Privacy

This policy explains how Джобни зверчета processes personal data when you use the site and when you place an order. It is aligned with the General Data Protection Regulation (GDPR) and applicable Bulgarian legislation.

1. Data controller

Controller: Джобни зверчета.

For questions and to exercise your rights: info@djobnizvercheta.com.

2. What data we process

• Order data: name, phone, email, delivery details (address, office or locker), selected products and quantities, order notes, order number and status.
• Communication: the content of messages relating to an order or an enquiry.
• Cart data in your browser: selected products and quantities may be stored locally on your device (e.g. via localStorage) so that we can keep your cart between visits. This is necessary for the store to function.
• Technical and analytics data (only where consent to analytics cookies has been given): for example pages visited, clicks, scrolling and other interactions, approximate location/device, session identifiers and masked session recordings — through the tools described below.

We do not create customer accounts for purchases. We do not store bank card data — payment is cash on delivery.

3. Purposes and legal bases

• Performance of a contract — accepting, confirming, processing and delivering the order and communicating about it; keeping the cart in your browser.
• Legal obligation — retaining data required for accounting and tax purposes, where applicable.
• Legitimate interest — protection against abuse and improving how we handle specific enquiries, to the extent the data subject’s interests do not override this.
• Consent — for analytics cookies and the related tools (Google Tag Manager, Google Analytics and Microsoft Clarity). Consent can be withdrawn at any time through the cookie banner/settings.

We do not currently send marketing newsletters. If we introduce email marketing in the future, it will only be on the basis of separate consent, which you can withdraw at any time.

4. Who we share data with

Data is shared only where it is necessary for the purposes above:

• Courier companies (e.g. Econt, Speedy, Sameday, BOX NOW, Bulgarian Posts) — to deliver the parcel.
• Email service provider — to send order confirmations and messages.
• Google Ireland Limited / Google LLC — where you have given consent: via Google Tag Manager and Google Analytics for visit statistics.
• Microsoft Ireland Operations Limited / Microsoft Corporation — where you have given consent: via Microsoft Clarity for heatmaps, masked session recordings and interaction analytics. Clarity is linked with Google Analytics so analytics sessions can be correlated with the corresponding recordings. See the Microsoft Privacy Statement.
• Cookiebot — the cookie consent management platform; it records your choice (necessary for the consent banner to work).

We do not sell personal data to third parties.

5. Transfers outside the EEA

When Google Tag Manager and Google Analytics are used, data may also be processed outside the European Economic Area (e.g. in the USA) by Google. Where such transfers take place, we rely on the applicable safeguards (e.g. standard contractual clauses and/or Google’s data protection terms), to the extent these are in place. You can refuse analytics cookies through the consent banner.

When Microsoft Clarity is used, data may be processed by Microsoft companies outside the EEA. Microsoft's applicable safeguards, including standard contractual clauses where relevant, apply to such transfers.

6. Retention period

• Order data and related accounting records — in line with the statutory periods in Bulgaria (often up to 5 years for accounting documents, unless the law requires otherwise or a longer period).
• Cart data in your browser — until you clear it, delete site data, or local storage expires.
• Analytics data — according to the settings of the respective tool and/or until consent is withdrawn, after which we stop new collection through these tools as far as technically possible. Microsoft Clarity generally retains session recordings for up to 30 days and heatmap data for up to 13 months.
• Cookie consent records — for the period needed to demonstrate consent given or refused.

7. Your rights

Under the GDPR you have the right to:

• access your personal data;
• rectification of inaccurate data;
• erasure (“the right to be forgotten”), where the statutory conditions are met;
• restriction of processing;
• object to processing on certain grounds;
• data portability, where applicable;
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal);
• lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) — www.cpdp.bg.

Please send requests to info@djobnizvercheta.com. We may ask for reasonable identification in order to protect your data.

8. Cookies and similar technologies

The site uses cookies and similar technologies. Analytics ones are loaded only after your consent through the cookie banner.

• Necessary — for the basic operation of the site, the cart and remembering your cookie choice (consent/refusal). These do not require prior consent.
• Analytics — via Google Tag Manager, Google Analytics and Microsoft Clarity, so we can understand how the site is used (e.g. pages visited, clicks, scrolling, heatmaps, masked session recordings and aggregate statistics). They are loaded only if you accept analytics cookies.

You can change or withdraw your consent at any time through the cookie banner/settings icon on the site.

The full list of the specific cookies this site uses is kept up to date automatically by the consent platform and is published below.

9. Children

The products are intended for children (ages 3+), but orders and the provision of personal data are carried out by adult buyers. We do not knowingly process children’s personal data for profiling or marketing. Delivery details are used solely to fulfil the order.

10. Security

We apply appropriate technical and organisational measures to protect data. No system, however, is completely secure; if you suspect an incident, please contact us at the email address above.

11. Related pages

The purchase terms are in the Terms & conditions. Information about delivery and payment is on Delivery & payment.

12. Changes to this policy

We may update this policy when our practices or the legislation change. The current version is published on this page. For material changes affecting data already collected, we will inform you in an appropriate way where the law requires it.