Privacy Policy

This Privacy Policy aims to inform you about what personal data we collect, how we use it, how we store it, and what rights you have in relation to its processing, in accordance with the General Data Protection Regulation (GDPR) and the applicable legislation of the Republic of Bulgaria.

 

1. Personal data controller

HORECA PLOVDIV LTD

UIC: 203541080

Registered office and address of management: Plovdiv, 26 Mladezhka St. Email: info@cartelcaffe.com

Phone: +359 899 192 152

2. What personal data we collect

 

2. What personal data we collect

When you use our website and place an order, we process the following categories of personal data:

 

First and last name

 

Phone number

 

Email address

 

Delivery address

 

Data related to orders and payments

 

3. Basis for processing

We process your personal data on the basis of Article 6(1)(b) of Regulation (EU) 2016/679 – processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract (e.g. when placing an order through the website).

4. Purposes of processing

Your personal data is used for:

 

Processing and fulfilling orders

 

Issuing invoices and other accounting documents

 

Contacting the customer in connection with an order or inquiry

 

Compliance with legal obligations (e.g., under the VAT Act, Accounting Act)

 

5. Sharing personal data with third parties

Your personal data is only provided when necessary and to the following categories of recipients:

 

Courier companies – for the purpose of delivering the ordered products

 

Accountants and auditors – for compliance with tax and accounting legislation

 

Hosting and IT support providers – when necessary, subject to strict confidentiality

 

We do not sell, transfer, or use your personal data for purposes other than those mentioned above.

 

6. Storage period

Personal data is stored for the period necessary to fulfill the purposes for which it was collected, but no longer than:

 

5 years for accounting documents – in accordance with the Accounting Act

 

Up to 1 year after the last order – for data related to orders, without a legal obligation to store

 

Immediately – upon request for deletion, if there is no legal basis for retention

 

7. Your rights
As a data subject, you have the following rights:

Right of access to your personal data

Right to rectification if inaccurate or incomplete

Right to erasure ("right to be forgotten")

Right to restriction of processing

Right to object to processing

Right to lodge a complaint with the Personal Data Protection Commission (PDPC)

Personal Data Protection Commission:
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. Website:
www.cpdp.bg

8. Data security
We implement technical and organizational measures to protect your personal data from unauthorized access, alteration, loss, or destruction.

9. Cookies
Our website uses cookies to improve the user experience. For more information, please refer to our Cookie Policy (link to a separate page, if any).

If you have any questions about this policy, you can contact us at:
info@cartelcaffe.com
+359 899 192 152