Privacy Policy (GDPR)

This Privacy Policy aims to inform you how Promash BG EOOD collects, uses and protects your personal data when you use this website.

1. Data controller

The personal data controller is:

Promash BG EOOD

2. What data we collect

We may collect the following categories of personal data:

• First and last name
• Phone number
• Email address
• Delivery address
• Invoicing details
• IP address and behavioural data when using the site

3. Purposes of processing

Your personal data is processed for the following purposes:

• Processing and fulfilment of orders
• Contacting you in connection with an order
• Issuing documents (invoices)
• Improving the services and functionality of the site
• Marketing purposes (only with consent given)

4. Legal basis

Personal data is processed on the basis of:

• Performance of a contract
• Legal obligations
• Your explicit consent
• Legitimate interest

5. Data retention

Your data is stored for the period necessary to fulfil the purposes for which it was collected, as well as in accordance with legal requirements.

6. Disclosure of data to third parties

Your data may be provided to:

• Courier companies for delivery
• Accounting services
• Government authorities where required by law

Data is not sold or provided to third parties for commercial purposes.

7. Your rights

You have the right to:

• Obtain access to your data
• Request correction
• Request erasure ("right to be forgotten")
• Restrict processing
• Object to processing
• Request data portability
• Lodge a complaint with the Commission for Personal Data Protection (CPDP)

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

9. Cookies

The site uses cookies to improve the user experience. You can find more information on the "Cookie Policy" page.

10. Changes

Promash BG EOOD reserves the right to update this policy at any time. Changes take effect from the moment they are published.