1. Data Controller
The data controller within the meaning of the GDPR is:
- ФИВОРА ООД (trading as ТЕПЕ bite)
- ЕИК / UIC: ⚠TODO: TODO_EIK // TODO business owner confirmation
- Address: ⚠TODO: TODO_REGISTERED_OFFICE_ADDRESS // TODO business owner confirmation
- Email: office@tepebite.eu
2. What Data We Collect and Why
We collect only the data necessary to process orders. We have no user accounts. We have no contact form.
2.1 Order data
When an order is placed we collect: email address, names, delivery address, chosen delivery method, information about ordered products and confirmation status. This data is necessary to fulfil the order.
2.2 Email communication
The email address is used to send the order confirmation link and a processing status email. We do not send marketing emails without explicit consent.
2.3 Delivery data
Name and address data is shared with Speedy to fulfil delivery. Speedy acts as a data processor in the context of delivery.
2.4 Payment data
Payment is made via cash on delivery. We do not store bank card data. The cash/fiscal receipt is issued by Speedy.
2.5 Technical data and cookies
The website uses only a functional cookie to store language preferences (tepe-bite-lang). We do not use analytics or marketing cookies.
3. Legal Basis for Processing
- Contract performance (Art. 6(1)(b) GDPR): Processing of order, delivery and email confirmation data is necessary to perform the sales contract.
- Legal obligation (Art. 6(1)(c) GDPR): Data may be retained for accounting and tax purposes.
4. Data Recipients / Processors
Your data may be shared with the following parties:
- Speedy — courier company handling delivery and COD payment processing. ⚠TODO: TODO_SPEEDY_PROCESSOR_DETAILS — add Speedy DPA/processor agreement details. // TODO legal review
- Hosting provider — ⚠TODO: TODO_HOSTING_PROVIDER // TODO business owner confirmation
- Database provider — ⚠TODO: TODO_DATABASE_PROVIDER // TODO business owner confirmation
- Email provider — ⚠TODO: TODO_EMAIL_PROVIDER — used for order confirmation emails. // TODO business owner confirmation
Data is not shared with third parties for marketing purposes without explicit consent.
5. Data Retention Periods
Order data is retained for the period necessary to fulfil the order and additionally for accounting/tax purposes as required by applicable law.
6. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access to your personal data.
- Right to rectification of inaccurate data.
- Right to erasure ('right to be forgotten').
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing.
- Right to lodge a complaint with a supervisory authority.
To exercise your rights, send an email to office@tepebite.eu. We will respond within 30 days.
You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) — cpdp.bg.
7. Security
We apply reasonable technical and organisational measures to protect personal data from unauthorised access, loss or destruction.
9. Privacy Contact
ТЕПЕ bite / ФИВОРА ООД
For privacy-related questions: office@tepebite.eu