Поверителност

1. General

1.1. “OLIMP – 7” EOOD – a commercial company with UIC: 130417221, with registered office and management address at 25 ‘Hristo Botev’ str., Buzovrad, zip code 6159, municipality of Kazanlak (“We” or “Us”) takes the confidentiality of your information extremely seriously. This Privacy Policy aims to inform You – as a user of our services – about our practices for collecting, using and disclosing personal data that may be provided to Us through Our website and other digital products that We provide, or that are collected through other ways, such as an online form, e-mail or telephone communication.

1.2. In this policy, “www.biorosewater”, hereinafter referred to as the “Site”, also includes any website or other electronic channel (e.g. e-mail) through which You provide personal data to Us or You receive access to Our services.

1.3. This policy is governed by the EU General Data Protection Regulation (Regulation (EU) 2016/679), hereinafter referred to as the “GDPR”, in force from 25 May 2018.

2. Grounds for processing personal data

Your personal data that We store are processed on one or more of the following legal grounds:

● the processing is necessary for the legitimate interests of each of the parties: You, as buyer and Us, as seller. Legitimate interest in this context means a justified interest that We or a third party have in processing your personal data, provided that this interest of Ours does not outweigh Your interests in protecting personal privacy and security;

● You have given your explicit consent to the processing of Your personal data for the specific purposes described in this policy;

● the processing is necessary for the performance of a contractual obligation between You and Us or to take steps at Your request prior to entering into an agreement.

3. Personal data that we collect

3.1. We may collect and process one or more of the following types of personal data (information that can uniquely identify you):

● Communication information – personal data that We hold if You have interacted with Us through a general inquiry or request;

● Technical information – details of Your visits to the Site, the resources used and the pages You have accessed.

3.2. If You do not provide the above personal data:

● We may not be able to fulfill Your request or purchase (due to lack of communication information);

● The Site may not function properly (due to lack of technical information).

4. Cookies

4.1. Cookies are small text files that are stored on your Device through your internet browser. They contain only information related to your preferences and do not include personal data allowing anyone to identify you.

4.2. Cookies help determine the usefulness, interest and number of visits to Our Site, allowing faster and more efficient browsing and eliminating the need to repeatedly enter the same information.

4.3. Types of cookies and their purposes for Our use:

● Strictly necessary cookies: allow you to navigate the Site and use its applications, as well as access to protected areas. Without them, some services may not be provided;

● Analytical / functional cookies: used by Us or by external service providers to analyze how the Site is used and how it functions. For example, these cookies track which pages are most frequently visited and from which geographical locations our visitors come.

4.4. These cookies include Google Analytics cookies.

● Google Analytics stores cookies to compile statistics on traffic and the volume of visits to this Site. By using the Site, you agree to the processing of data about you by Google;

● Google Inc. is a company certified under the “EU–U.S. Data Privacy Framework” mechanism (formerly “Privacy Shield”), which ensures that all transferred data will be treated with a level of protection adequate to the European legislation;

● Google Analytics’ cookies are stored on their private servers. Google undertakes not to share them with third parties, except in cases where it is necessary for the functioning of the system or when required by law. According to Google, users’ IP addresses are not stored;

● If You wish, You can use the Google Analytics deactivation add-on for a browser, through which You can refuse of analytical cookies’ use in all browsers.

4.5. Managing cookies by You:

4.5.1. All browsers allow users to accept, refuse or delete cookies through browser settings (“options” or “preferences”);

4.5.2. Please note that disabling cookies may prevent the proper functioning of some web services or parts of the Site;

4.5.3. Users disable the use of cookies at any time through their browser settings, for example:

• Google Chrome;

• Microsoft Edge / Internet Explorer;

• Mozilla Firefox;

• Apple Safari.

5. Data Storage

Our current data storage policy provides for the erasure or destruction (when it is technically possible) of the personal data that We store about You, in accordance with the following principles:

• Personal data stored for marketing or business purposes – for the period during which they are necessary for You and Us to implement the relevant commercial purposes;

• For personal data’s categories that not being specifically defined in this notice, unless applicable law requires otherwise, the storage period is considered to be 3 years from the date of receipt of the data by Us or (if later) – from the expiring of the term of the relevant contract, agreement or interaction with the person;

• These terms may be extended or shortened in case of having a legal basis (e.g. in the event of pending legal proceedings or an inspection by a public authority).

• If You wish to request the alteration or erasure of personal data that We hold about You, please see section 9 below, which describes Your data protection’s rights.

6. Your data’s disclosure

6.1. We do not disclose any personal data that You provide to Us to third parties, except in the following cases:

• We may store technical information with external hosting partners;

• Certain service providers (including technical support) may have access to technical information;

• When We are required by law to disclose or share personal data (e.g. by court order or to prevent fraud or other crime).

6.2. In any case, other than the above mentioned, we will not provide Your information to third parties without Your express consent. If We transfer personal data to a third party, We will take the necessary measures to ensure that Your rights are protected and that the third party complies with the terms of this policy.

7. Electronic notices and other forms of communication

When We send e-mails or other electronic communications, We comply with the requirements of the Directive on privacy and electronic communications (Directive 2002/58/EC). In particular: We clearly indicate the nature of the message and the identity of the sender and provide You with the opportunity at any time to refuse to receive electronic communications from Us in the future.

8. Security

8.1. All of Your data that We collect is stored in the administrative panel of the Site, for which We take all reasonable organizational and technical measures to ensure the protection of the information that We collect from You.

8.2. We inform our employees of their obligations to protect the confidentiality and security of personal data. In addition, we take reasonable steps to ensure that employees of third parties who work on Our behalf also comply with these obligations.

8.3. Unfortunately, the transmission of information over the Internet is not completely secure. Although We will do our best to protect Your personal data, We cannot guarantee absolute security when transmitting it to our Site. Once We receive your information, We will implement the security procedures and measures described in this policy to prevent unauthorized access.

9. Your personal data’s rights

9.1. In accordance with the General Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act (PDPA), You have the following rights in relation to You personal data that We store:

• Right to information: You have the right to know about Our personal data protection and data processing activities;

● Right to access: You can make a so-called Right of access by the data subject to request information about Your personal data that We store (free of charge, except for reasonable costs for repeat requests). If You wish to make such request, please contact Us as described below;

● Right to rectification: Please inform Us if the information We hold about You is incomplete or inaccurate in any way and We will update Our records as soon as possible, but in any event within one month; We will take reasonable steps to communicate the change to any third parties to whom We have provided the same information;

● Right to erasure (“the right to be forgotten”): Please inform Us if You no longer wish us to store Your personal data (although it is not practically possible for Us to provide Our services without storing Your personal data). Unless We have compelling reasons to refuse erasure, upon receipt of such a request, We will erase the requested personal data within one month. The data may continue to exist in a specified backup copy, but We will take steps to ensure that such data is not accessible. We will notify You of the ensure of any third parties to whom we have provided the same information;

● The right to restriction of processing: You can request that We cease processing Your personal data in certain ways, without erasure;

● The right to data portability: You have the right to receive a copy of the personal data that We hold about You in a commonly used and easily stored format (please inform Us of the format that is convenient for You). You can also request that We transfer your personal data directly to a third party (where technically possible).

● The right to object: Unless We have legitimate grounds for such processing, You may object to the use of Your personal data if You believe that Your fundamental rights and freedoms are affected. You may also object if We use Your personal data for direct marketing purposes (including profiling) or for research or statistical purposes. Please inform Us of your objection and We will in good faith cease such processing, unless We have legitimate grounds to the contrary.

● Right to withdraw consent: If Your consent is the basis for the processing of Your personal data, You have the right to withdraw your consent at any time. Even if You have not explicitly consented to the processing by Us, You also have the right to object (see above).

9.2. All applications and notifications in connection with the exercise of the above rights must be submitted in writing to the following postal address: 25 ‘Hristo Botev’ str., Buzovrad, zip code 6159, municipality of Kazanlak or by e-mail: info@biorosewater.bg

9.3. We will make every effort to fulfill each request as soon as possible, but no later than one month from the date of its receipt, unless a longer period is necessary due to the complexity or volume of the requests.

10. Notifications of changes to the content of this policy

With each change to this Privacy Policy, We will publish the updated version on the Site, so that You are always informed about what information We collect, how We use it and under what conditions (if any) We share it with third parties.

11. Contact us

If at any time You wish to contact us regarding this policy, express Your opinion about our privacy practices or submit an inquiry or complaint regarding the processing of Your personal data, You can do so at the e-mail address, according to item 9.2 above.

This Privacy Policy has been adopted by the manager of “OLIMP-7” EOOD and has been updated as of: 13.10.2025.