PERSONAL DATA PRIVACY POLICY

Information about the company that processes your data:

Name: ORIENT EXPRESS BULGARIA LTD.
UIC/BULSTAT: 207079901
Headquarters and management address: Plovdiv, Aton, 1A, building 6, 5th floor, Western district
Correspondence address: Plovdiv, Aton, 1A, building 6, 5th floor, Western district
Email: support@orient-express.store
Website : https://orient-express.store​​

Information about the competent supervisory authority for personal data protection:

Name: Personal Data Protection Commission
Headquarters and management address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: 02 915 3 518
Website: www.cpdp.bg​

1. Processing of personal data
Orient Express Bulgaria EOOD (hereinafter referred to as the "Administrator" or the "Company") processes your personal data in accordance with the General Data Protection Regulation (GDPR) and Bulgarian legislation. The purpose of this policy is to inform you about all aspects of the processing of your personal data and the rights you have.

2. Grounds for collecting and processing personal data
The administrator processes your personal data on the following grounds:

• Explicit consent on your part;
• Fulfillment of contractual obligations;
• Compliance with a legal obligation;
• Legitimate interests of the administrator or a third party.

3. Types of personal data we collect
We collect and process the following personal data that you provide to us:

• Basic contact details: name, email address, phone number, shipping address;
• Order data: information about purchases made and payment method;
• Social media data: publicly available profiles (e.g. from Facebook or Google).

4. Purposes of personal data processing
We collect and process personal data for the purpose of:

• Creating a profile and providing full functionality of the e-store;
• Fulfillment of contractual obligations;
• Sending marketing messages (with consent);
• Statistical and analytical purposes;
• Protecting information security and fulfilling internal goals.

5. Storage of personal data
Your personal data will be stored for the period necessary to fulfill contractual obligations or until you decide to delete your account, unless we are required by law to store it for a longer period.

6. Sharing personal data
The administrator may provide your personal data to personal data processors, who will process them only for the purpose of fulfilling contractual obligations or on other legal grounds.

7. Your rights
You have the right:

• Request access to your personal data;
• To request correction of inaccurate or incomplete data;
• To request deletion of data ("right to be forgotten");
• To object to the processing of your personal data in certain situations;
• To request restriction of the processing of personal data.

8. Contact us
If you have any questions regarding the processing of your personal data or would like to exercise your rights, you can contact us at the contacts provided.