Boriana Valentinova

Privacy Policy

In this privacy policy, I would like to inform you about the nature, scope, and purpose of Personal data we (that is me and the third parties acting on my behalf) process when you use my website and services.
Personal data in this sense is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not personal data. This includes, for example, the number of users of a website.
However, we reserve the right to put this data to additional uses to the extent permitted or required by law or necessary to support legal or criminal investigations. In this case, we will inform you again about this further data processing to the extent required by law and obtain your consent.

Person responsible

Boriana Valentinova
Calle Diputació 1, 3º1ª, 08172,
Sant Cugat del Valles, Barcelona

Collection of general data and information

Each time you visit my website, a number of general data and information is transmitted – even if you use my website for purely informational purposes. I only collect the general data and information that your browser transmits to my website`s server. This data and information are collected are technically necessary for the display my website to you and that serve the stability, security and danger or threat prevention in the event of attacks on my website, such as:
  • IP address
  • date and time of an access to the website
  • type and version of browser used
  • operating system used and its interface
  • the website from which an accessing system arrives at my website (so-called referrer)
  • sub-websites that are accessed via an accessing system on my website,
  • Internet service provider of the accessing system.
This data is deleted after the storage is no longer necessary for error analysis or danger or threat prevention. The legal basis for this data processing is my legitimate interest (Art. 6 (1) f) GDPR). When analyzing these general data and information, I do not draw any conclusions about you as a data subject. provides a website where users can read information on change and change management and where users may purchase business related services (the “Services”) or digital products (the “Products”).
Use of, including all materials presented herein and all online services provided by Boriana Valentinova, is subject to the following Privacy Policy. This Privacy Policy applies to all site visitors, customers, and all other users of the site. By using the Site or Services, you agree to this Privacy Policy, without modification, and acknowledge reading it.


The hosting services used for the purpose of operating my website is In doing so Hostinger, processes inventory data, contact data, content data, usage data, meta data and communication data of customers, interested parties and visitors of my website and services, on the basis of my legitimate interest (Art. 6 (1) f) GDPR) in an efficient and secure provision of the website and services in conjunction with the provision of contractual services and the conclusion of the contract for our services.

Contact options via the website

If you contact me, your transmitted personal data will be automatically stored for the purpose of processing the request or contacting you.
Data processing for the purpose of contacting me is carried out on the basis of your voluntarily given consent (Art. 6 (1) a) GDPR) or, in the case of a (pre-)contractual relationship with me, the initiation of a contractual service (Art. 6 (1) b) GDPR). I delete the data accruing in this context after the storage is no longer necessary for the processing of your request or restrict the processing if there are legal retention obligations.

Working with me and my services

When requesting my services, it is necessary, among other things, to provide your name, e-mail address and postal address and, if applicable, your payment data, and other details. I process and store the personal data provided when you request my services solely for the purpose of providing you with the ordered service. Accordingly, the data is processed on the basis of our contractual relationship (Art. 6 (1) b) GDPR) as well as to fulfil my legal obligations (Art. 6 (1) c) GDPR).
I use Zoom to conduct online meetings and various types of data are processed when using an online platform for meetings. The scope of the data depends on the information you provide before or during participation in an online meeting. The legal basis for this is my legitimate interest in effective customer communication (Art. 6 (1) f) GDPR) and, insofar as it concerns an enquiry to enter into or fulfil a contract, also Art. 6 (1) b) GDPR. You can revoke your consent at any time. For this purpose, an informal e-mail is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Introductory Call

For booking an appointment in an easy and convenient way, I use Calendly. Your data from the form will be transferred to my appointment account with Calendly after you press the “Book appointment” button. You will then receive a confirmation email with a link to the event. Your data will be kept at Calendly until the purpose for storing the data no longer applies (appointment made) or you request me to delete it. Calendly undertakes not to pass on your data to third parties. The legal basis for this is my legitimate interest in effective customer communication (Art. 6 (1) f) GDPR).

Mailings and Newsletter

When registering for my mailings and newsletter (collectively “newsletter”), you are required to provide your name and email address. Insofar as you have given us your consent to data processing when registering for the newsletter, we process and store the personal data provided when registering for the newsletter exclusively for the purpose of providing the newsletter. The legal basis for the processing of your personal data is your consent (Art. 6 (1) a) GDPR). You can revoke your consent at any time with effect for the future using the unsubscribe option in every e-mail sent by us. The provider is Flodesk Inc., Flodesk is a service with which, among other things, the sending of newsletters can be organised and analysed.

Use of cookies

I use so-called cookies on my website. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. The legal basis for the use of cookies is your consent (Art. 6 (1) a) GDPR) as well as my legitimate interest (Art. 6 (1) f) GDPR). For more information on cookies, please refer to my Cookie Policy.

Disclosure of data to third parties

I will only share your personal data with third parties if:
  • you have given your express consent to do so (Art. 6 (1) a) GDPR),
  • the disclosure is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 (1) f) GDPR),
  • in the event that there is a legal obligation for disclosure (Art. 6 (1) c) GDPR), as well as
  • this is legally permissible and necessary for the processing of contractual relationships with you (Art. 6 (1) b) GDPR).

General technical organizational measures

I have taken a variety of security measures to protect personal data to an appropriate extent and adequately. All information held by me is protected by physical, technical, and procedural measures that limit access to the information to specifically authorised persons and in accordance with the DPDRA, the GDPR and this Privacy Policy.
My website is behind a software firewall to prevent access from other networks connected to the Internet. In addition, only those who need the information to perform a specific job are granted access to personally information.

Duration of storage

I store your personal data for as long as necessary to achieve the respective storage purpose. Afterwards, your data will be deleted, unless I am obliged to store it for a longer period of time (Art. 6 (1) c) GDPR) due to tax, commercial or other legal storage or documentation obligations, or you have agreed to a storage beyond this period (Art. 6 (1) a) GDPR).

Rights of the data subject

With regard to your personal data, you have the following rights:
  • Right to information about the personal data concerned (Art. 15(1) GDPR).
  • Right to rectification of inaccurate personal data (Art. 16 GDPR).
  • Right to erasure (right to be forgotten) of personal data (Art. 17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing (Art. 21 GDPR).
  • Right to object at any time to the processing of your personal data for the purposes of advertising and data analysis (Article 21 (3) GDPR).
  • Right not to be subject to automated decisions, including profiling, (Art. 22 GDPR).
  • Right to withdraw consent (Art. 7 (3) GDPR) if you have given us consent to process your data.
If you wish to assert one of the above rights, you can contact me using at any time.
According to the DPDRA and GDPR, you are entitled to file a complaint with your local Supervisory Authority or the Supervisory Authority responsible for Spain. You can reach the Spanish Data Protection Authority (AEPD) per mail using C/ Jorge Juan, 6. 28001 – Madrid or through their website at Nonetheless, I would appreciate the chance to deal with your concerns first before you approach any Supervisory Authority.

Links to others

My website contains so-called hyperlinks to websites of other providers. When you activate these hyperlinks, you will be redirected from my website directly to the website of the other provider. You will recognize this by the change of URL, among other things. I cannot accept any responsibility for the confidential handling of your data on these third-party websites, as I have no influence on whether these companies comply with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on these websites.

Social Media

I`m present in various “social media” platforms (currently LinkedIn, Facebook, Instagram)  in order to communicate with my customers, interested parties and users registered there and to be able to inform them about my offers there. I would like to point out that you use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g., commenting, sharing, rating).
In addition, your data may be processed for market research and advertising purposes. For example, usage profiles can be created from your usage behaviour and the resulting interests. This allows, for example, advertisements to be placed within and outside the platforms that presumably correspond to your interests. Cookies are usually stored on your computer for this purpose. Independently of this, data that is not directly collected from your devices may also be stored in the usage profiles (especially if you are a member of the respective platforms and are logged in to them).
I, as the provider of this policy, do not collect and process any data from your use of my service beyond this.
The processing of users’ personal data is based on my legitimate interests in providing users with effective information and communicating with users (Art. 6 (1) f) GDPR). If you are asked by the respective providers for consent to data processing the legal basis is consent Art. 6 (1)a), Art. 7 GDPR.


It is important that the data I hold about you is accurate and current, therefore please keep me informed of any changes to your personal data.

Updating your information

If you believe that the information, I hold about you is inaccurate or that I am no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting me. For your protection and the protection of all of users, I may ask you to provide proof of identity before I can answer your requests.
Keep in mind, I may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, I may not be able to accommodate certain requests to object to the processing of personal data, notably where such requests would not allow me to provide my service to you anymore.

Data Breaches/Notification

Databases or data sets that include personal data may be breached inadvertently or through wrongful intrusion. Upon becoming aware of a data breach, I will notify all affected individuals whose personal data may have been compromised, and the notice will be accompanied by a description of action being taken to reconcile any damage as a result of the data breach. Notices will be provided as expeditiously as possible after which the breach was discovered.

Personal data and children

My services are aimed at people aged 18 and over. I will not knowingly collect, use, or disclose personal data from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact.

Change in privacy policy

Due to the further development of my website or due to changes in legal and regulatory requirements, I reserve the right to change this privacy policy at any time with effect for the future. A current version is available on the website. Please check regularly!

Who should I contact for more information?

If you have any questions or comments about my Privacy Policy or wish to exercise your rights under applicable laws, please contact me using the following contact details:

Boriana Valentinova
Calle Diputació 1, 3º1ª, 08172,
Sant Cugat del Valles, Barcelona

This Privacy Policy was last updated on Monday, 19 September 2022.