Privacy Policy

1. Who processes your personal data

The controller of personal data collected through this website is Magdalena Pencheva.

Contact: info@magdalenapencheva.com

2. What data we may collect

Depending on how you use the website, we may process:

• your name, email address and phone number when you provide them;
• your answers and results from the interactive diagnostic;
• information about your interest in free or paid programs;
• separate consents for marketing materials and future training;
• technical data necessary for security and normal operation, such as logs, browser and IP address when processed by our service providers.

3. How we use the data

• to calculate, display and send the diagnostic result you requested;
• to record your interest in BUSINESS IN FOCUS or another program;
• to send practical materials, news and information about training only when you have given separate marketing consent;
• to respond to an enquiry or meeting request;
• for security, abuse prevention and technical support.

4. Legal basis

When you request a specific result, information, participation or contact, we process the data necessary to fulfil that request. Marketing communications are based on your separate voluntary consent. Limited technical data may be processed on the basis of legitimate interests where necessary for security and normal operation.

Receiving your diagnostic result does not depend on marketing consent.

5. Diagnostic and automated scoring

The diagnostic automatically calculates results in three areas - TEAM, SYSTEM and OWNER - based on your answers. It is a self-assessment and orientation tool. It is not used to make an automated decision that produces legal effects or similarly significantly affects you.

6. Who may receive the data

We use external providers only as necessary to operate the website and services. These may currently include:

• Vercel - website hosting and execution;
• Supabase - database for diagnostic results and requests;
• Brevo - email delivery, contact lists and marketing consent management;
• Calendly - when you choose to book a discovery call;
• Skool - when you use participant access or join a program hosted there.

These providers process data under their own terms and applicable contractual and technical safeguards. Where applicable, transfers outside the European Economic Area use the mechanisms required by law.

7. How long we keep data

We keep personal data only for as long as necessary for the relevant purpose. Contacts with marketing consent are retained until consent is withdrawn or the purpose no longer applies. Diagnostic results and requests are retained for the period necessary to provide the service, analyse effectiveness and support follow-up, unless you request earlier deletion or the law requires longer retention.

8. Your rights

Under applicable law, you may request access, correction, deletion, restriction of processing, objection where applicable, and data portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights: info@magdalenapencheva.com.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

9. Unsubscribing from marketing communications

Marketing emails include an option to unsubscribe. You can also withdraw marketing consent by contacting us at the email address above.

10. Cookies and external services

Necessary cookies support security, admin sessions and successful registration (the success cookie lasts 30 minutes). The choice stored as mp-marketing-consent-v1 persists until you change it or clear browser storage. Marketing is off by default. Only after consent, Meta Pixel (ID 938241159052125) loads from Meta Platforms Ireland Limited to measure page views and successful registrations, with campaign source moya or ivan. It may process visited URLs, browser/device information, IP address and Meta identifiers, including _fbp and _fbc where set. This supports advertising measurement and audiences. We do not send form answers, names or email addresses in these Pixel events. Use Cookie settings to allow or withdraw marketing consent; withdrawal stops future tracking and clears accessible Meta cookies. Meta may process data outside the EEA under its applicable safeguards. See Meta's privacy and cookie policies for its processing and retention.

When you follow a link to an external service such as Calendly, Skool or a social network, that service may apply its own privacy and cookie policies.

Meta Privacy Policy · Meta Cookies Policy

11. Security

We apply reasonable technical and organisational measures to protect personal data, including restricted access, protected server-side keys, authenticated email domains and database access controls.

12. Changes to this policy

This policy may be updated when the website, services or applicable requirements change. The current version will always be published on this page.