Personal data is information that directly or indirectly identifies you as a natural person. Indirect identification occurs when the data is combined with other information, such as your name, postal address, e-mail, telephone number, etc.

We (the site administrator) will use your personal data solely for the purpose of fulfilling the contract for the provision of goods and services to which you are a party when you send an inquiry or order from our site.

We do not collect or process more or different types of personal data than is necessary for this purpose.

We will use personal data only in the manner described in this policy, unless you have expressly given us your consent to use your personal data in a different manner, such as through explicit consent for marketing communications.

To fulfill our obligations to you under the contract for the provision of goods and services, as well as to prepare a proposal for entering into such a contract, we will process the following categories of your personal data:

• Name
• Contact phone number

These categories of personal data are only those you provide to us when making an inquiry or requesting a quote. We will not require any other personal data from you except those necessary for providing the quote and fulfilling the contract for the provision of goods and services.

We may be required to process and store personal data on a legal basis and comply with regulatory requirements, such as for preventing, detecting, or investigating crimes, preventing losses, fraud, or other financial abuses.

This Privacy Policy also applies when you use our website, with the following mechanisms and features related to personal data protection.

Cookies:

Our website uses "Cookies" and other technologies to enhance user experience and website performance, usability, and security, as well as for research purposes related to advertising effectiveness. Please see our Cookie policy for more details.

Third-Party Websites:

For the convenience of our visitors, this portal contains links to various websites that are not affiliated, controlled, or managed by us. The policies and procedures described here do not apply to these websites. We are not responsible for the security or protection of any data collected by these third parties. We advise you to contact these websites directly for information about their data protection policies.

We will disclose your personal data only for the purposes and only to the third parties listed below, unless we receive additional consent from you to transfer personal data to other categories of third parties, as provided elsewhere, for example, through a consent declaration for a specific purpose. We will take appropriate steps to ensure that your personal data is processed, protected, and transferred in accordance with applicable laws.

External Service Providers:

When necessary, we engage other companies and individuals to perform certain tasks on our behalf, supplementing our services, such as companies that deliver our goods—postal operators, courier companies, etc. We will share or grant access to such information to external service providers only to the extent necessary for the relevant purposes. This information may not be used by them for any other purposes, specifically neither for their own purposes nor for third-party purposes. External providers are contractually obligated by us to maintain the confidentiality of your personal data.

Business Reorganization and Share Purchase:

In connection with reorganization, restructuring, merger, sale, or other transfer of assets, we will transfer information, including personal data, within reasonable limits to the acquirer of these shares or assets as necessary for the transfer of ownership, provided that the acquirer agrees to process your personal data in accordance with applicable data protection laws.

To Government Authorities:

We will disclose your personal data to government authorities if required by law. For example, we will comply with requests from courts, administrative, and other public state or municipal bodies, which may include such state or municipal bodies.

We do not transfer your personal data or any information that may relate to you outside the Republic of Bulgaria.

We do not collect or process personal data of children under 18 years of age, except with the consent of a parent or guardian in accordance with applicable local law. If we become aware that personal data of a child has been inadvertently collected, we will delete this data immediately.

We do not collect or process so-called special categories of personal data, namely personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, as well as the processing of genetic data, biometric data solely for the purpose of identifying a person, health data, or data concerning a person's sex life or sexual orientation.

We take the security of your personal data seriously. We apply an appropriate level of protection and, for this purpose, have developed reasonable physical, electronic, and technical procedures to protect the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that is transmitted, stored, or otherwise processed. Access to your personal data is limited to those of our employees, service providers, or related parties who have a business need to know them or who need to know them to perform their duties. In the event of a data breach containing personal data, we will comply with all applicable notification regulations in such cases.

As a data subject, you have specific rights regarding the personal data we collect from you. This applies to all processing activities we perform with your personal data, as listed above. We respect your individual rights and will respond to your inquiries in an appropriate manner.

Below is a list of information about your rights under applicable data protection laws:

• Right to rectification: You have the right to request the correction of your personal data. We make reasonable efforts to ensure that the personal data we hold, which is under our control and which we process regularly, is accurate, complete, up-to-date, and relevant based on the latest information we have.
• Right to restriction: You have the right to restrict the processing of your personal data if:
• you contest the accuracy of your personal data for the period we need to verify its accuracy,
• the processing is unlawful, and you request restriction of processing instead of the deletion of your personal data,
• we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, or
• you object to the processing pending verification of whether our legitimate grounds override yours.
• Right of access: You have the right to request information from us about the personal data we hold about you, including information about the categories of personal data we hold or control, what it is used for, where we obtained it if not directly from you, and to whom it has been disclosed, if applicable. You have the right to one free copy of the personal data we hold about you. Subject to applicable law, we reserve the right to charge a reasonable fee for each additional copy beyond the first one that you may request.
• Right to data portability: Upon your request, we will transfer your personal data to another controller where technically feasible, provided that the processing is based on your consent or a contractual obligation. Instead of receiving a copy of your personal data, you may request that we transfer it directly to another controller specified by you.
• Right to erasure: You have the right to have your personal data erased if:
• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• you have the right to object to further processing of your personal data (see below) and you exercise this right of objection to the processing;
• the processing is based on your consent, you withdraw that consent, and there is no other legal basis for the processing;
• the personal data has been unlawfully processed;
• except where the processing is necessary for the following reasons:
• for compliance with a legal obligation that requires processing on our part;
• particularly for the purposes of archiving in the public interest;
• for the establishment, exercise, or defense of legal claims.
• Right to object: You may object at any time to the processing of your personal data in connection with your particular situation, provided that the processing is not based on your consent but on our legitimate interests or those of a third party. In such a case, we will cease processing your personal data unless we demonstrate compelling legal grounds that override your interests, or for the establishment, exercise, or defense of legal claims. If you object to the processing, please specify whether you wish for your personal data to be deleted or for the processing to be restricted on our part.
• Right to lodge a complaint: In the event of a suspected violation of applicable data protection laws, you may lodge a complaint with the supervisory authority for data protection in your country of residence or at the place of the alleged violation. In the Republic of Bulgaria, this authority is the Commission for Personal Data Protection (CPDP).
• Timeframe: We will attempt to fulfill your request to exercise your rights or obtain information from us regarding your personal data within 30 days, which may be extended due to specific reasons related to the particular legal right or due to the complexity of your request.
• Restriction of access: In certain situations, we may not be able to give you access to all or part of your personal data due to legal provisions. If we deny your request for access, we will inform you of the reason for this refusal.
• Inability to identify: In some cases, we may not be able to verify your personal data based on the identifiers provided in your request. In such cases, where we cannot identify you as a data subject, we are objectively unable to fulfill your request to exercise your legal rights as stated in this section unless you provide us with additional information that enables us to identify you.
• Exercising your legal rights: To exercise your legal rights, please contact us at the addresses provided at the end of this policy.

Generally, we will retain the personal data you provided to us for the purposes of sale and delivery of goods for as long as necessary to complete the delivery, and for a longer period that may be required by applicable laws governing the company's accounting and cash flow control requirements. We retain your purchase history on the website for the past 3 years.

We reserve the right to change our data protection practices and to update and amend this policy at any time. For this reason, we recommend that you review this policy regularly. This data protection policy is current as of the "last edited" date indicated at the top of this page.

Please send your data protection inquiries and any requests related to exercising your legal rights to the email address provided on the website.