Privacy Policy

This policy describes how Nasledstvoto VI OOD processes your personal data when you visit nasledstvotovi.com and when you submit an order request for one of our editions. It is prepared in line with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act (PDPA / ЗЗЛД).

The Bulgarian version of this policy is the authoritative legal text. This English version is provided for convenience.

1. Data controller

Nasledstvoto VI OOD, UIC 208579366, registered office at 25 Tsar Ivan Asen II St., Sofia, Bulgaria.
Manager: Valentin Nedkov Nedev.
Email: [email protected] · Phone: +359 89 985 5956.

2. Personal data we collect

When you submit an order request we collect:

• your full name;
• your phone number;
• your email address;
• your delivery address (city and courier office, or street address);
• your chosen courier (Econt or Speedy) and delivery mode;
• the number of copies requested;
• if you request a company invoice — company name, UIC (EIK), and VAT ID where applicable.

We do not process payment data — all payments are handled directly by the courier via cash on delivery.

3. Purposes and legal bases

• Performance of a distance sales contract — to process your request, confirm it, arrange delivery and communicate with you (Art. 6(1)(b) GDPR).
• Compliance with a legal obligation — accounting and invoicing where a company invoice is requested (Art. 6(1)(c) GDPR; Bulgarian Accountancy Act).
• Legitimate interest — to prevent abuse of the order form via Cloudflare Turnstile (Art. 6(1)(f) GDPR).

4. Recipients of personal data

Your data may be shared with:

• the chosen courier (Econt or Speedy) for delivery and cash-on-delivery processing;
• the company's external accountant — for invoicing and bookkeeping;
• technical infrastructure providers: Cloudflare (hosting, security, email routing) and Resend (transactional email);
• competent public authorities when required by law.

5. Retention

• Order request data that did not result in a sale: up to 6 months from submission.
• Data related to a fulfilled order and issued invoice: 10 years from the year the invoice was issued, in accordance with the Bulgarian Accountancy Act.
• IP address used for abuse prevention: up to 30 days.

6. Your rights

As a data subject you have the right to:

• access your personal data and obtain a copy;
• request rectification of inaccurate data;
• request erasure ("right to be forgotten") under GDPR conditions;
• request restriction of processing;
• object to processing based on legitimate interest;
• receive your data in a structured format (portability);
• lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg.

To exercise your rights, write to [email protected].

7. Security

We apply reasonable technical and organisational measures to protect your data, including encrypted transport (HTTPS), abuse protection through Cloudflare Turnstile, and limited access to the systems that store order requests.

8. Cookies and analytics

The site uses Cloudflare Web Analytics — an anonymous statistics system that does not set cookies and does not track users across sites. We do not use advertising or cross-site tracking cookies.

9. Changes to this policy

We may update this policy. The current version is always available on this page, with a "last updated" date shown above.