Our privacy policy

Who processes your data

The controller of personal data collected through bleustorm.bg (the “Site”) is EL EY APART EOOD, UIC 204872578, with its registered office and address of management at Entrance A, Block 6A, Fondovi Zhilishta, Serdika District, Sofia 1233 (“we”, the “Company”).

For questions about data protection, write to info@bleustorm.bg.

The Company is not required to appoint a data protection officer and has not appointed one.

Who this policy applies to

This policy describes how we process the personal data of visitors to the Site and of people who contact us through it.

Processing is carried out in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation) and the Bulgarian Personal Data Protection Act.

The Site is intended for adults only. We do not knowingly collect data from persons under 18. If we find that we have received such data, we delete it.

What data we collect

The Site has no user registration, accepts no orders and processes no payments. We collect the following categories of data:

• Contact form data: name, email address, subject of the enquiry and content of the message, together with anything else you choose to write in it;
• Direct correspondence: the data contained in your message when you email us directly;
• Technical data when the form is sent: IP address, date and time of sending, and the page from which the message was sent. This data is used solely to protect against unwanted messages;
• Cookie data: the necessary cookies that store your age confirmation;
• Standard server logs: the access logs that the hosting provider keeps automatically for security and diagnostics.

We do not collect special categories of personal data within the meaning of Article 9 of the Regulation, such as data about health, ethnic origin, or religious or political beliefs. Please do not send them to us through the contact form.

Why we process this data

• To reply to your enquiry. Legal basis: your consent, given when you send the form, and our legitimate interest in corresponding with people who contact us;
• To protect the Site from abuse and unwanted messages. Legal basis: legitimate interest;
• To store your age confirmation. Legal basis: providing the service you have expressly requested, and complying with the requirement that alcoholic beverages are not presented to minors;
• To comply with legal obligations, where they arise. Legal basis: legal obligation.

We do not carry out profiling and do not make decisions about you by wholly automated means. We do not use your data for marketing messages unless you have expressly asked us to.

Cookies

The Site uses only technically necessary cookies. There are no visitor analytics tools, no advertising pixels and no cross site tracking.

A full list of the cookies used and how long they last can be found in the Cookie Policy.

Who has access to the data

We do not sell or rent out personal data. It can be accessed by:

• employees and representatives of the Company who handle enquiries;
• the Site’s hosting and email provider, whose servers are located in the European Union;
• the person who provides technical support for the Site, only to the extent needed for that support;
• Google Ireland Limited, but only if you choose to load the map on the Contact page. Until then nothing is sent to Google;
• public authorities, where required by law.

When the map is loaded, Google may transfer data outside the European Economic Area under the terms of its own policies. If you do not want this, simply do not load the map. The address is also given as text.

How long we keep data

Messages from the contact form are not stored in the Site’s database. They are sent as email and kept in our mailbox for up to 12 months after the correspondence ends, unless the enquiry leads to a business relationship that requires a longer period.

Technical data used to protect against unwanted messages is kept briefly and deleted automatically. Cookies are kept for the period stated in the Cookie Policy.

Security

The Site uses an encrypted connection (HTTPS). Access to the administration area is limited to authorised persons, and the contact form is protected against automated abuse.

No information transmitted over the internet can be guaranteed to be completely secure. Please do not send bank details, passwords or other confidential information through the form.

Your rights

In relation to the data we process about you, you have the right:

• to access it and receive a copy;
• to ask for inaccurate data to be corrected;
• to ask for it to be erased;
• to ask for processing to be restricted;
• to object to processing based on legitimate interest;
• to receive your data in a structured form and transfer it to another controller;
• to withdraw your consent at any time, without affecting the lawfulness of processing carried out before then.

To exercise any of these rights, write to us at info@bleustorm.bg. We reply within one month. For complex or numerous requests this period may be extended, and we will let you know if it is.

To protect your data, we may ask for additional information to confirm your identity.

Right to complain

If you believe we are processing your data unlawfully, please write to us first. You also have the right to lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, tel. 02 915 3 518, kzld@cpdp.bg, cpdp.bg.

Changes to this policy

We may update this policy when the way the Site works changes, or when the law requires it. The current version and its effective date are published on this page.

This policy should be read together with the Terms and Conditions and Cookie Policy.

Controller details