Privacy Policy

Last updated: September 11, 2026

1. Introduction

TMP Grup EOOD ("we", "us" or "our"), operating as Arch-Pfoertner, respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we process your personal data when you visit our website and informs you about your privacy rights and how the law protects you.

2. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us at:

TMP Grup EOOD
Ivan Pamukchiev 7A
5600 Troyan
Bulgaria
Email: info@arch-pfoertner.com

3. The Data We Collect About You

Personal data is any information about a natural person by which that person can be identified. We may collect, use, store and transfer different types of personal data about you:

• Identity Data includes first name, last name, title.
• Contact Data includes email address, telephone numbers and address.
• Technical Data includes anonymized Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plugin types and versions, operating system and platform.
• Usage Data includes anonymized information about how you use our website.

4. How We Collect Your Personal Data

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity and Contact Data by corresponding with us by phone, email or otherwise.
• Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns using cookies and similar technologies.

5. Inquiry Form

Our website features an inquiry form that allows you to contact us directly. When you submit the form, the following personal data is collected:

• First name and last name (required)
• Email address (required)
• Phone number (required)
• Selected service type (required)
• Your message (optional)
• Project reference (automatically included if submitting from a project page)

This data is transmitted to and processed by Web3Forms (web3forms.com), a third-party form processing service, which forwards your inquiry to our email address. Web3Forms acts as a data processor on our behalf.

Legal basis: Consent (Art. 6 para. 1 lit. a GDPR), you actively submit the form and confirm acceptance of this privacy policy before sending.

For more information about Web3Forms' data practices, please visit: web3forms.com/privacy

6. Website Analytics

We use Umami (umami.is) for website analytics. Umami is a privacy-focused analytics tool that:

• Does not use cookies
• Does not collect personal data
• Does not track users across websites
• Collects only anonymized, aggregated usage statistics

Since Umami does not process personal data or use cookies, no consent is required under GDPR. Legal basis: Legitimate Interests (Art. 6 para. 1 lit. f GDPR).

7. Website Analytics (Google Analytics 4)

To analyse traffic and visitor behaviour on our website, we use Google Analytics 4, only after you have given your explicit consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"); its parent company is Google LLC, USA.

For this purpose we load the so-called Google tag (gtag.js) from Google's servers, only after you have selected "Accept All" in our cookie banner. We use Google Consent Mode v2: by default, measurement is disabled and is only activated after you have given your consent. No Google Analytics tag is loaded before you consent.

Automatic measurement of content and interactions: In addition to standard page view measurement, Google Analytics 4 automatically measures certain interactions and content on our site - for example scrolling to the end of a page, clicks on outbound links, on-site searches, and engagement with embedded videos. Data from on-page elements such as links and embedded videos may be collected with the relevant events. We ensure that no personally identifiable information is sent to Google through this measurement.

The data processed includes, among other things:

• A client identifier, stored in cookies such as _ga and _ga_*
• Information about your browser, device and operating system
• Approximate location (city/region level only, derived from your IP address)
• The pages you visit and the time spent on them
• Interactions on our website (scrolling, link clicks, form submissions)

Google Analytics 4 is designed to not log or store the full IP address of visitors. We do not enable any Google features that link advertising identifiers or profiles across devices through this service.

Legal basis: Your consent (Art. 6 para. 1 lit. a GDPR). This service is only loaded after you select "Accept All" in our cookie banner. You can withdraw your consent at any time with effect for the future.

Transfer to the USA: In connection with this service, data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework; in addition, the transfer is based on the European Commission's Standard Contractual Clauses.

Withdrawal and objection: You can withdraw your consent at any time via our cookie settings by reopening the banner. You can also install Google's browser add-on to opt out of Analytics: tools.google.com/dlpage/gaoptout. For more information on data protection at Google, see policies.google.com/privacy.

8. Advertising and Conversion Tracking (Google Ads)

To measure and optimise our advertising campaigns (in particular Google Ads search campaigns), we use Google Ads, only after you have given your explicit consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"); its parent company is Google LLC, USA.

For this purpose we load the so-called Google tag (gtag.js) from Google's servers. We use Google Consent Mode v2: by default, storage and measurement are disabled and are only activated after you have given your consent via our cookie banner. No Google tag is loaded before you consent.

Google Ads – Conversion Tracking and Remarketing: We use Google Ads to advertise our services in Google Search and on partner websites. When you click on an ad served by Google, a conversion tracking cookie is stored on your device. These cookies allow us to recognise whether you completed a specific action on our website after clicking an ad (e.g. submitting an inquiry), so that we can statistically evaluate the effectiveness of our campaigns. We do not receive any information that personally identifies you.

The data processed includes, among other things: cookie ID, IP address, information about your browser and device, date and time, and interactions on our website recorded as conversions, clicking the phone number, the WhatsApp and Viber buttons, and submitting the inquiry form.

Legal basis: Your consent (Art. 6 para. 1 lit. a GDPR, and § 25 para. 1 TDDDG for storing and accessing information on your device). These services are only loaded after you select "Accept All" in our cookie banner. You can withdraw your consent at any time with effect for the future.

Transfer to the USA: In connection with these services, personal data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework; in addition, the transfer is based on the European Commission's Standard Contractual Clauses.

Withdrawal and objection: You can withdraw your consent at any time via our cookie settings by reopening the banner. You can also disable personalised advertising in Google's ad settings at adssettings.google.com and manage cookies in your browser settings. For more information on data protection at Google, see policies.google.com/privacy.

9. Advertising and Conversion Tracking (Microsoft Advertising)

To measure and optimise our advertising campaigns on Microsoft/Bing Ads, we use Microsoft Advertising, only after you have given your explicit consent. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; its parent company is Microsoft Corporation, USA.

For this purpose we load the so-called UET tag (Universal Event Tracking, bat.js) from Microsoft's servers, only after you have selected "Accept All" in our cookie banner. No Microsoft tag is loaded before you consent.

Conversion tracking: When you click on an ad served by Microsoft/Bing, a conversion tracking cookie is stored on your device. This allows us to recognise whether you completed a specific action on our website after clicking an ad, so that we can statistically evaluate the effectiveness of our campaigns. We do not receive any information that personally identifies you.

The data processed includes, among other things: cookie ID, IP address, information about your browser and device, date and time, and interactions on our website recorded as conversions, clicking the phone number, the WhatsApp and Viber buttons, and submitting the inquiry form.

Legal basis: Your consent (Art. 6 para. 1 lit. a GDPR). This tag is only loaded after you select "Accept All" in our cookie banner. You can withdraw your consent at any time with effect for the future.

Transfer to the USA: In connection with this service, personal data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-U.S. Data Privacy Framework; in addition, the transfer is based on the European Commission's Standard Contractual Clauses.

Withdrawal and objection: You can withdraw your consent at any time via our cookie settings by reopening the banner. You can also manage your ad preferences at about.ads.microsoft.com and manage cookies in your browser settings. For more information on data protection at Microsoft, see privacy.microsoft.com.

10. Cookies and Similar Technologies

Our website uses various types of cookies:

• Necessary Cookies: These are required for the website to function and cannot be disabled.
• Analytics Cookies: These help us understand how visitors use our website, via Google Analytics 4 (only with consent).
• Marketing Cookies: These are used for targeted advertising and conversion tracking via Google Ads and Microsoft Advertising (only with consent).

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Our cookie settings allow you to customize your preferences.

11. Legal Bases for Processing

We process your personal data based on the following legal bases:

• Consent (Art. 6 para. 1 lit. a GDPR): For the inquiry form and marketing tools
• Legitimate Interests (Art. 6 para. 1 lit. f GDPR): For anonymized website analysis (Umami)
• Contract Performance (Art. 6 para. 1 lit. b GDPR): For processing orders and customer service
• Legal Obligation (Art. 6 para. 1 lit. c GDPR): To fulfill tax and accounting obligations

12. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

13. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

14. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Right to withdraw consent

If you wish to exercise any of the rights set out above, please contact us at info@arch-pfoertner.com.

15. Third-party Services

We use the following third-party services:

• Web3Forms (web3forms.com), form processing and email delivery for inquiries
• Umami (umami.is), privacy-focused, cookieless website analytics
• Google Ireland Limited (Google Analytics 4), traffic and visitor behaviour analysis via the Google tag (gtag.js), only with consent
• Google Ireland Limited (Google Ads), conversion tracking and remarketing for our advertising campaigns via the Google tag (gtag.js), only with consent
• Microsoft Ireland Operations Limited (Microsoft Advertising), conversion tracking for our advertising campaigns via the UET tag (bat.js), only with consent

This website may also include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

16. Changes to the Privacy Policy

We may update this privacy policy from time to time by posting a new version on our website. You should check this page occasionally to ensure that you are happy with any changes.

17. Right to Complain

You have the right to make a complaint to a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.