Privacy Policy
This Privacy Policy has been developed in accordance with European and Bulgarian legislation, in direct response to the changes and requirements related to personal data. This document explains how “Boldaria8” Ltd. collects, uses, discloses, and protects the personal data of users and customers of the Website: https://boldaria.site
We want to assure you that maintaining your trust is our responsibility, and protecting your personal data is a priority to which we pay special attention. We take measures to prevent unlawful processing of personal data belonging to individuals.
This document contains information regarding the way personal data is processed, the types of personal data collected, the purpose of using the collected personal data, the access of third parties to this data, as well as the options you have in relation to the use of the personal data you provide. “Boldaria8” Ltd. collects certain information through the website https://boldaria.site, its Facebook page, and through Google Analytics. This document (“Privacy Policy”) describes our policies and procedures governing the collection and processing of this information, which identifies an individual user and may be used to contact them.
Oversight of the activities we carry out related to personal data is exercised by the following administrative authority:
Commission for Personal Data Protection (CPDP)
Address: Sofia 1431, 15 “Acad. Ivan Evstratiev Geshov” Blvd.
Phone: +359 2 915 35 18
Fax: +359 2 915 35 25
Email: kzld@government.bg, kzld@cpdp.bg
Site: www.cpdp.bg
Terms Used:
“Personal data” means any information related to an identified natural person or a natural person who can be identified.
“Data subject” is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing” may be a single operation or a set of operations performed on personal data by automated or other means, such as collection, recording, organization, structuring, storage or alteration, retrieval, consultation, disclosure by transmission or dissemination, making the data accessible, alignment, restriction, erasure, or destruction.
“Controller” is a natural or legal person, public authority, agency, or other entity that, alone or jointly with others, determines the purposes and means of the processing of personal data. In this case, the data controller is “Boldaria8” Ltd.
General Terms:
As a personal data controller, “Boldaria8” Ltd. has the right to collect and process the personal data provided by users of the Website, in compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of personal data, as well as the Personal Data Protection Act (PDPA).
The Regulation governs the use and security of your personal data to ensure better protection of individuals. The collection of personal data by “Boldaria8” Ltd. will be carried out in a transparent and secure manner, allowing us to offer you products and services tailored to your needs.
Personal Data You Provide:
The personal data you provide directly is processed and used for the purposes described in this Privacy Policy. Providing your personal data when using the website is not mandatory unless you wish to create a voluntary registration.
The personal data we collect when you voluntarily register are: an email address and an access password, which you validate in an encrypted form, without us having access to it or to its information.
This is information you must provide in order to create an account in the online store, and through which you can be personally identified.
The purposes for collecting the personal data listed above are described further in this Privacy Policy.
“Boldaria8” Ltd. processes your personal data solely for the purposes described below:
- To register and manage your account, as well as to communicate with you, resolve disputes, and address issues;
- The personal information you provide is used for managing product and service delivery orders, processing payments, communicating with you regarding orders, products, services, and promotional offers, as well as for providing product and service recommendations.
- We also use this data and information to improve the online commerce platform, to prevent or detect fraud or misuse that could harm the Website, and to enable third parties to perform logistics and other services for the Website.
- The Website uses your information to inform you about news and similar updates related to products and campaigns.
- To measure and track statistical patterns of user behavior on the site in order to improve our products;
- To send you regular newsletters, for which you have explicitly subscribed;
- For marketing purposes related to activities of the respective website;
- To send you marketing messages and information from third parties when we have explicitly received your consent. Your consent for this.
To complete an online order, you need to provide us with your first and last name, email address, delivery address, and phone number, as well as payment information (if you choose a payment method other than cash on delivery). The basic personal data you voluntarily provide will be used solely for processing, confirming, fulfilling, and delivering the goods you have purchased.
Transfer of Your Personal Data
The personal data processed about you, under conditions of confidentiality and only to the extent necessary, may be transferred to:
– Courier companies for the purpose of providing courier services in fulfillment of our obligations to you within the territory of the country.
What are your rights after providing your personal data to “Boldaria8” Ltd.?
Users subscribed to our newsletter can unsubscribe at any time if they wish to do so.
Trademarks
The trademarks used that are not owned by the STORE are protected by copyright and are the property of their respective owners.
The personal data controller is familiar with and follows the principles set out in the GDPR:
– personal data is processed lawfully, fairly, and transparently;
– personal data is collected for specific, explicit, and legitimate purposes and is not further processed in a way that is incompatible with those purposes;
– personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed;
– personal data is accurate and, where necessary, kept up to date;
– personal data is stored in a form that permits the identification of the data subjects for no longer than is necessary for the purposes for which the data is processed;
– personal data is processed in a manner that ensures an appropriate level of security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using suitable technical or organizational measures.
We carry out activities related to the processing of your personal data:
- 1. after obtaining your consent;
2. for the purpose of seamless customer service;
3. for the purpose of fulfilling our obligations to you.
Access to Data
We provide you with access and the ability to review, correct, update, or delete your personal data that you have shared with us.
Personal data collected automatically:
When you visit our pages, our web server automatically recognizes and collects your IP address, which is assigned by your internet service provider and does not personally identify you.
Aggregated information – Log Files – like many other websites, we receive information from log files (a set of system data about the user):
your IP address;
your ISP (Internet Service Provider);
the browser you use when visiting a site from the group (such as Google Chrome, Internet Explorer, or Mozilla Firefox);
the time you spent on a given site;
and which pages you visited on the site.
The information contained in these files includes:
A “cookie” is a data file stored on your device when you visit, browse, or use our Online Store. Cookies allow your actions and preferences to be remembered for a certain period of time so that you don’t have to re-enter them each time you visit the Website or move from one page to another.
Cookies can be disabled from your browser settings. However, please note that some functionalities of the website may not work properly if cookies are disabled.
We use Google Analytics to collect statistical information about the Users of the online store – for example, the browser you use to access our store, the country you are located in, your language, online behavior, and more. We collect this data to analyze what types of Users and in what ways they use the online store, which helps us improve the user experience. This information cannot be used to identify you personally.
You can opt out of Google Analytics data collection by downloading and installing the following browser add-on: Google Analytics opt-out browser add-on.
Our Website Uses the Facebook Pixel
The Facebook Pixel is an HTML code on our webpage that allows us to define, measure, and optimize audiences when running marketing campaigns.
The Facebook Pixel measures conversions across different devices, enables automatic creation of target groups from website visitors, as well as retargeting and the creation of dynamic ads.
We do not collect personal information directly through the Facebook Pixel; instead, we use the available user data to retarget them and direct them back to our website while they are browsing the Internet. However, this process does not provide us with any personal information about the individual user — for example, we do not know who the specific user is.
What we do to protect your personal data:
To prevent unauthorized access or disclosure and to ensure the proper use of your data, we apply appropriate technical and organizational measures to protect the information we collect and process.
When processing payment information, in order to make the shopping and payment process as safe and seamless as possible for you, we use Secure Sockets Layer (SSL). Secure Sockets Layer is a special cryptographic internet protocol for client–server communication that protects data transfer from malicious interference.
The password you provide when registering on the Website is encrypted to ensure protection against unauthorized access to your personal information.
Maintaining the confidentiality and security of your personal information is our highest priority, and we limit access to it only to those employees of “Boldaria8” Ltd. who need to interact with the data in order to perform their duties and enable us to provide our services to you. We will keep your information confidential unless its disclosure is required by law or necessary for technical reasons.
We store your personal information for as long as needed to ensure the effective operation of our website. In general, we retain your personal data for as long as your account exists on the Website or until you explicitly request that your data be deleted. The information you provide and that we collect will not be sold or transferred for compensation to anyone without your explicit consent.
Information may be disclosed if requested by the relevant state authorities and institutions, in accordance with and in the cases provided by Bulgarian law.
We take all reasonable measures to protect your personal information; however, when sharing information online, please keep in mind that data transmission over the Internet can never be completely secure, and full security cannot be absolutely guaranteed.
We may share your personal data in the following cases:
– In connection with ensuring the delivery or transportation of the goods you have purchased;
– To comply with a legal obligation;
– To prevent fraud or to ensure network and information security of our systems.
Breaches. Notification of Breaches.
Breaches
A data security breach occurs when the personal data for which “Boldaria8” Ltd. is responsible is affected by a security incident that compromises the confidentiality, availability, or integrity of the personal data. In this sense, a data breach occurs when there is a security violation leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data that is transmitted, stored, or otherwise processed.
Assessment of Breaches
After the respective personal data controller at “Boldaria8” Ltd. receives information about a breach, they must determine whether the specific event constitutes a personal data breach.
In the event of a personal data security breach that is likely to pose a risk to the rights and freedoms of individuals, the Controller, without undue delay and, where feasible, no later than 72 hours after becoming aware of it, shall notify the Commission for Personal Data Protection of the breach.
The Controller shall document every personal data security breach, including the facts related to the breach, its consequences, and the actions taken to address it.
Your rights and options regarding the processing of your personal data:
Regarding the processing of your personal data, you have the following rights:
1. You are entitled to request access and receive information about the personal data stored about you, as well as information regarding the purposes of processing, the categories of personal data, the recipients to whom your data may be disclosed, and more.
2. You have the right at any time to request the correction of inaccurate data related to you, as well as the completion of incomplete data when appropriate and/or necessary for the purpose for which the data is processed.
3. You may file a complaint with the Commission for Personal Data Protection in the event of a violation of your rights or unlawful processing of your personal data.
4. You may withdraw your consent for the use of your personal data at any time.
In such cases, withdrawing your consent for the use or processing of your personal data may result in the inability to use certain products or services offered by our Website.
5. If you decide that you do not want “Boldaria8” Ltd. to process your personal data, you have the right to be “forgotten,” meaning you can request that your personal data be deleted at any time, provided one of the following conditions applies:
5.1. your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
5.2. you have withdrawn your consent for processing your personal data;
5.3. your personal data is being processed unlawfully;
5.4. you have objected to the processing of your personal data;
5.5. other cases provided for in the legislation governing personal data protection.
If a data subject chooses to be “forgotten” and their personal data is deleted, this process is irreversible and the data cannot be restored later.
In exercising your rights under Article 17 of the GDPR, “Boldaria8” Ltd. deletes only the personal data of the subject, but not publicly accessible posts the subject has made in forums, comments on publications and articles on the media’s websites, posts, or blog entries.
Contact Details for the Data Controller:
Company: “Boldaria8” Ltd.
Data Controller: Stilyana Petkova
Burgas, postal code 8000
Phone: 0878108676
Email: office@boldaria.site
Changes to This Privacy Policy
This Privacy Policy may be unilaterally amended by “Boldaria8” Ltd., and we will appropriately notify all Users of the Service of any such changes.
Date of last update: September 2025