GDPR Compliance
Fenchell Capital OOD — FENCHELL brand · Last updated: 17 June 2026
Since 25 May 2018, the GDPR (General Data Protection Regulation) has been in force.
This European Union regulation, known under no. 2016/679, is the reference text on the protection of personal data in the Member States of the European Union. It applies to all companies that process data in Europe, whether or not they are themselves European. Thanks to this text, the regulatory authorities have enhanced powers of control and far more dissuasive penalties than before.
Questions about the GDPR
Who has to apply the GDPR?
All data controllers must apply the GDPR. It therefore concerns any organisation, European or not, that collects or processes the personal data of European citizens, including processors.
Is there a point of contact for data protection questions at Fenchell?
FENCHELL is not legally required to appoint a data protection officer (DPO) and has not appointed one (not required under art. 37 of the GDPR). A dedicated point of contact for data protection questions is nonetheless available to you at contact@fenchell-team.com.
How long does Fenchell keep personal data?
The personal data you entrust to us is kept for as long as is necessary to perform our contract. Once the contractual relationship ends, the Client's personal data is deleted within approximately fifteen (15) days.
By way of exception, documents that we are legally required to keep — in particular accounting records and invoices — are archived for the period imposed by the applicable Bulgarian regulations (10 years), under our legal obligation, before being destroyed.
Are there data processing agreements with Fenchell's partners?
Yes. A data processing agreement is concluded with the providers and processors who are involved in delivering our services. As our services are tailored, the Client is informed individually, after signing their dedicated contract, of the categories of recipients actually used for their file.
Where is the data stored?
As a matter of principle, your data is stored within the European Union. Our host is Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany); the servers are located in Germany. The tools we use (accounting solutions, business software, etc.) also keep the data within the European Union. The only exception concerns audience measurement with Google Analytics 4, used only after your consent has been obtained: any data transfers to Google LLC (United States) on that basis are governed by the EU–US Data Privacy Framework, to which Google LLC is certified, as well as by the European Union's standard contractual clauses.
What is the difference between the GDPR and national data protection rules?
The GDPR is, in a sense, an extension of the rules already laid down at national level by the supervisory authority of each Member State. It reinforces this framework with a harmonised European approach and broader powers for the supervisory bodies. A company already complying with the applicable national rules should be able to bring itself into compliance with the GDPR much more easily.
What penalties apply for failing to comply with the GDPR?
The GDPR provides for penalties of up to 4% of annual worldwide turnover or 20 million euros (whichever is higher) in the event of a breach of the regulation.
Fenchell's commitments
- Right to information: you can consult our personal data privacy policy to find out what data we collect, the legal bases for each processing operation and how we use it.
- Right of access: you can send us any request to access or amend the information concerning you.
- Right to object: you have the option, on grounds relating to your particular situation, to object to processing of your data based on our legitimate interest. FENCHELL carries out no prospecting or marketing communication using the contacts it holds.
- Right to rectification: you have the option, in your client area, to rectify inaccurate information concerning you. We can also do this for you on simple request.
- Right to erasure / right to be forgotten: an account closure system is available in your client area. Failing that, you can contact us if you wish your account to be permanently deleted.
- Right to portability: an export of all your data can be provided to you on simple request so that you can reuse it elsewhere. Most of the data is also exportable directly from your client area.
- Right to restriction of processing: if you express the need, we can freeze the use of your data for the period you have set.
To exercise any of these rights, you can use your client area (access, rectification, export and deletion of your data, account closure) or write to us at contact@fenchell-team.com.
Supervisory authority and complaints
As Fenchell Capital OOD is established solely in Bulgaria, the only lead supervisory authority is the Commission for Personal Data Protection (Комисия за защита на личните данни — CPDP / КЗЛД): 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, Bulgaria — www.cpdp.bg — kzld@cpdp.bg — tel. +359 2 915 3518. You have the right to lodge a complaint with it concerning the way FENCHELL collects and processes your personal data.
In addition, any resident of the European Union may lodge a complaint with the supervisory authority of their own Member State.
Important information
The content of this page is provided for general information on the GDPR and Fenchell's compliance. It does not constitute personalised legal advice and cannot replace the opinion of a professional suited to your particular situation. For the details of the purposes, legal bases and data processed, please refer to our privacy policy, which is the authoritative document.
Fenchell Capital OOD — Bulgarian firm based in Plovdiv: bul. Maritsa 95, 4000 Plovdiv, Bulgaria (EIK 207945095, VAT BG207945095). For any question relating to the protection of your personal data, you can contact our dedicated point of contact: contact@fenchell-team.com.