Privacy policy | BG10 Supplies

Privacy Policy
"BG10 - 25" LLC
1. Data Controller
Name: "BG10 - 25" LLC
UIC: 208186690
Registered Address: Bulgaria, Burgas, "Zahari Stoyanov" St. 7
Phone: +359 894 541 690
Email: bg10supplies@gmail.com
Website: www.bg10supplies.com
2. Scope and Purpose
"BG10 - 25" LLC (the Company or Controller) operates in compliance with the Personal Data Protection Act and the EU General Data Protection Regulation (GDPR).
This Privacy Policy informs Clients about the processing of their personal data.
Client means any natural person:
who enters into a contract with the Company for the purchase of goods;
who expresses intent to enter pre-contractual relations;
who uses the BG10 Supplies Online Store (www.bg10supplies.com); or
who acts as a director, manager, representative, proxy, employee, partner, shareholder, or beneficial owner of a legal entity using the Online Store.
3. Personal Data We Process
We process the following categories of personal data:
Identity Information: full name, personal identification number (EGN), address, phone number, email address
Financial Information: bank account number
Personal data is collected directly from the data subject.
4. How We Collect Personal Data
We collect personal data:
during registration and use of the Online Store;
during correspondence with the Client (written, electronic, or verbal);
through cookies and log files when browsing our website;
occasionally from third parties or public sources.
Cookies: Our website uses cookies to improve user experience. For details, see our Cookie Policy.
Log files: We collect IP address, Internet service provider, browser, operating system, visit time, and visited pages.
5. Special Categories of Data
We do not process special categories of personal data.
6. Purposes of Data Processing
We process personal data to:
provide requested information and assistance;
identify and contact Clients and beneficial owners;
manage contractual relationships;
promote and offer additional services;
comply with regulatory requirements;
protect legal rights and cooperate with authorities.
Without this processing, we may be unable to provide services or assistance.
7. Legal Grounds for Processing
We process personal data based on:
Performance of a contract or steps prior to entering a contract;
Compliance with legal obligations;
Legitimate interests (e.g. fraud prevention, legal defense);
Consent, where required.
8. Data Retention
We retain personal data:
for the duration of the contractual relationship and until settlement of obligations;
for 10 years for accounting and tax documents, starting from January 1 of the year following the reporting period;
longer if required for legal proceedings;
until consent is withdrawn, when processing is based on consent.
9. Data Sharing & Transfers
We may share data with:
Service providers acting on our behalf;
Authorities (regulatory, tax, financial, judicial, enforcement), as required by law.
We will notify data subjects before transferring data to third countries or international organizations.
10. Data Security
We maintain appropriate technical and organizational measures to protect personal data from:
unauthorized access;
unlawful processing;
accidental loss, alteration, disclosure, or destruction.
We regularly review and update these measures.
11. Automated Decision-Making
We do not perform automated decision-making or profiling.
12. Data Subject Rights
Clients can exercise their rights by submitting a written request to the Company.
a. Right to Withdraw Consent
Clients may withdraw consent at any time (if processing is based on consent).
b. Right of Access
Clients have the right to:
confirm whether their personal data is processed;
access their personal data;
receive a free copy (reasonable limits apply).
c. Right to Rectification
Clients may request correction of inaccurate or incomplete data.
d. Right to Erasure ("Right to Be Forgotten")
Clients may request deletion of data where:
it is no longer needed;
consent is withdrawn;
processing is unlawful;
data must be erased under applicable law.
We may refuse deletion if processing is necessary for:
freedom of expression and information;
legal compliance;
public health purposes;
archiving, scientific, or statistical purposes;
legal claims.
e. Right to Restrict Processing
Clients may request restriction of processing when:
accuracy of data is contested;
processing is unlawful but deletion is not desired;
data is required for legal claims;
an objection to processing is pending review.
f. Right to Object
Clients may object to processing based on legitimate interests.
If justified, we will stop processing unless we demonstrate compelling legal grounds.
g. Right to Data Portability
Clients may request to:
receive their data in a structured, machine-readable format;
have data transmitted to another controller, where technically feasible.
h. Right to Lodge a Complaint
Clients may lodge complaints with the competent supervisory authority:
Commission for Personal Data Protection
Address: Sofia, ZIP 1592, 2 Prof. Tsvetan Lazarov St.
Phone: +359 (2) 91 53 519
Fax: +359 (2) 91 53 525
Email: kzld@cpdp.bg
Website: www.cpdp.bg
13. Policy Updates
If we make any significant changes to how we process personal data, to the categories of data we process, or to this Privacy Policy, we will promptly notify Clients and provide an updated version of this notice.
Contact Us
If you have any questions about this Privacy Policy or how we process your personal data, please contact us at: bg10supplies@gmail.com.
If you want, I can also generate a clean HTML version of this text so your developer can copy it directly into your website (with headings, bold text, and links formatted correctly). Would you like me to prepare that as well?