Privacy Declaration

NOMELIA is an independent legal-education and media project - it isn't a registered company. Any data collected through this site is handled personally by the co-founders: Vladimir Toshev, Diana Todorova, Lidiya Ilieva, and Nicole Petrova.

For any question about your personal data, write to us at contact@nomelia.eu.

When you subscribe to our newsletter, we collect the email address you enter and the interface language you're using at that moment (Bulgarian or English), so we can write to you in that language. We also check, with a standard DNS lookup, that the domain of your address (the part after the @) can receive email.

The legal basis is your explicit consent (GDPR Art. 6(1)(a)), given at the moment you subscribe. We don't collect names, phone numbers, or any other information as part of that signup.

Like any website, this site also processes the technical data needed to deliver its pages to you - such as your IP address, browser type, and the time of your request. This happens automatically through our hosting provider (see below) and serves only to run the site and keep it secure. We don't use this data to identify or profile you. The legal basis is our legitimate interest in operating a working, secure website (GDPR Art. 6(1)(f)).

To tell people from automated scripts, the newsletter form also runs a check from Cloudflare (Turnstile) in your browser. It looks at technical signals such as your IP address and browser characteristics to confirm you're a person, and doesn't ask you for any other information. The legal basis is our legitimate interest in protecting the form from abuse (GDPR Art. 6(1)(f)).

Email addresses and language preferences are stored and processed by MailerLite, an email marketing provider based in Lithuania (EU). MailerLite processes this data entirely within the European Union.

The site is hosted by Vercel Inc., a company based in the United States, which processes the technical request data described above in order to deliver the site to you. When you subscribe, your email address and language also pass through Vercel's servers on their way to MailerLite - we don't log or store them there. Vercel is certified under the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses where required, so any transfer of this data to the US is covered by safeguards recognised under GDPR.

The newsletter form's bot check is provided by Cloudflare, Inc., also based in the United States, which receives the technical data described above when the form loads and when you submit it. Cloudflare is likewise certified under the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses where required.

We keep your email address for as long as you're subscribed. When you unsubscribe - via the link at the bottom of any newsletter email, or by writing to us - it's deleted from MailerLite's systems.

This site uses exactly one cookie - NEXT_LOCALE - which remembers whether you prefer the Bulgarian or English interface. It's strictly functional and doesn't track your behaviour.

Your browser also stores one localStorage entry (nomelia_newsletter) that records whether you've subscribed or dismissed the newsletter prompt. It stays on your device and is never sent to a server.

Under GDPR, you have the right to:

• request access to the data we hold about you;
• request deletion of your email address at any time;
• withdraw your consent to the newsletter with no explanation - just click "Unsubscribe" in any email;
• file a complaint with Bulgaria's data protection authority (КЗЛД / CPDP), if you believe your rights have been violated - cpdp.bg.

We don't sell your data to third parties, and we don't make automated decisions about you based on it.