Data Controller: „ARINA 24“ EOOD, EIK: 207800655 Registered Address: 10 Ivan Kirkov St., Ent. B, App. 3, Triaditsa District, Sofia, Bulgaria Manager: Pavlo Anfilov E-mail: [email protected]

1. GENERAL PROVISIONS

This policy complies with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act (ZZLD) of the Republic of Bulgaria.

2. DATA COLLECTED

We process the following categories of data:

• First and Last Name: for customer identification and document processing.

• Delivery Address: for the execution of the purchase and sale agreement.

• Phone and E-mail: for order confirmation and logistical communication.

• IP Address and Cookies: for the technical maintenance and operation of the website.

3. PURPOSES OF PROCESSING

• Receipt, processing, and delivery of orders.

• Accounting and invoicing in accordance with the requirements of the National Revenue Agency (NAP).

• Communication with customers regarding orders placed.

4. TRANSFER TO THIRD PARTIES

Data is provided exclusively to:

• Courier Services (for the delivery of goods).

• Payment Operators (for processing transactions).

• State Authorities (where there is a legal basis).

5. RETENTION PERIODS

• Accounting Documents: 10 years (in accordance with the Accountancy Act).

• Profile Data: until an explicit request for deletion is received from the user.

6. USER RIGHTS

You have the right to:

• Access and rectify your personal data.

• Erasure (“the right to be forgotten”).

• Restriction of processing.

• Data portability.

• Lodge a complaint with the Commission for Personal Data Protection (KZLD).

7. CONTACT

To exercise your rights, please send a written request to the e-mail address mentioned above.