Privacy Policy

1. Introduction

Evropat EOOD (hereinafter "Evropat", "we" or "us") is committed to protecting the privacy of personal data of its clients and website visitors. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Bulgarian legislation.

2. Data Controller

3. What Data We Collect

3.1. Data You Provide Directly

• First and last name
• Delivery and/or pickup address
• Phone number
• Email address
• Company data (for corporate clients): company name, ID, representative
• Shipment information: contents, weight, dimensions

3.2. Automatically Collected Data

• IP address
• Browser type and operating system
• Site visit information
• Cookies and similar technologies (see our Cookie Policy)

4. Processing Purposes

We use your personal data for the following purposes:

• Courier service delivery (shipment delivery)
• Payment processing and cash on delivery
• Communication about your shipments
• Customer service and responding to inquiries
• Sending marketing messages (with consent only)
• Improving our services
• Compliance with legal obligations

5. Legal Basis for Processing

We process your personal data on the following grounds:

• Contract performance: Processing is necessary for courier service delivery
• Legal obligation: Data retention for accounting and tax purposes
• Consent: For marketing messages and cookies
• Legitimate interest: For service improvement and fraud prevention

6. Data Sharing

We may share your data with:

• Partner courier companies (for international shipments)
• Payment service providers
• IT providers for system maintenance
• Government authorities (when legally required)

We do not sell or share your data for third-party marketing purposes.

7. Retention Period

We retain your data for the following periods:

• Shipment data: 5 years after delivery
• Accounting documents: 10 years
• Marketing data: until consent is withdrawn
• Website data: 2 years

8. Your Rights

You have the following rights regarding your personal data:

• Right of access: To receive information about what data we process
• Right to rectification: To request correction of inaccurate data
• Right to erasure: To request deletion of your data
• Right to restriction: To restrict data processing
• Right to portability: To receive your data in machine-readable format
• Right to object: To object to processing
• Right to withdraw consent: At any time

To exercise your rights, please contact us at [email protected].

9. Data Security

We apply appropriate technical and organizational measures to protect your data, including:

• SSL website encryption
• System access control
• Regular employee training
• Breach reporting procedures

10. International Transfers

For international shipments, data transfer to countries outside the EU may be necessary. In such cases, we ensure adequate protection through standard contractual clauses.

11. Complaints

If you believe we are processing your data in violation of the law, you can file a complaint with the Commission for Personal Data Protection (www.cpdp.bg).

12. Policy Changes

We may update this policy periodically. Changes will be published on this page with an updated last modified date.