Privacy notice
Version 1, in force from 1 October 2026
Who is responsible for your data
The controller of the personal data collected through this website is 22 Ventures Ltd., UIC 208012960, 19 Hadzhi Dimitar, Sredets, 1000 Sofia, Bulgaria. The website virtualpatient.bg presents the Virtual Patient system.
For questions about personal data, write to hello@virtualpatient.bg.
What this notice covers
This notice covers the website virtualpatient.bg only. When an institution uses the Virtual Patient system, the data of its students and teachers is processed under the contract with that institution, which is their controller.
What we collect
When you request a demo, we collect your name, your role, your institution, your work e-mail, your phone number if you give it, and your message.
The website uses no cookies and collects no visitor statistics. Our hosting provider records technical data for each request to the server, such as the IP address, the time and the browser type, to keep the site secure.
Why we use it and on what basis
We use the details from the form to answer your request, arrange a demo and handle the correspondence about it. The legal basis is taking steps at your request before a possible contract and our legitimate interest in answering enquiries from institutions (Article 6(1)(b) and (f) of the General Data Protection Regulation).
The hosting provider’s technical data is processed on the basis of our legitimate interest in keeping the site secure and working.
We make no automated decisions about you and do no profiling.
How long we keep it
We keep the details of a request for up to 12 months after our last correspondence. If we sign a contract, we keep them for as long as the contract and the law require.
The hosting provider keeps technical logs for a short time, under its own rules.
Who receives it
Only the people who answer requests see the data. Providers who process data on our behalf help us: website hosting (Vercel Inc.) and e-mail delivery (Microsoft 365, Microsoft Ireland Operations Limited). We do not sell data or use it for advertising.
Transfers outside the European Union
Some providers may process data outside the European Union. Such transfers rely on a European Commission adequacy decision or on standard contractual clauses.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. To exercise a right, write to hello@virtualpatient.bg. We reply within one month.
Complaints
If you believe we are infringing your rights, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, external link.
Changes
When we change this notice, we publish the new version here with the date it takes effect.