Privacy Policy

Popesko.com

______________________________________

Privacy Policy of Popesko.com

Effective Date: January 11, 2024

At Popesko.com, we are committed to protecting your privacy and handling your personal data in a transparent and secure manner. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, create an account, place an order, or otherwise interact with us.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Kristiyan Krasimirov Popov – Owner Of Popesko
Address: g.k Serdika 9, et.13, ap.42 Sofia, Bulgaria 1379
Email: support@popesko.com
Website: popesko.com

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity and Contact Information

  • First name and last name
  • Email address
  • Telephone number
  • Billing address
  • Shipping address

Order and Transaction Information

  • Products purchased
  • Order history
  • Payment method
  • Delivery information
  • Transaction records

Payment Information

Payment card details are processed securely by our third-party payment service providers. We do not store complete payment card information on our servers.

Technical Information

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Language preferences
  • Date and time of access

Usage Information

  • Pages visited
  • Products viewed
  • Search queries
  • Clickstream data
  • Website interaction and preferences

Communication Information

  • Customer support requests
  • Emails and messages sent to us
  • Feedback, reviews, and survey responses

3. How We Collect Your Data

We collect personal data:

  • Directly from you when you create an account, place an order, subscribe to our newsletter, or contact us.
  • Automatically through cookies and similar technologies when you use our website.
  • From third-party service providers involved in payment processing, delivery services, analytics, and fraud prevention.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds under Article 6 of the GDPR:

Performance of a Contract

We process your personal data to:

  • Process and fulfill orders
  • Deliver products
  • Process payments
  • Provide customer support

Legal Obligations

We process personal data where necessary to comply with:

  • Tax laws
  • Accounting requirements
  • Consumer protection laws
  • Other applicable legal obligations

Legitimate Interests

We may process personal data to:

  • Improve our website and services
  • Maintain website security
  • Prevent fraud and abuse
  • Analyze business performance
  • Respond to customer inquiries

We ensure that our legitimate interests do not override your fundamental rights and freedoms.

Consent

We rely on your consent for:

  • Marketing communications where required by law
  • Non-essential cookies and tracking technologies
  • Personalized advertising where applicable

You may withdraw your consent at any time.

5. How We Use Your Personal Data

We may use your personal data to:

  • Process and deliver orders
  • Manage customer accounts
  • Provide customer support
  • Send order confirmations and updates
  • Improve our products and services
  • Personalize your shopping experience
  • Prevent fraud and unauthorized activity
  • Comply with legal obligations
  • Send marketing communications where permitted by law

6. Sharing Your Personal Data

We may share your personal data with:

Service Providers

Including:

  • Payment processors
  • Courier and logistics companies
  • Hosting providers
  • Cloud service providers
  • Analytics providers
  • Customer support platforms

Professional Advisors

Including legal, accounting, and auditing service providers where necessary.

Government Authorities

Where disclosure is required by law, regulation, court order, or legal process.

Business Transactions

In connection with a merger, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality protections.

We do not sell your personal data to third parties.

7. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are implemented, including:

  • Adequacy decisions issued by the European Commission;
  • Standard Contractual Clauses approved by the European Commission; or
  • Other lawful transfer mechanisms recognized under GDPR.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention periods may vary depending on:

  • Legal requirements
  • Accounting and tax obligations
  • Contractual requirements
  • Legitimate business needs

Generally:

  • Customer account information is retained while the account remains active.
  • Order and transaction records may be retained for up to 10 years where required by applicable law.
  • Marketing consent records are retained until consent is withdrawn.
  • Customer support communications may be retained for up to 3 years after resolution.

9. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Ensure website functionality
  • Improve user experience
  • Analyze website performance
  • Provide personalized content
  • Support marketing and advertising activities

You can manage your cookie preferences through our cookie banner or your browser settings.

For more information, please see our Cookie Policy.

10. Your Rights Under GDPR

Subject to applicable law, you have the following rights:

Right of Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data in certain circumstances.

Right to Restriction of Processing

You may request that we limit how we process your personal data.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to certain types of processing, including direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights Related to Automated Decision-Making

You have rights concerning automated decision-making and profiling where applicable.

To exercise any of these rights, contact us at:

support@popesko.com

We may request proof of identity before responding to your request.

11. Marketing Communications

Where permitted by law, we may send promotional emails and marketing communications.

You may unsubscribe at any time by:

12. Children’s Privacy

Our services are not intended for children under the age of 16, or the minimum age required by applicable local law.

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without the required consent, we will delete such information promptly.

13. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

  • SSL/TLS encryption
  • Secure payment processing
  • Access controls and authentication measures
  • Security monitoring and system updates
  • Employee confidentiality obligations

Although we strive to protect your personal data, no transmission or storage system can be guaranteed to be completely secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updates will be published on this page together with the revised effective date. Where required by law, we will provide additional notice of significant changes.

15. Complaints and Supervisory Authorities

If you believe that your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority in your country of residence or place of work.

For organizations established in Bulgaria, the supervisory authority is:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria

Website: https://www.cpdp.bg

16. Contact Information

If you have any questions about this Privacy Policy or our data processing practices, please contact us:

Email: support@popesko.com

Thank you for visiting popesko.com and for trusting us with your personal information.