This Privacy Policy describes how TABAK COM ENGINEERING LTD, UIC 103860102, with registered office and business address at BULGARIA, Varna (9010), Primorski district, 28 Prilep St. processes and protects the personal data of visitors and customers of the website https://kolednisvetlini.bg/.

We respect your privacy and process personal data in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR), as well as applicable Bulgarian legislation.

1. Data Controller

The controller of your personal data is:

ТABAK COM ENGINEERING LTD

UIC / Company Registration Number: 103860102

Address: BULGARIA, Varna (9010), Primorski district, 28 Prilep St.

Phone: 052333677

E-mail: info@kolednisvetlini.bg

For any questions related to the protection of your personal data, you may contact us using the details above.

2. What Personal Data We Collect

Depending on how you use our website, we may process the following categories of personal data:

- first and last name;

- telephone number;

- e-mail address;

- delivery address;

- billing information;

- company name and company registration number, where the order is made by a legal entity;

- information submitted through the contact form;

- information related to enquiries or orders;

- IP address;

- browser and device information;

- information about how you use the website;

- data collected through cookies and similar technologies.

We do not intentionally request or process special categories of personal data unless required by law.

3. Purposes of Processing

We may process personal data for the following purposes:

- responding to enquiries submitted through the website;

- preparing and sending quotations;

- processing and fulfilling orders;

- delivering purchased lighting products and related goods;

- communicating with you regarding products, orders, warranties and complaints;

- issuing accounting and payment documents;

- complying with legal, tax and accounting obligations;

- improving the functionality and security of the website;

- analysing website traffic and user behaviour;

- sending marketing communications where the necessary consent has been obtained.

4. Legal Basis for Processing

We process personal data only where there is a valid legal basis for doing so.

Depending on the circumstances, the legal basis may include:

- performance of a contract or taking steps at your request before entering into a contract;

- compliance with a legal obligation;

- our legitimate interests, such as website security, prevention of misuse and improvement of our services;

- your explicit consent, where required.

Where processing is based on consent, you have the right to withdraw that consent at any time.

5. Orders and Deliveries

When you place an order through our website, we process the personal data necessary to fulfil that order.

This may include your name, telephone number, e-mail address, delivery address, information about the products ordered and billing information.

Where necessary, some of this information may be shared with courier or transport companies solely for the purpose of delivering your order.

6. Contact Forms and Enquiries

When you send us an enquiry through our contact form, by e-mail or by telephone, we use the information you provide only for the purpose of handling your enquiry and providing the requested information.

The data may be retained for a reasonable period where necessary for follow-up communication or for keeping a record of correspondence.

7. Recipients of Personal Data

Your personal data may be shared, where necessary, with:

- courier and transport companies;

- payment service providers;

- accounting and consultancy firms;

- hosting and IT service providers;

- e-mail service providers;

- online shop platform providers;

- public authorities where disclosure is required by law.

Any service providers processing personal data on our behalf are required to process it in accordance with applicable data protection legislation and our instructions.

8. Data Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected.

Data related to orders, invoices and accounting documents is retained for the periods required under applicable legislation.

Data received through contact forms is retained for the period necessary to process the relevant enquiry and any subsequent communication.

Where processing is based on consent, the data may be retained until the consent is withdrawn or until the processing is no longer necessary.

9. Your Rights

Under the GDPR, you have the right to:

- obtain information about whether we process your personal data;

- request access to your personal data;

- request correction of inaccurate or incomplete data;

- request deletion of your personal data where the legal requirements are met;

- request restriction of processing;

- object to processing;

- receive your personal data in a structured, commonly used and machine-readable format, where applicable;

- withdraw your consent at any time;

- lodge a complaint with the competent supervisory authority.

To exercise your rights, you may contact us at: [GDPR contact e-mail].

10. Commission for Personal Data Protection

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with:

Commission for Personal Data Protection of the Republic of Bulgaria

Official website: www.cpdp.bg

11. Cookies

Our website may use cookies and similar technologies.

Cookies are small text files stored on your device that help ensure the proper functioning of the website.

We may use:

- strictly necessary cookies;

- functional cookies;

- analytics cookies;

- marketing cookies.

Cookies that are not strictly necessary for the operation of the website are used only after obtaining your consent, where required by law.

More information can be found in our Cookie Policy.

12. Google Analytics and Other Third-Party Services

If the website uses services such as Google Analytics, Meta Pixel, Google Ads, YouTube, Google Maps or other third-party tools, certain information may be transferred to the relevant service providers.

Such services are activated in accordance with the applicable consent and cookie requirements.

13. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

- unauthorised access;

- loss;

- destruction;

- unlawful disclosure;

- alteration;

- misuse.

Access to personal data is limited to persons who need it in order to perform their professional duties.

14. External Links

The website may contain links to third-party websites.

We are not responsible for the content or privacy practices of such websites. We recommend reviewing their privacy policies before providing personal information.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy where necessary due to changes in legislation, our business activities or the functionality of the website.

The latest version will always be published on this page.

Last updated: 19.10.2026