Privacy Policy

Contents

1. Who we are
2. What data we collect
3. Why we use your data and on what legal basis
4. Who receives your data
5. Transfers outside the EU/EEA
6. How long we keep your data
7. Cookies
8. Your rights
9. Complaints
10. Security
11. Changes to this policy

1. Who we are

The controller of your personal data is Deyacolor Ltd. (Деяколор ЕООД), 9 Assen Yordanov Blvd., Sofia, Bulgaria, exclusive representative of Tiger Coatings GmbH for Bulgaria.

Contact for all privacy questions: office@deyacolor.com, tel. +359 2 978 58 61.

2. What data we collect

Depending on how you use this website we process:

• Account and order data: name, company, VAT number, billing and delivery addresses, phone number, email, the goods ordered, invoices and payment status.
• Enquiries and requests: name, email, phone, company and the content of your message or quotation request.
• Newsletter: your email address and the date of your subscription.
• Technical data: IP address, browser and device type, pages visited, and cookies (see "Cookies" below).

We do not store payment card numbers. If you pay by card, the payment is handled by the payment provider you choose.

3. Why we use your data and on what legal basis

• To conclude and perform a contract (Art. 6(1)(b) GDPR): processing and delivering your order, invoicing, customer support and warranty.
• To comply with legal obligations (Art. 6(1)(c)): accounting, tax and consumer-protection rules.
• Our legitimate interests (Art. 6(1)(f)): security of the website, preventing fraud and abuse, establishing and defending legal claims, and informing our existing customers about similar products. You may object at any time.
• Your consent (Art. 6(1)(a)): the newsletter and cookies that are not strictly necessary. You may withdraw consent at any time, without affecting the processing done before.

4. Who receives your data

We share data only where needed and under agreements that protect it (Art. 28 GDPR):

• Couriers (for example Speedy) receive the name, delivery address, phone number and, for deliveries abroad, the email of the recipient, together with the parcel details, in order to deliver your order.
• Payment, banking and accounting service providers.
• IT, hosting, email and website service providers that work for us.
• Public authorities, where the law requires it.

We do not sell your personal data.

5. Transfers outside the EU/EEA

We aim to keep your data within the European Union and the European Economic Area. If a provider processes data outside the EU/EEA, we make sure that a lawful transfer mechanism applies, such as an EU adequacy decision or the Standard Contractual Clauses.

6. How long we keep your data

We keep personal data no longer than needed for the purposes above and for the periods required by law: for example, accounting and tax documents for the periods set by Bulgarian legislation (up to 10 years), the newsletter until you unsubscribe, and enquiries for as long as needed to answer them and to protect our legal interests. After that we delete or anonymise the data.

7. Cookies

This website uses cookies that are strictly necessary (session, shopping cart, security, language) and, only with your consent, other cookies, for example for statistics. You can change your choice at any time and block cookies in your browser settings. Blocking necessary cookies may stop parts of the shop from working.

8. Your rights

Under the GDPR you have the right to: access your data, have it corrected or erased, restrict its processing, receive it in a portable format (data portability), object to processing based on our legitimate interests, and withdraw consent.

To exercise a right, write to office@deyacolor.com. We answer within one month (this period may be extended in complex cases, and we will tell you why).

We do not take decisions based solely on automated processing that significantly affect you.

9. Complaints

If you believe your data is processed unlawfully, you have the right to complain to the supervisory authority: Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, kzld@cpdp.bg. You can also go to the competent court.

10. Security

We use organisational and technical measures to protect your data against loss, misuse and unauthorised access, including access control and encrypted connections (HTTPS).

11. Changes to this policy

We may update this policy, for example when our services or the law change. The date of the latest version is at the top of this page.