Cookies Policy

Cookies are small text files or similar technologies that may be stored on the user's device, or through which information on the device may be accessed when visiting a website. They may support the basic operation of the site, security, the retention of settings, the measurement of usage and other functions.

This policy explains how the Oditor AI website uses or may use cookies and similar technologies and how visitors can manage their choices.

The controller of personal data in connection with the Oditor AI website is "Tsentralna Konsultantska Kompania" EOOD, UIC 204305396.

For questions regarding cookies and privacy, the official contact published on the site is used.

The use of cookies and similar technologies complies with the applicable rules of Bulgarian and European law, including the rules on the storing of, or access to, information in the user's terminal equipment, Regulation (EU) 2016/679 (GDPR) where personal data are processed through the technology, and the applicable national legislation.

As a general rule, technologies that are not strictly necessary require prior valid consent given after clear information has been provided. For technical storage or access that is strictly necessary for the transmission of a communication or for the provision of a service explicitly requested by the user, an exemption from the consent requirement may apply.

This category includes only technologies without which the site, or functionality explicitly requested by the user, cannot operate normally. They may, for example, relate to security, session management, authentication, prevention of abuse or the retention of the user's choice regarding cookies.

The "strictly necessary" category must not be used as a general ground for analytics, advertising or other optional technologies.

If Oditor AI uses analytics tools that require consent, they must remain blocked until an active choice is made by the user. The policy shall state the actual provider, the purpose, the identifiers/cookies used, the retention periods and any international transfers.

At the time of publication the website uses one analytics technology, and it is loaded only after consent in the “Analytics” category:

• Provider: Vercel Inc. (Vercel Speed Insights).
• Purpose: measuring page speed and performance (Core Web Vitals).
• Data: technical indicators of page loading and general device and browser data; not used for profiling and not combined with data from other sources.
• Legal basis: the user's consent, withdrawable at any time from “Cookie settings”.
• International transfer: the provider is established outside the EEA and any transfer is carried out on the basis of the European Commission's standard contractual clauses.

Without consent this technology is not loaded. If another provider is added in future, this section and the table under 14 are updated before it is introduced.

Marketing and advertising technologies must not be activated before valid consent, where such consent is required. If the site uses advertising pixels, conversion tracking, remarketing or similar tools, each provider and purpose actually used shall be described.

Refusal of marketing cookies must not block basic access to functionalities for which those cookies are not necessary.

Certain functionalities may be provided through external providers. If their technologies are loaded on the site, they must be categorised according to their actual purpose and, where necessary, blocked until consent is obtained.

The mere presence of an external provider does not automatically determine the legal basis. Each tool shall be assessed according to its technical behaviour, its purposes and the data it processes.

The rules are not limited to files called "cookies". They may also apply to other technologies through which information is stored, or access to information is obtained, in the user's device, including certain local storage mechanisms, pixels, SDKs or other identifiers.

On a first visit, the site must display a clear choice mechanism where optional technologies are used. Optional cookies must not be pre-activated.

• An "Accept all" button – activates the optional categories for which the user gives consent.
• A "Reject optional" button – continues with strictly necessary technologies only.
• A "Settings" button/link – allows a separate choice by category.
• There must be no pre-ticked optional categories.
• Acceptance and refusal must be presented clearly and without misleading design.
• The site must not load analytics or marketing technologies before consent, where consent is required.

"We use strictly necessary cookies for the normal and secure operation of the site. With your consent, we may also use additional cookies for functionality, statistics and marketing. You may accept all, reject the optional ones or manage your choice. More information can be found in the Cookies Policy."

Buttons: "Accept all" | "Reject optional" | "Settings"

The user must be able at any time to change or withdraw their choice as easily as it was given. The site shall provide a permanently accessible link, for example "Cookie settings", through which the management panel can be reopened.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, but after it the relevant optional technologies must not continue to be activated on the basis of the withdrawn consent.

Cookies may be session cookies – deleted after the end of the session – or persistent cookies, which remain for a predetermined period. For each cookie actually used, its real lifespan shall be published, rather than a general or presumed period.

As at 21.09.2026 the website sets no cookies. The only thing stored on your device is your choice about cookies, so that you are not asked on every visit.

When a new technology is added to the site, the table is updated after a technical check.

Depending on the technologies actually used, online identifiers, IP address, browser/device information, pages visited, interactions and other technical data may be processed through cookies or similar mechanisms. The exact scope must correspond to the actual configuration of the site and must also be reflected in the Privacy Policy.

If a provider of analytics, marketing or other technology processes personal data outside the European Economic Area, the applicable transfer mechanism and the necessary safeguards under the GDPR shall be verified. This must be described in the relevant privacy information.

Visitors may additionally manage or delete cookies through their browser settings. Blocking strictly necessary technologies through the browser may make it impossible for certain functions of the site to work properly.

Where information collected through cookies or similar technologies constitutes personal data, its subsequent processing is carried out in accordance with the GDPR and the Oditor AI Privacy Policy. This policy is to be read together with it.

This policy may be updated upon changes to the site, the technologies used, the providers or the applicable requirements. The current version is published with a date of last update.

• Controller: "Tsentralna Konsultantska Kompania" EOOD
• UIC: 204305396
• Address: Sofia, 12 Byalo Pole
• Privacy e-mail: office@oditor.ai