Privacy policy

Controller and contact

NESEBAR KLIMA Ltd. is the controller of your personal data. You can send a privacy question or request to the email address in the trader details below. Please use “Personal data” as the subject.

Data we process

Depending on the service, we may process your name, email address, telephone number, delivery or service address, enquiry and order details, correspondence, account data and recently viewed product history. Account passwords are handled by the authentication system and are not sent to website visitors in readable form.

To operate and secure the website, servers may process your IP address, request date and time, page address, browser type and diagnostic records needed for security and troubleshooting.

Purposes and legal bases

• Responding to enquiries and preparing offers — steps taken at your request before entering a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to a message.
• Creating and maintaining an account, handling orders, delivery, installation, warranty and after-sales service — performance of a contract or pre-contractual steps.
• Accounting, tax and other statutory duties — compliance with a legal obligation (Article 6(1)(c) GDPR).
• Website security, abuse prevention and establishing or defending legal claims — legitimate interests (Article 6(1)(f) GDPR).
• Optional analytics or marketing technologies, if introduced — only with prior consent where required. As of this policy date, the website does not use advertising or analytics trackers.

Recipients and transfers

Where necessary, data may be shared with providers supporting hosting, the website and customer-account system, and with couriers, accountants, payment or service providers when needed for a particular order or legal obligation. They process data according to their role and applicable contractual safeguards.

We do not sell personal data. If processing involves a transfer outside the European Economic Area, it will take place only on an applicable legal basis and with safeguards under Chapter V GDPR.

Retention

Enquiry data is kept for the time needed to respond and follow up, and afterwards only as needed to protect against potential claims. Order and accounting records are kept for periods required by applicable accounting, tax and consumer law. Account data is kept while the account is active unless a longer period is required by law. Data is deleted or anonymised when the applicable period ends.

Your rights

To exercise a right, email the controller using the address below. We may ask for reasonable information to verify your identity and protect your data. We respond within the time limits set by GDPR.

• The right to access, rectify, erase and restrict processing of your data.
• The right to data portability where processing is based on consent or contract and carried out by automated means.
• The right to object to processing based on legitimate interests and to withdraw consent at any time, without affecting the lawfulness of prior processing.
• The right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): cpdp.bg.

Required and optional data

Data needed to place an order, arrange delivery or respond to an enquiry is required for that service. Without it, we may be unable to fulfil your request. Consent to optional technologies or marketing is not a condition of purchase and can be withdrawn.