Privacy policy

1. Data controller

Controller: ФОРТУНА 1919 ЕООД, registered address гр. Плевен, ж.к. Дружба, бл. 424, вх. 3, ап. 8, България, privacy requests georgi_petrov_90@abv.bg.

2. Information and lawful purposes

When you order we process name, delivery address, telephone, email, products, payment-related data and purchase history to perform the contract (GDPR Art. 6(1)(b)). Tax and accounting records are processed to comply with legal obligations (Art. 6(1)(c)).

We may process technical data and correspondence for website security, fraud prevention and customer support based on legitimate interests (Art. 6(1)(f), subject to balancing). Optional marketing and cookie-based tracking need a valid basis, usually consent (Art. 6(1)(a)).

3. Recipients and international transfers

Necessary recipients may include hosting, technical suppliers, couriers, payment providers, accountants and authorities. Actual suppliers: Stripe and selected delivery couriers. Hosting, database, email and accounting suppliers must be inventoried before publishing. / Stripe и избрани куриери. Хостинг, база данни, имейл и счетоводни доставчици подлежат на уточняване..

Transfers outside the EEA: Not established from owner questionnaire; Stripe and hosting transfer locations must be verified. / Не е установено от формуляра; трябва да се проверят доставчиците Stripe и хостингът.. If applicable, the appropriate safeguards must be identified before publication.

4. Retention

We keep orders and accounting records only for applicable statutory periods and the documented retention schedule: The detailed retention schedule has not yet been confirmed. Accounting and tax records are retained for mandatory periods; enquiries and technical logs only as long as necessary, subject to a documented retention policy. / Конкретните срокове не са потвърдени. Счетоводните и данъчните документи се съхраняват за задължителните срокове, а запитванията и техническите записи — само доколкото е необходимо..

Marketing information

According to the owner, no marketing newsletter or SMS messages are sent and no Google Analytics, Meta Pixel or comparable advertising trackers are used at present. This remains subject to checking the deployed scripts.

5. Your rights

Subject to GDPR you may request access, correction, erasure, restriction, portability, object to processing, or withdraw consent without retroactive effect. Contact georgi_petrov_90@abv.bg. You may complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg).

6. Health information and automated decisions

You do not need to provide medical information to buy socks; do not put special-category data into ordinary forms. We do not knowingly collect children’s data. Significant automated decision-making: None reported / Няма, според предоставената информация.