WhatsApp at the pre-assessment stage.
If such information later becomes strictly necessary, EuroVisa Group will explain the purpose, legal basis, secure method and relevant recipient before requesting it. If unsolicited sensitive information is received, access will be restricted and it will not be used or forwarded unless an applicable legal basis and condition have been documented; otherwise it will be deleted as soon as reasonably practicable.
EuroVisa Group uses reasonable technical and organisational measures to protect personal information. No electronic transmission or storage method can be guaranteed as absolutely secure.
11. Voluntary Information and Automated Decisions
Providing enquiry information is voluntary, but without enough relevant information EuroVisa Group may be unable to respond or consider whether coordination is possible. EuroVisa Group does not use the website enquiry process for solely automated decision-making or profiling.
12. Changes to This Policy
This privacy policy may be updated from time to time. Updated versions will be published on this page with a revised “Last updated” date. Please review the current version before sending information.
13. Contact
For questions, rights requests or concerns about personal-information handling, contact info@eurovisa-group.com.