GDPR Policy

AVETOGRAPHIC EOOD processes personal data in accordance with the General Data Protection Regulation, applicable Bulgarian data protection law and the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and accountability.

This policy supplements our Privacy Policy and provides additional information about legal bases and the rights available to individuals in the European Economic Area.

We process data when necessary to take steps at your request before entering a contract or to perform a contract, including preparing quotations, managing orders, arranging production and delivering goods or services.

We may also process data to comply with legal obligations, based on legitimate interests such as operating and protecting our business, or with consent where consent is the appropriate legal basis. Consent may be withdrawn at any time without affecting earlier lawful processing.

Subject to legal conditions, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing and receipt of eligible data in a portable format.

You may also object to direct marketing at any time and request information about safeguards used for international transfers. We do not make decisions producing legal or similarly significant effects using solely automated processing through this website.

Send a clear request to avetographik.eood@gmail.com and describe the right you wish to exercise. We may request reasonable information to verify identity and protect personal data from unauthorised disclosure.

We aim to respond within one month. That period may be extended by up to two further months for complex or numerous requests, in which case we will explain the reason for the extension.

Where a supplier processes personal data on our behalf, we select providers appropriate to the service and use contractual and organisational safeguards. Processors may act only on documented instructions unless the law requires otherwise.

Access to personal data is limited according to business need. We review relevant processes and respond to suspected personal data incidents in accordance with applicable notification requirements.

We encourage you to contact us first so that we can address your concern. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority in the European Economic Area.

We review this policy when our processing activities, technology or legal obligations change. The date shown at the top identifies the current version.