1. Introduction
This Privacy Policy explains how Adrielli EOOD (“we”, “us”) collects, uses, stores and protects the personal data of visitors to our website and customers who place orders with us. It applies to everyone using adrielli.eu, regardless of location.
2. Data controller
Adrielli EOOD
Registered address: [company registered address]
Company registration number (EIK): [EIK]
Email: office@adrielli.eu
[Data Protection Officer contact, if applicable]
3. What personal data we collect
- Identification and contact data: name, email address, phone number, delivery and billing address
- Order data: products ordered, custom specifications (dimensions, materials, colors), order history and value
- Payment data: payments are processed by our third-party payment provider; we do not store your full card details on our servers
- Communication data: messages you send via contact or inquiry forms, email, or phone
- Technical data: IP address, browser type, device information, collected automatically through cookies and similar technologies
- Marketing data: your email address and preferences, if you subscribe to our newsletter
4. How we collect your data
- Directly from you, when you fill in a form, place an order, or contact us
- Automatically, through cookies and similar technologies when you browse our website
- From our delivery partners, to confirm order status and delivery
5. Legal basis and purpose of processing
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Responding to inquiries and customer service | Performance of a contract / legitimate interest |
| Sending marketing newsletters | Your consent (withdrawable at any time) |
| Maintaining accounting and tax records | Legal obligation |
| Improving our website (analytics) | Legitimate interest / consent, where required |
| Preventing fraud and securing our website | Legitimate interest |
6. Who we share your data with
- Delivery and courier companies, to fulfill your order
- Payment service providers, to process payments securely
- IT and hosting providers, who store data on our behalf
- Accounting and bookkeeping service providers, for statutory record-keeping
- Government and tax authorities, where legally required
We do not sell your personal data to third parties.
7. International data transfers
Where any of our service providers are located outside the EU/EEA, we ensure such transfers are protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.
8. Data retention
- Order and invoice data: retained for the period required under Bulgarian accounting and tax law (currently 10 years)
- Newsletter and marketing data: retained until you withdraw your consent
- Contact and inquiry form data: retained only as long as necessary to handle your request
- Analytics data: retained as described in our Cookie Policy
9. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data, subject to our legal retention obligations
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
- Withdraw consent at any time, without affecting processing carried out before withdrawal
- Lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg), or your local supervisory authority if you are based elsewhere in the EU/UK
10. Cookies
Our website uses cookies and similar technologies. Details on the cookies we use and how to manage your preferences are set out in our separate Cookie Policy.
11. Security
We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children’s privacy
Our website is not directed at children, and we do not knowingly collect personal data from children under the age of 16.
13. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.
14. Changes to this policy
We may update this Privacy Policy from time to time. The version published on our website applies from its stated effective date. We encourage you to review it periodically.
15. Contact us
For any questions about this Privacy Policy, or to exercise any of your rights, contact us at office@adrielli.eu.