Privacy policy

1. Data Controller

The controller responsible for processing your personal data is:

"Stancho Kolev" Ltd. Brand: Koleff Chocolatier Company Registration No. (UIC): 107003224 Registered address: 1 Ribarska Str., 5300 Gabrovo, Bulgaria Email: koleff@koleff.com Phone: +359 66 801 088 Website: koleff.com

If you have any questions regarding the processing of your personal data, you can contact us using the details above.

2. Personal Data We Process

Depending on how you use our website, we may process the following categories of personal data:

We do not ask website visitors to provide special categories of sensitive personal data.

3. How We Use Personal Data

We may process personal data for the following purposes:

• responding to enquiries;
• communicating with customers, business partners and potential partners;
• processing enquiries relating to wholesale and Private Label manufacturing;
• providing requested information about our products and services;
• ensuring the proper and secure operation of the website;
• preventing abuse, fraud and technical attacks;
• complying with legal obligations;
• protecting our legal rights and legitimate interests.

We will not use personal data submitted through an enquiry for unrelated purposes without an appropriate legal basis.

4. Legal Basis for Processing

Depending on the circumstances, we may process personal data on the following legal bases:

Taking steps at your request prior to entering into a contract or performing a contract - for example, when you contact us regarding our products, wholesale opportunities or Private Label manufacturing.

Legal obligation - where we are required to retain, process or disclose certain information under applicable law.

Legitimate interests - for example, protecting the website, preventing abuse, maintaining information security and establishing, exercising or defending legal claims.

Consent - where applicable law requires your prior consent for a particular type of processing. Where processing is based on consent, you may withdraw your consent at any time.

5. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose for which it was collected.

Information from general enquiries is retained for a reasonable period necessary to handle the communication and any related follow-up.

Where communication results in a contractual or commercial relationship, certain information may be retained for a longer period in accordance with our legal obligations and applicable limitation periods.

Technical information and security logs are retained only for as long as necessary to maintain the security and proper operation of our systems.

6. Who We May Share Personal Data With

We do not sell your personal data or provide it to third parties for their own marketing purposes.

Where necessary, certain personal data may be processed by service providers that assist us with the operation of our website and business communications, including:

• hosting providers;
• email service providers;
• technical support providers;
• providers of services necessary for website security and operation;
• accounting, legal or other professional advisers where necessary;
• public authorities or other competent bodies where disclosure is required by law.

Where such providers process personal data on our behalf, we take appropriate measures to protect that information.

7. International Data Transfers

Where a service provider processes personal data outside the European Economic Area (EEA), we take the necessary measures to ensure an appropriate level of protection in accordance with the GDPR.

Such measures may include an adequacy decision by the European Commission, Standard Contractual Clauses or another transfer mechanism permitted under applicable law.

8. Cookies

The website may use cookies and similar technologies necessary for its operation, security and user experience.

Where cookies or similar technologies require prior consent under applicable law, they will only be activated after such consent has been obtained.

Further information about the technologies used, their purposes and retention periods may be provided in a separate Cookie Policy.

Cookie policy →

9. Your Rights

Under the GDPR, and where the relevant legal requirements are met, you have the right to:

• obtain information about whether we process your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain types of processing;
• receive your data in a portable format where the right to data portability applies;
• withdraw your consent at any time where processing is based on consent;
• lodge a complaint with the competent supervisory authority.

To exercise any of these rights, please contact us using the contact details provided at the beginning of this Privacy Policy.

10. Complaints to a Supervisory Authority

If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the Bulgarian supervisory authority:

Commission for Personal Data Protection (CPDP) 2 Prof. Tsvetan Lazarov Blvd. 1592 Sofia Bulgaria

You may also contact us first so that we have an opportunity to address your concerns.

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, alteration or unauthorised disclosure.

However, no method of transmitting or storing information over the internet can guarantee absolute security.

12. External Links

Our website may contain links to websites or services operated by third parties.

We do not control how these third parties process personal data. We recommend reviewing their privacy policies before providing them with personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, the services we use, our business practices or applicable legislation.

The current version will always be available on koleff.com, with the date of the latest update shown at the top of this document.