Privacy policy

This Privacy Policy describes how CASA ORO (hereinafter referred to as "We", "the Brand", "the Merchant") collects, uses, stores, and protects the personal data of its customers and website visitors, in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act of the Republic of Bulgaria (PDPA) .

1. Data Controller

The data controller is:
CASA ORO / [CASA ORO LTD]
UIC: 208651538
Address: Sofia, 1220, zhk. Nadezhda, bl. 272. et. G, fl. 3, ap. 97
Email: office@casaoro.bg
Phone: +359879900971

2. What personal data do we collect?

We collect only the data necessary for processing an order and improving the service, including:

  • First and last name
  • Phone number
  • Email
  • Delivery address
  • Payment data (card details are processed by a payment operator; we do NOT have access to them)
  • IP address, cookies, website behavior (for statistics and personalization)

3. For what purpose do we process the data?

Personal data is processed for:

Purpose Legal basis
Order processing and delivery Art. 6, para. 1, "b" GDPR (contract)
Issuing an invoice / accounting purposes Legal obligation
Informing about order status Contract performance
Service improvement / statistics Legitimate interest
Marketing (emails, offers, campaigns) Explicit consent

4. How long do we store personal data?

  • Order data: up to 5 years (according to accounting legislation).
  • Marketing data: until the consent is withdrawn.
  • Cookie data: up to 1 year, depending on their type.

5. Do we share your data with third parties?

Data may be provided only to partners involved in the execution of the service:

  • Courier companies (for delivery)
  • Payment operators (for payments)
  • Accounting services / legal services (when necessary)
  • Traffic analysis platforms (eg Google Analytics)

These entities process data only according to our instructions and are not allowed to use it for other purposes.

6. Security Measures

We use technical and organizational measures to protect personal data:

  • SSL encryption of the website
  • Secure servers
  • Limited access granted only to authorized persons
  • Access control and audit logs

7. Your rights

Every user has the following rights under GDPR:

✔ Right of access to your personal data
✔ Right to rectification
✔ Right to erasure (to be forgotten)
✔ Right to restriction of processing
✔ Right to object to processing
✔ Right to data portability
✔ Right to withdraw your consent at any time

To exercise these rights, contact us at: office@casaoro.bg.

8. Cookies

The website uses cookies for:

  • store functionality

  • saving user preferences

  • behavior analysis and service improvement

  • marketing (optional - only with consent)

The user can manage or disable cookies through their browser settings.

9. Complaints and Supervisory Authority

If you believe that your rights have been violated, you may file a complaint with:

Commission for Personal Data Protection (CPDP)
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Website: www.cpdp.bg

10. Policy changes

We may update this Policy in case of changes in the law or the service. The current version is always published on the website.