Privacy

Who we are

The controller of your personal data is Гиздилника, company registration number (ЕИК) 206434938, shop address Kalofer, ul. 9-ti Septemvri No. 3, Ет. 2. Contact us about anything to do with your data at gizdilnikkalofer@gmail.com.

What we collect when you order

Your name, phone, email, the chosen Econt office and the order itself — the pieces, prices, shipping, total and the language you ordered in.

We also keep how the order went: when we called you, whether it was confirmed, shipped, collected or cancelled, which emails we sent you, and staff notes on the order.

Orders with the same phone or email are linked in a customer record (name, phone, email, notes) so we know which orders are yours. If orders repeatedly go unconfirmed or uncollected, we may note in that record that we no longer accept online orders from you.

What we collect through the contact form

Your name, email, phone if you give it, and your message. If you later order with the same email or phone, the message is linked to your customer record.

Technical data

The server the site runs on keeps standard technical logs (for example IP address and time of the request) for security and troubleshooting.

To stop spam and too-frequent orders, the contact form and the checkout use your IP address briefly — the contact form keeps only a one-way fingerprint of it, for no more than an hour.

Why we use it, and on what basis

To confirm, ship and deliver your order and to send you the emails about it — because this is needed for the contract between us (Article 6(1)(b) of the General Data Protection Regulation, GDPR).

To answer your message — in our legitimate interest in replying to people who write to us, or as a step before a contract (Article 6(1)(f) and (b)).

For accounting and tax — because the law requires it (Article 6(1)(c)).

To protect ourselves from abuse — spam, fake orders and orders that are repeatedly not collected — in our legitimate interest (Article 6(1)(f)).

We do not use your data for advertising, we do not profile you and we do not sell it.

Who we share it with

The courier, Econt Express — your name, phone, the chosen office and the cash-on-delivery amount, so they can deliver the parcel.

The email service through which we send the order confirmation and messages about it — your name, email and the contents of the order.

The hosting provider whose servers run the site and our order system.

Where needed, an accountant and public authorities when the law requires it. If any of these providers processes data outside the European Economic Area, this happens only with appropriate safeguards under the GDPR.

How long we keep it

The personal details of an order — name, phone, email and notes — are kept for up to 12 months after the order closes (collected, cancelled or returned). They are then deleted automatically.

The record of the sale — what was sold, at what price and when — stays for the accounts for as long as the law requires, but without personal details.

Messages from the contact form are kept for up to 6 months after we receive them. The server’s technical logs are kept briefly and deleted automatically.

Cookies and browser storage

The site sets two cookies — gz_shop_view, which remembers the shop view you picked, and gz_last_order, for an hour after an order, to show the confirmation — and keeps your basket, your place in the shop while you look at a piece, and the fact that you closed the cookie notice in your browser’s storage. We use no analytics, advertising or tracking. Details are on the “Cookies” page.

Do you have to give it

Without your name, phone, email and an Econt office we cannot accept and ship the order. On the contact form the phone is optional.

Your rights

You can ask for access to your data and a copy of it, to have it corrected or erased, to restrict its processing, to receive it in a machine-readable form, or object to its processing. Email us at gizdilnikkalofer@gmail.com; we reply within a month and free of charge.

If you ask to be forgotten, we erase your personal details from the customer record and from all your closed orders at once. An order that is still open has to close first. The record of the sale stays for the accounts, but without personal details.

You also have the right to complain to the Commission for Personal Data Protection (КЗЛД, www.cpdp.bg).

Changes

We may update this notice. The current version is always on this page.