Privacy notice
Version 1.0 of 31 October 2026
This notice explains what personal data Sakar processes, why, who we share it with, how long we keep it and what your rights are. The Bulgarian version prevails if the two differ.
Who processes your data
- Controller: Sakar Consult OOD, UIC/EIK 207556998, address: 2-8 Prof. Stefan Dimitrov St, Sofia, Bulgaria.
- Contact for data protection questions: info@sakarconsult.com, phone +359 89 550 7880.
Who this notice is for
- Job candidates for work in Bulgaria, including candidates put forward by a partner recruitment agency.
- Workers for whom we arrange visas, work and residence permits, arrival and accommodation.
- Representatives and staff of employers (clients), law firms and agencies, including users of our portal.
- People who submit the worker request form on our website.
What data we process and where it comes from
| Category | Examples | Source |
|---|---|---|
| Identity | Name in Latin and Cyrillic, date of birth or age, nationality, country of origin and residence, passport number and expiry, foreigner's personal number (LNCH), residence card number | You, the agency that put you forward, public authorities |
| Contact | Phone, email, address in Bulgaria | You, the agency |
| Professional | CV, experience, education and diplomas, driving licence and international driving permit, English level, current salary and working hours, offered position and salary | You, the agency, the employer |
| Personal circumstances | Marital status, plans for your stay in Bulgaria | You, at the interview |
| Documents | Scans of passport, diploma, CV, photo, video introduction (if you provide one), medical documents when the procedure requires them | You, the agency |
| Criminal record data | Police clearance certificate | You, the agency |
| Procedure data | Stage of the procedure, interview dates and notes, flight and pick-up, embassy or Migration Directorate appointment, payments for the procedure | Created by us and our partners |
| Portal users | Name, email, role, company, IP address, login and activity history (including downloads) | You, the system |
| Request form | Company details, contact person's email and phone, IP address, which ad or campaign you came from (Google click id, UTM tags) | You |
Why we process it and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Selecting candidates and presenting them to employers | Art. 6(1)(b) - steps taken at your request before an employment contract |
| Visa, work permit and residence procedure | Art. 6(1)(c) - obligations under the Labour Migration and Labour Mobility Act and the Foreigners in the Republic of Bulgaria Act; Art. 6(1)(b) |
| Police clearance certificate | Art. 10 GDPR - only because the law requires it for the procedure; it is filed with the authorities and used by the law firm handling the procedure |
| Arrival and accommodation | Art. 6(1)(b) |
| Invoices and accounting | Art. 6(1)(c) - Accountancy Act, VAT Act |
| Portal security, abuse prevention, access history | Art. 6(1)(f) - our legitimate interest in keeping your data safe |
| Pool of candidates for future positions | Art. 6(1)(f) - our legitimate interest in offering you future positions; you can object at any time and we will take you out of the pool |
| Measuring which ads and campaigns lead to requests | Art. 6(1)(f) - our legitimate interest in knowing which ads work |
| Answering a worker request, including a confirmation email | Art. 6(1)(b) - steps taken at your request before a contract |
| Communication with company representatives | Art. 6(1)(f) |
We do not make decisions based solely on automated processing, including profiling.
Who we share it with
| Recipient | What they receive | Why |
|---|---|---|
| Employer (client) | Candidate profile, interview details, documents we have deliberately shared; for hired workers - procedure data, date of birth, passport, phone, salary | To choose a candidate and sign an employment contract |
| Law firm | The data and documents the procedure needs, including the police clearance certificate | To file the documents with the authorities |
| The agency that put you forward | The data it provided itself and the stage of the procedure | To support you through the process |
| Public authorities | Employment Agency, Ministry of Interior - Migration Directorate, embassies and consulates of the Republic of Bulgaria, other authorities when the law requires | Legal obligation |
| Sworn translator | Documents to translate and legalise | The procedure requires translations |
| Service providers (processors) | Hosting (Vercel), database (MongoDB Atlas), file storage (Cloudflare), email sending (Resend), backups (GitHub), invoicing (InvoicePro) | They act only on our instructions and under contract |
Police clearance certificates and medical documents are not shown to employers unless the specific procedure clearly requires it.
Transfers outside the European Union
- Recruitment agencies in a country outside the EU: we send back the data they gave us and the stage of the procedure, on the basis of the European Commission's standard contractual clauses (Art. 46 GDPR).
- Service providers based in the United States: on the basis of the EU-U.S. Data Privacy Framework and/or standard contractual clauses. You can ask for a copy of the safeguards at info@sakarconsult.com.
How long we keep it
| Data | Period |
|---|---|
| Candidate on an active request | Until the request is closed |
| Candidate in the pool for future positions | 24 months from the last activity on the profile |
| Worker | For the duration of the procedure and 5 years after it ends |
| Invoices and accounting documents | 10 years (Accountancy Act) |
| Security and access logs | 12 months |
| Request form - IP address | 90 days |
When a period ends, a member of our staff reviews the data and deletes it by hand.
Your rights
- Access - get a copy of your data.
- Rectification - have inaccurate or incomplete data corrected.
- Erasure - except where the law requires us to keep it (for example accounting documents - 10 years).
- Restriction of processing and objection to processing based on legitimate interest.
- Portability - the data you gave us, in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
Write to info@sakarconsult.com. We reply within one month. You have the right to complain to the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, kzld@cpdp.bg, www.cpdp.bg - or to the authority in your country of residence if it is in the EU.
Do you have to provide the data
The procedure data (passport, police clearance certificate, diplomas and so on) is required by law. Without it we cannot file for a visa or permit. The video introduction and staying in the pool are voluntary.
Changes
When this notice changes we publish the new version with a new date on this page. Portal users are told about significant changes at their next login.