Cornilleau
BG EN

Privacy policy

Data controller

KAMO 67 EOOD (“КАМО 67” ЕООД), company ID (EIK) 205144024, registered office: Sofia, Lyulin 2 residential complex, bl. 216, entrance A, apt. 2. Tel. 0898 800 847, email: [email protected].

This policy describes how KAMO 67 EOOD collects, processes, stores and protects the personal data of its customers, in line with Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act and the guidance of the CPDP (the Bulgarian data protection authority).

What data we collect

  • When you order by phone or email: name, phone, email and delivery address.
  • When we issue an invoice: names, address and, where applicable, personal ID number or company details.
  • When you sign up for the newsletter: email address and chosen language. We keep them until you unsubscribe.
  • When you visit the site: we use only a necessary session cookie (see “Cookie information”).

Legal bases

  • legal obligation, e.g. issuing invoices and other accounting documents;
  • concluding or performing a contract;
  • your consent, when there is no other basis. Consent is freely given, specific, informed and unambiguous. You can withdraw it at any time without affecting processing done before withdrawal.

Retention

We keep data for as long as needed for its purpose or as required by law. Accounting documents are kept for 10 years. The newsletter email is kept until you unsubscribe.

Who has access

  • you, to your own data;
  • authorised employees of KAMO 67 EOOD;
  • processors acting on our behalf: an accounting firm, a courier company, and the site hosting and mail server providers;
  • authorities to which disclosure is required by law (tax authority, social security, police, court, prosecutor, etc.).

We do not sell or pass personal data to anyone else.

Security

We apply organisational and technical measures in line with the law and Regulation 2016/679: confidentiality, integrity, availability and resilience of systems, restoring data after an incident, regular testing of the measures, and choosing processors that meet the requirements.

Your rights

  • Access: you can get copies of the data we process. The request can be oral, written or by email. We may charge a reasonable administrative fee for extra copies.
  • Rectification of inaccurate data and completion of incomplete data.
  • Erasure (“right to be forgotten”) where the grounds in Art. 17 of the Regulation apply.
  • Restriction of processing under Art. 18.
  • Objection to processing.
  • Portability: receive your data in a structured, commonly used, machine-readable format and transfer it to another controller.
  • Withdrawal of consent at any time.

We do not carry out automated decision-making, including profiling. Our legitimate interest is providing services at the highest possible standard.

To exercise your rights, write to [email protected] or to the address above.

Complaints

You may lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, tel. +359 2 915 3580, email: [email protected], website: www.cpdp.bg.