Draft note: This is a structural draft. Before going live, have a GDPR-qualified lawyer (БГ + DE) review for completeness, specifically Art. 13/14 information, processors list and DPA addendum links.
VERANTWORTLICHE STELLE
BADJOS 2016 EOOD, registered in Bulgaria (Reg. No. 204173165, EU VAT BG204173165), is the data controller for personal data collected through this site.
WAS WIR SAMMELN
- Order details — your name, email, optional phone, country, optional VAT number, the message you typed in the order form.
- Communication — emails and messages you send us about your order.
- Technical data — IP address, browser type and pages viewed, used for security and to detect abuse. Not used for advertising profiles.
WARUM WIR ES VERWENDEN
- To process and ship your order (legal basis: contract).
- To issue an invoice and meet tax / accounting obligations (legal basis: legal obligation under EU VAT and Bulgarian accounting law).
- To answer your questions (legal basis: contract / consent).
- For B2B VAT numbers — to validate against VIES so we can apply reverse-charge VAT (legal basis: legal obligation).
WIE LANGE WIR ES AUFBEWAHREN
Order and invoice data: 10 years, as required by Bulgarian accounting law. Communication logs: 24 months. Server access logs: 90 days.
IHRE RECHTE
You have the right to:
- Ask us what personal data we hold about you (Art. 15 GDPR).
- Ask us to correct mistakes (Art. 16).
- Ask us to delete your data, where we no longer need it for legal reasons (Art. 17).
- Object to processing (Art. 21).
- Lodge a complaint with your national data protection authority.
KONTAKT FÜR DATENSCHUTZFRAGEN
Email [email protected] with subject "Privacy request". We respond within 30 days as required by Art. 12 GDPR.