Privacy Policy
This policy explains which personal data we collect when you use the ekranat.com website and the Ekranat service (the dashboard at tablo.ekranat.com and the player at tv.ekranat.com), why we collect it, how long we keep it and what your rights are. We process data in line with Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act and the Electronic Commerce Act.
1. Who is responsible for your data
DIDJITUL SPARK EOOD (ДИДЖИТЪЛ СПАРК ЕООД), company number (EIK) 207216508
Registered office: 9 Lyule Burgas St., fl. 2, Shumen, Bulgaria
Email: support@ekranat.com · Phone: +359 89 058 4818
Ekranat is a service of DIDJITUL SPARK EOOD, which is the controller of your personal data within the meaning of Art. 4(7) GDPR.
2. What data we collect
On the ekranat.com website
When you fill in the form on the site: name, phone, email, venue name and type, number of TVs. Along with them we record which ad or link brought you (UTM parameters). These do not identify you on their own.
When you write to us or we call: email, phone and the content of the conversation or message, as far as needed to answer.
Technical data: IP address and browser data that the server records automatically when you visit the site, for security and troubleshooting.
In the dashboard and the player
| Data | Where it comes from |
|---|---|
| Email and password (the password is stored only in irreversible form) | From you, at sign-up |
| Phone number and name of the person signing in | From you, at sign-up and in Settings |
| Venue name and type, dashboard language, colours and logo | From you, in Settings |
| The content you upload or write: photos, video, songs, presentations and PDFs, slide texts, schedules | From you |
| If you add music: your confirmation of the rights to it, who gave it and when, the network (IP) address, browser type and the text shown | From you and your browser |
| If you connect Canva: the name and ID of your Canva account, a key for access to your designs, and copies of the designs you add as slides | From Canva, after you allow access |
| Emails of invited colleagues | From you, when you invite a colleague |
| TV data: a random browser identifier, the network (IP) address when the player first opens, when it last called in, browser type and technical events (for example a slide that failed to load) | From the TV's browser |
| What is done in the account (for example a slide added, a screen connected, a template opened, a failed upload, a dashboard crash) and what was shown on your screens: which slide, how many times and for how long | From the dashboard and the player |
| How you reached sign-up: the site you came from and the campaign parameters in the address | From your browser, on the first visit |
| Subscription and payment data: number of screens, amounts and dates of payments, the last four digits and brand of the card. If you ask for an invoice: company name, company number, VAT number, representative, address and invoice email. Card numbers never reach us. The payment provider handles them. | From you and the payment provider |
| Which emails you want to receive and when you gave or withdrew consent for the newsletter. Which emails we sent you and whether they were delivered and opened. | From you and the email provider |
| Messages you send us | From you |
If the content you upload contains personal data of other people (for example the name or photo of an employee or customer), you are responsible for having their consent. For this content we act as a processor on your behalf.
We collect no data about visitors to your venue. The player uses no camera or microphone and does not track who is watching.
3. Why we use it and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| To contact you by phone or email about your request from the form and answer your questions | Steps at your request before entering into a contract, Art. 6(1)(b) |
| To create your account and provide the service: sign-in, dashboard, showing your content on your screens, support and contacting you when needed | Performance of a contract, Art. 6(1)(b) |
| Service emails: email confirmation code, new password, email change, colleague invitation. These always arrive. | Performance of a contract, Art. 6(1)(b) |
| Invoicing and accounting | Legal obligation, Art. 6(1)(c) |
| Improving the service and statistics for you: which features are used, what was shown on the screens, where new customers come from. This data is not shared with third parties or used for advertising. | Legitimate interest, Art. 6(1)(f) |
| Security of the site, the dashboard and the player, and abuse prevention (limits on pairing attempts, the player's technical log, a record of support actions), as well as defence in legal disputes | Legitimate interest, Art. 6(1)(f) |
| The music rights confirmation, so we can prove it in a dispute | Legitimate interest, Art. 6(1)(f) |
| Tips and reminders: a few short emails while you get started, and a reminder before the trial ends. You stop them with the link in every email or from Settings. | Legitimate interest, Art. 6(1)(f) |
| Analysing visits to the site (Google Analytics, Microsoft Clarity) | Consent, Art. 6(1)(a) |
| Measuring our ads (Meta Pixel on the site and at sign-up in the dashboard) | Consent, Art. 6(1)(a). You give it with the marketing cookies (section 8). |
| Newsletter about the service | Consent, Art. 6(1)(a). You give it with a checkbox at sign-up or in Settings and withdraw it the same way. |
You can withdraw any consent at any time.
We do not use your data for automated decision-making or profiling with legal effects for you.
4. How long we keep it
- Form requests that did not become customers: up to 12 months from the last contact.
- Account data and screen content: while you have an account. A paused account (expired trial or ended subscription) is kept for six months after the trial or subscription ended. If you sign in to the account after that, the period runs from your last sign-in. Then the account is deleted, with an email warning first.
- After you delete the account: the data is removed from the database at once and the files from storage within a few hours. Backups keep it for at most 30 days.
- The Canva key: while your account is connected to Canva. It is deleted when you disconnect Canva in Settings. Copies of designs stay while they are in your account.
- The music rights confirmation: while you have an account.
- Records of account activity and of what was shown on screens: up to 13 months.
- The player's technical log: 30 days.
- A TV that opened the player but is not paired with an account: 7 days.
- Unaccepted invitations: 30 days after they expire.
- Copies of sent emails: 14 days.
- Google reviews on your screens: at most 30 days (section 7).
- Accounting documents: 10 years, as the Bulgarian Accountancy Act requires.
- Data processed on the basis of consent: until you withdraw it.
5. Who we share it with
We do not sell personal data. We share it only with providers who help us operate, and only as far as needed. They process it on our behalf and on our instructions.
| Kind of provider | What for | Where |
|---|---|---|
| Database and server services | Database, sign-in, server functions | EU |
| File storage and delivery network | Storing and delivering your files, the check against automated sign-ups | EU and a worldwide delivery network |
| Hosting | The site and the contact form, the dashboard and the player | EU and USA |
| File processing | Preparing video, photos, songs and presentations for the TVs | EU |
| The dashboard's emails, our mailbox, and a backup route when the main one is delayed | EU and USA | |
| Payments | Card payments and the subscription | EU and USA |
Data is also received by:
- Google (the site's fonts and, with consent, Google Analytics) and Microsoft (Clarity, only with consent);
- Meta (Meta Pixel), only if you consented to marketing cookies (section 8);
- our accountant and legal advisers;
- public authorities (e.g. the National Revenue Agency) when the law requires it.
If you want to know exactly which providers received your data, write to support@ekranat.com and we will name them.
If you add a slide with outside content, it comes from that service: Google reviews, YouTube video, weather from a weather data provider. For weather we send only the coordinates of the chosen place. For reviews we send only your venue's Google place number. The YouTube player is shown in the TV's browser under YouTube's terms.
When you connect Canva, the dashboard reads your designs and creates new ones in your account there. Canva processes your account under its own terms.
6. Transfers outside the EU
Some of the providers listed are in the USA or other countries outside the European Economic Area. When they receive your data there, this happens only with appropriate safeguards: a European Commission adequacy decision (including the EU–US Data Privacy Framework) or standard contractual clauses approved by the Commission. You can ask for more information at support@ekranat.com.
7. Reviews on your screens
The reviews slide shows public Google reviews of your venue with the author's name and photo as Google provides them. We keep them for at most 30 days and refresh them daily.
8. Cookies and browser storage
When you first open the site, we ask which cookies to allow. The analytics and advertising tools do not load before you allow them.
| Kind | Tools | What for |
|---|---|---|
| Necessary | Your cookie choice (cookie ek_consent, for 6 months, valid for ekranat.com and tablo.ekranat.com) | So we do not ask on every visit and so the dashboard knows what you allowed. Always on. |
| Analytics | Google Analytics, Microsoft Clarity | How many people visit the site, where they come from and how they use it. Clarity records movements on the page anonymously, without the content of the form fields. |
| Marketing | Meta Pixel | Whether our ads on Facebook and Instagram lead to requests, sign-ups and payments. |
The site's fonts load from Google Fonts, which gives Google your IP address.
In the dashboard
Sign-in and sign-up use a check against automated sign-ups. It judges from technical signals of the browser whether the request comes from a person.
If you allowed marketing cookies on ekranat.com, the dashboard reads that choice from the ek_consent cookie and loads the Meta Pixel (Meta Platforms Ireland Ltd.) at sign-up. It tells Meta that a new trial started, with the account number and no email, name or phone. Meta may set its own cookies (_fbp) and link the event to your Facebook or Instagram account under its terms. We are joint controllers with Meta for collecting and sending this data. Without that consent, or if you come to the dashboard directly, the Pixel is not loaded.
The dashboard uses no other advertising or tracking cookies. Browser storage holds only what it needs to work: your sign-in and chosen language. On the TV we keep the screen identifier and content stored for offline playback. An embedded YouTube video may use its own cookies under YouTube's terms.
You can change your cookie choice at any time from the cookie settings.
9. How we protect data
We apply technical and organisational measures under Art. 32 GDPR: an encrypted connection (HTTPS), access limited to the people who need it, and reliable providers. If a security breach puts you at risk, we will notify the Commission for Personal Data Protection and, where needed, you.
10. Your rights
- Access: to learn which of your data we process and get a copy.
- Rectification: to have inaccurate or incomplete data corrected.
- Erasure: to have your data deleted when it is no longer needed or the processing is unlawful, unless the law obliges us to keep it (e.g. invoices).
- Restriction: to have processing paused while its accuracy or lawfulness is checked.
- Portability: to receive the data you gave us in a machine-readable format or have it transferred to someone else.
- Objection: to processing based on legitimate interest, and at any time to direct marketing.
- Withdrawal of consent: at any time, without affecting the lawfulness of processing before that.
Most of this you do yourself in the dashboard. You change your data in Settings, and the account owner deletes the account from the same place.
To exercise a right, write to support@ekranat.com. We answer within one month. We may ask for additional information to confirm that the request comes from you.
11. Complaints
If you believe we are infringing your rights, you may complain to the Bulgarian Commission for Personal Data Protection:
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 3 518 · Email: kzld@cpdp.bg · www.cpdp.bg
We would be glad if you wrote to us first, so we can try to resolve the matter.
12. Who the service is for
Ekranat is for businesses and people who run a venue. We do not knowingly collect data of people under 18. If we learn that we have received such data, we delete it.
13. Changes to this policy
We may change this policy. The current version is always on this page, with the date of the last change. If we change it materially, we will email every account before the change takes effect.