Privacy

This policy explains how Джобни зверчета processes personal data when you use the site and when you place an order. It is aligned with the General Data Protection Regulation (GDPR) and applicable Bulgarian legislation.

1. Data controller

Controller: [Фирма / ЕООД], company number [ЕИК], address [Адрес по регистрация], VAT no. [ДДС № — ако е приложимо].

For questions and to exercise your rights: hello@djobnizvercheta.bg, tel. +359 88 000 0000.

2. What data we process

• Order data: name, phone, email, delivery details (address, office or locker), selected products and quantities, order notes, order number and status.
• Communication: the content of messages relating to an order or an enquiry.
• Cart data in your browser: selected products and quantities may be stored locally on your device (e.g. via localStorage) so that we can keep your cart between visits. This is necessary for the store to function.
• Technical and analytics data (only where consent to analytics cookies has been given): for example pages visited on the site, approximate location/device, session identifiers — through the tools described below.

We do not create customer accounts for purchases. We do not store bank card data — payment is cash on delivery.

3. Purposes and legal bases

• Performance of a contract — accepting, confirming, processing and delivering the order and communicating about it; keeping the cart in your browser.
• Legal obligation — retaining data required for accounting and tax purposes, where applicable.
• Legitimate interest — protection against abuse and improving how we handle specific enquiries, to the extent the data subject’s interests do not override this.
• Consent — for analytics cookies and the related tools (Google Tag Manager and Google Analytics). Consent can be withdrawn at any time through the cookie banner/settings.

We do not currently send marketing newsletters. If we introduce email marketing in the future, it will only be on the basis of separate consent, which you can withdraw at any time.

4. Who we share data with

Data is shared only where it is necessary for the purposes above:

• Courier companies (e.g. Econt, Speedy, Sameday, BOX NOW, Bulgarian Posts) — to deliver the parcel.
• Email service provider — to send order confirmations and messages.
• Google Ireland Limited / Google LLC — where you have given consent: via Google Tag Manager and Google Analytics for visit statistics.
• Cookiebot — the cookie consent management platform; it records your choice (necessary for the consent banner to work).

We do not sell personal data to third parties.

5. Transfers outside the EEA

When Google Tag Manager and Google Analytics are used, data may also be processed outside the European Economic Area (e.g. in the USA) by Google. Where such transfers take place, we rely on the applicable safeguards (e.g. standard contractual clauses and/or Google’s data protection terms), to the extent these are in place. You can refuse analytics cookies through the consent banner.

6. Retention period

• Order data and related accounting records — in line with the statutory periods in Bulgaria (often up to 5 years for accounting documents, unless the law requires otherwise or a longer period).
• Cart data in your browser — until you clear it, delete site data, or local storage expires.
• Analytics data — according to the settings of the respective tool and/or until consent is withdrawn, after which we stop new collection through these tools as far as technically possible.
• Cookie consent records — for the period needed to demonstrate consent given or refused.

7. Your rights

Under the GDPR you have the right to:

• access your personal data;
• rectification of inaccurate data;
• erasure (“the right to be forgotten”), where the statutory conditions are met;
• restriction of processing;
• object to processing on certain grounds;
• data portability, where applicable;
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal);
• lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) — www.cpdp.bg.

Please send requests to hello@djobnizvercheta.bg. We may ask for reasonable identification in order to protect your data.

8. Cookies and similar technologies

The site uses cookies and similar technologies. Analytics ones are loaded only after your consent through the cookie banner.

• Necessary — for the basic operation of the site, the cart and remembering your cookie choice (consent/refusal). These do not require prior consent.
• Analytics — via Google Tag Manager and Google Analytics, so we can understand how the site is used (e.g. pages visited, aggregate statistics). They are loaded only if you accept analytics cookies.

You can change or withdraw your consent at any time through the cookie banner/settings icon on the site. A detailed list of the specific cookies may be added by the consent platform’s cookie policy generator once it is deployed.

9. Children

The products are intended for children (mainly ages 3–8), but orders and the provision of personal data are carried out by adult buyers. We do not knowingly process children’s personal data for profiling or marketing. Delivery details are used solely to fulfil the order.

10. Security

We apply appropriate technical and organisational measures to protect data. No system, however, is completely secure; if you suspect an incident, please contact us at the email address above.

11. Related pages

The purchase terms are in the Terms & conditions. Information about delivery and payment is on Delivery & payment.

12. Changes to this policy

We may update this policy when our practices or the legislation change. The current version is published on this page. For material changes affecting data already collected, we will inform you in an appropriate way where the law requires it.