Last updated: 19.08.2026
This Privacy Policy explains how we collect, use and protect personal data when you use our website, and tells you about your rights.
Who we are
Next DC (Некст Ди Си ООД, ЕИК: 201367752) is the controller of the personal data described in this Policy. Our address is Sv. Sveti Kiril i Metodi 82, 1202 Sofia, Bulgaria.
If you have any question about this Policy, or want to exercise any of your rights, contact us at legal@next-dc.com.
This Policy covers our website only. When we handle personal data for a client — for example, people entering a campaign we run for a brand — that client decides how the data is used and publishes its own privacy information. We act on their instructions.
What we collect and why
When you use our contact form. We collect your name, the company you work for, the service you are interested in, your message and your email address. We use this to read your enquiry, reply to it and discuss whether we might work together. We rely on steps taken at your request before entering into a contract, and on our legitimate interest in responding to enquiries.
When you subscribe. We collect your email address so we can send you our updates. We rely on your consent, which you can withdraw at any time using the unsubscribe link or by writing to us.
When you apply for a job. If you email careers@next-dc.com or apply for a posted vacancy, we collect your CV, your portfolio, anything else you choose to include, and our correspondence with you. We use this to assess your application and arrange interviews. We rely on steps taken at your request before entering into a contract, and on our legitimate interest in recruiting.
When you visit the site. Our server logs record your IP address, the pages you view, the time of your visit and information about your browser and device. We use this to keep the site running, diagnose faults and protect it against misuse, relying on our legitimate interest in security.
Google reCAPTCHA. Our contact form is protected by Google reCAPTCHA, which collects your IP address and information about how you interacted with the page in order to tell real visitors from automated submissions. Google's privacy policy and terms apply to that service and are linked beneath the form. We rely on our legitimate interest in preventing spam and abuse.
We do not ask for special category data — such as data about health, ethnicity, religion or political opinions — anywhere on this site. Please do not include such data unless it is genuinely necessary.
Our site is not intended for children. As stated in our Terms and Conditions, it is for use by people over 18.
Cookies
Google reCAPTCHA sets cookies on our contact page in order to work.
We do not use advertising or social media tracking cookies on this site.
Our pages link to our profiles on Instagram, Facebook, X, YouTube and LinkedIn. These are ordinary links — following one takes you to that platform, where the platform's own privacy policy applies.
Who else sees your data
We do not sell personal data and we do not share it for anyone else's marketing.
We use service providers who process data on our behalf and on our instructions: our hosting provider, whose servers are in the European Economic Area; Google, for our business email, document storage and the reCAPTCHA service; and, where we send updates to subscribers, the provider of our mailing tool.
We may also disclose data to our professional advisers, or to a public authority where the law requires it.
Data leaving Europe
We keep data within the European Economic Area wherever we can. Some providers, including Google, can access data from outside the Area, for example when providing technical support. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses, by an adequacy decision, or by both. You can ask us for details of the safeguards that apply.
How long we keep it
Enquiries through the contact form — up to 12 months after our last exchange with you, unless the enquiry leads to a contract, in which case it is kept with the contract records.
Subscriber email addresses — until you unsubscribe or ask us to remove you.
Job applications — 6 months from the end of the selection process, unless you agree to a longer period so we can contact you about future openings.
Server logs — up to 12 months.
When a period ends we delete the data, or anonymise it so it can no longer be linked to you.
Your rights
You have the right to ask what personal data we hold about you and receive a copy; to have inaccurate data corrected and incomplete data completed; to have your data deleted where we no longer have a reason to keep it; to ask us to restrict how we use it while a question about it is resolved; to object to our use of it where we rely on our legitimate interests, and to object to marketing at any time, which we will always act on immediately; to withdraw your consent where we rely on consent, without affecting anything we did beforehand; and to receive the data you gave us in a structured, commonly used and machine-readable format.
Write to legal@next-dc.com to exercise any of these. We will reply within one month. If your request is complicated we may need up to two months more, and we will tell you within the first month if that is the case. There is no charge.
If you are unhappy
Please tell us first — most things are quickest to fix directly.
You also have the right to complain to the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, telephone +359 2 915 3 518, kzld@cpdp.bg, www.cpdp.bg. If you live in another EU country, you can complain to the authority there instead.
Changes to this Policy
We update this Policy when what we do changes. The date at the top tells you when it was last revised.
Contact us
If you have any questions about this Privacy Policy, you can contact us by email: legal@next-dc.com.