Privacy Policy

1. Introduction
Super5.bg is a website operated by **„Super 5 Bulgaria“ EOOD**, UIC: 208112680, with its registered office and address of management at: 73 Mir St., 5th floor, Primorski District, Varna. We provide web design services and online store rentals.
Super5.bg processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Personal Data Protection Act (PDPA). The purpose of this policy is to inform you about what personal data we collect, how we process it, and what your rights are.

 
2. Data Controller
The data controller is **„Super 5 Bulgaria“ EOOD.**.
– **Mailing Address:** Varna, Primorski District, 73 Mir St., 5th Floor
– **Телефон:** 0877722585
– **Email:** info@super5.bg
– **Website:** www.super5.bg

3. What personal data do we collect?
Super5.bg collects and processes the following categories of personal data:
 3.1. Identification Information:
– First and last name
– Email address
– Phone number
– Mailing address (if necessary)
3.2. Data on access to and use of Services:
– IP address
– Information about the device and browser used
– Logins for accessing the platform
3.3. Billing Information:
– Name of an individual or legal entity
– Personal Identification Number (PIN)/Corporate Identification Number (CIN) (if necessary)
– Billing Address
– Bank account number (for refunds)
3.4. Communication Information:
– Messages sent via the website's contact form, email, live chat, Messenger, etc.
– Information provided in response to inquiries via email or phone
3.5. Marketing Data:
– Preferences for receiving newsletters and promotional offers
– History of interactions with our marketing campaigns

4. How do we collect personal data?
Personal data is collected in the following ways:
– When registering an account on Super5.bg
– When filling out a contact form or submitting an inquiry
– When entering into a service agreement
– Through the use of „cookies“ (see our Cookie Policy)

5. For what purposes do we process personal data?
Super5.bg processes personal data for the following purposes:
– Providing web design and online store rental services
– Entering into and performing contracts
– Issuing invoices and complying with accounting and tax requirements
– Providing technical support
– Improving services and personalizing the user experience
– Sending marketing messages (only with your consent)
– Protecting our legitimate interests, including preventing fraud

6. On what legal basis do we process personal data?
The processing of personal data is carried out on the following grounds:
– **Performance of a contract:** To provide the services you have requested.
– **Legal obligation:** To comply with the requirements of tax and accounting laws.
– **Legitimate interest:** To improve our services and protect our rights.
– **Consent:** To receive marketing communications.

7. Retention Period for Personal Data
Super5.bg retains personal data for the following periods:
– Contract and invoice data: 10 years (in accordance with the Accounting Act)
– Profile registration data: Until the user deletes the profile
– Marketing data: Until consent is withdrawn
– Access tokens: 1 year
Once the applicable retention period has expired, the data is deleted or anonymized.

8. With whom do we share personal data?
Super5.bg may share personal data with the following categories of recipients:
– Hosting service providers and technical support providers
– Accounting and Legal Consultants
– Government agencies (e.g., the National Revenue Agency) when required by law
– Payment institutions (when processing payments)
We do not transfer personal data to third countries or international organizations without appropriate safeguards.

9. Your Rights
Under the GDPR, you have the following rights:
– **Right of access:** To receive information about the personal data we process.
– **Right to Rectification:** To request the correction of inaccurate or incomplete data.
– **Right to erasure („right to be forgotten“):** To request the erasure of your data, where applicable.
– **Right to restriction:** To request that the processing of your data be restricted.
– **Right to data portability:** To receive your data in a structured format.
– **Right to Object:** You have the right to object to the processing of data based on legitimate interests.
– **Right to Withdraw Consent:** You may withdraw your consent to the processing of your data for marketing purposes.
To exercise your rights, please contact us at **privacy@super5.bg**.

10. Data Security
Super5.bg implements appropriate technical and organizational measures to protect personal data, including:
– Data Encryption
– Restricted access to the data
– Regular security checks

11. Security Breaches
In the event of a personal data breach that could jeopardize your rights, we will notify you without undue delay and will also inform the Personal Data Protection Commission.

12. Contacts with the supervisory authority
If you believe your rights have been violated, you can file a complaint with:
**Commission for Personal Data Protection**
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: 02 915 3 518
Website: www.cpdp.bg

13. Policy Changes
Super5.bg reserves the right to update this policy. Any changes will be posted on our website.