Privacy Policy

 

This Privacy Policy explains how GAMATEH Ltd. collects, uses and protects your personal data when you use the online store www.gamateh.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Bulgarian data protection law.

1. Data controller

GAMATEH Ltd. UIC: 103884207 149 Hristo Smirnenski Blvd., 9010 Varna, Bulgaria Email: office@gamateh.com Phone: +359 52 390 666

2. What data we collect

Depending on how you use the Store, we may collect:

  • Order and account data: name, delivery address, billing address, email address, phone number, company details (for business customers), order history.
  • Payment data: payment method and transaction confirmation. We do not store card numbers — card payments are processed directly by our payment provider. [CONFIRM: payment provider name]
  • Communication data: messages you send us via email, phone or contact forms.
  • Technical data: IP address, browser type, device information and website usage data, collected via cookies and similar technologies (see our Cookie Policy).

3. Why we process your data and on what legal basis

Purpose Legal basis
Processing and delivering your orders, contacting you about your order Performance of a contract (Art. 6(1)(b) GDPR)
Issuing invoices and complying with tax and accounting obligations Legal obligation (Art. 6(1)(c) GDPR)
Managing your customer account Performance of a contract (Art. 6(1)(b) GDPR)
Handling returns, warranty claims and complaints Performance of a contract / legal obligation
Sending our newsletter and promotional offers Your consent (Art. 6(1)(a) GDPR) — only if you have opted in
Preventing fraud and abuse, securing the Store Legitimate interest (Art. 6(1)(f) GDPR)
Analytics and website improvement via cookies Your consent (Art. 6(1)(a) GDPR)

We do not use your data for automated decision-making or profiling that produces legal effects for you.

4. Marketing communications

We send newsletters and promotional emails only if you have explicitly opted in. Creating an account or placing an order does not automatically subscribe you. You can unsubscribe at any time via the link in every email or by contacting us at office@gamateh.com.

5. Who we share your data with

We share your data only with parties necessary to fulfil your order or comply with the law:

  • Courier companies (e.g. Speedy, Econt [CONFIRM])  name, address and phone number, for delivery.
  • Payment providers  for processing card payments.
  • Accounting and IT service providers acting as our processors under data processing agreements.
  • Public authorities  where required by law (e.g. tax authorities).

We never sell your personal data, and we do not share it with third parties for their own marketing purposes.

6. International transfers

Your data is processed within the European Economic Area. If any service provider processes data outside the EEA, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses) are in place.

7. How long we keep your data

  • Order and invoicing data: as required by Bulgarian accounting and tax law (up to 10 years for accounting records).
  • Account data: for as long as your account is active; deleted upon your request, subject to legal retention obligations.
  • Marketing data: until you withdraw your consent.
  • Communication data: up to 5 years, in line with the general limitation period for claims.

8. Your rights

Under the GDPR you have the right to:

  • Access your personal data;
  • Rectify inaccurate or incomplete data;
  • Erase your data (“right to be forgotten”), where applicable;
  • Restrict processing;
  • Data portability — receive your data in a structured, machine-readable format;
  • Object to processing based on legitimate interest;
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at office@gamateh.com. We will respond within one month.

You also have the right to lodge a complaint with the supervisory authority:

Commission for Personal Data Protection (Bulgaria) 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592 www.cpdp.bg

9. Data security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (SSL/TLS), access controls and secure hosting. You are responsible for keeping your account password confidential.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the date of the last update.