Privacy Policy (GDPR) of capsiobg.com

Last update: 10.03.2026

1. General information

Data Controller:
Kapsio BG Ltd.
UIC: 208388432
Registered office and registered address. Registered office and registered address. 442, in. 442 A, et. 3, app. 15
Website: capsiobg.com
Contact email for personal data issues: sale@capsiobg.com

This Privacy Policy is intended to explain how capsiobg.com collects, uses and protects the personal data of its users and customers in accordance with the General Data Protection Regulation (GDPR) and applicable Bulgarian legislation.

Using the website capsiobg.com, by creating an account, placing an order or submitting an enquiry, you accept and agree to this Privacy Policy.

2. Categories of personal data we collect

We only collect data that is necessary for:

  • order execution;

  • communication with you;

  • improving the services and the site;

  • performance of legal obligations.

2.1. Identification data

  • Name, surname

  • Company details (if the order is from a legal entity)

Objective: Identification, invoicing, order communication
Legal basis: performance of a contract (Article 6(1)(b) GDPR)

2.2. Contact details

  • Email address

  • Phone number

Objective: order confirmation and clarification, delivery notification, response to inquiries
Legal basis: performance of a contract (Article 6(1)(b) GDPR)

2.3. Delivery details

  • Delivery address (street, number, entrance, floor, location, postcode)

  • Name of recipient

Objective: correct delivery of ordered products
Legal basis: performance of a contract (Article 6(1)(b) GDPR)

2.4. Payment details

  • Information required for payment processing (e.g. bank transfer details)

  • Information processed by payment operators (e.g. when paying by card)

Important: panetefoods.com does not store full bank card details. Data is processed by licensed payment operators in accordance with their security policies.

Objective: payment processing and abuse prevention
Legal basis: performance of a contract (Article 6(1)(b) GDPR); legal obligation (Article 6(1)(c) GDPR) for accounting documents

2.5. Marketing data (optional)

  • Email address (for newsletter subscriptions)

Objective: sending news, promotions and useful information related to Panete products
Legal basis: consent (Article 6(1)(a) GDPR)

You can withdraw your consent to marketing communications at any time via an unsubscribe link or by emailing us at sale@capsiobg.com.

2.6. Behavioural and technical data

  • IP address

  • Browser and device data

  • Site visit data (pages, dwell time, etc.)

  • Cookies - see Cookie Policy

Objective: site security, functionality improvement, traffic analysis
Legal basis: legitimate interest (Article 6(1)(f) GDPR); consent - for unnecessary cookies, where applicable

3. Who we share your data with

Personal data may be provided to third parties only to the extent necessary for the fulfilment of those purposes and subject to appropriate safeguards:

  • Courier companies - for delivery of the ordered products (e.g. Econt and/or other courier companies).

  • Payment institutions and banks - payment processing (e.g. banks, payment operators).

  • Accounting services - to issue and process invoices and other accounting documents.

  • IT and hosting providers - to maintain the site and server infrastructure.

  • State and control bodies - where required by law (e.g. NRA, CPC, etc.).

These third parties process the data either as personal data processors (following our instructions), or by independent administrators, where they use the data for their own lawful purposes (e.g. banks, government bodies).

4. Storage periods

  • Order and billing data: up to 10 years, in accordance with applicable accounting and tax legislation.

  • Customer account details (if registered): until the account is closed + a reasonable time to back up and defend legal claims.

  • Marketing data (newsletter email): until the consent is withdrawn or up to 5 years after the last activity.

  • Details for enquiries via contact form or email: up to 1 year after the end of the correspondence, unless a legal dispute arises.

  • Logs and technical data: for the terms specified in our security and hosting systems (usually up to 1 year).

5. Your rights as a data subject

You have the following rights under the GDPR:

  1. Right of access - receive information about whether we process personal data about you and a copy of the data.

  2. Right of rectification - request correction of inaccurate or incomplete data.

  3. Right to erasure („right to be forgotten“) - request deletion of the data when:

    • are no longer necessary for the purposes for which they were collected;

    • you have withdrawn your consent;

    • object and there is no stronger legal basis for processing;

    • the processing is unlawful.

  4. Right to restriction of processing - in the event of a dispute about the accuracy, legality or necessity of the data.

  5. Right to portability - receive your data in a structured, commonly used and machine-readable format and transfer it to another controller where the processing is based on consent or contract and is carried out by automated means.

  6. Right to object - against processing based on legitimate interest or for direct marketing purposes.

  7. Right to withdraw consent - where the processing is based on consent (e.g. newsletter), you may withdraw it at any time without affecting the lawfulness of the processing prior to withdrawal.

To exercise any of your rights, you can contact us at: sale@capsiobg.com.

6. Cookies

Our website uses cookies. Detailed information about the types of cookies we use and how you can manage them can be found on the separate page „Cookie Policy“.

7. Data security

We take appropriate technical and organisational measures to protect your personal data from:

  • unauthorized access;

  • loss, destruction or alteration;

  • disclosure to unauthorised third parties.

Access to personal data shall be limited to persons who need it for the performance of their duties and who are bound by confidentiality.

8. Right of appeal

If you believe that your data protection rights have been violated, you have the right to file a complaint with:

Commission for Personal Data Protection (CPDP)
Address. Address: 1592 Sofia Blvd. „Prof. No. 2 Tsvetan Lazarov
Website: www.cpdp.bg
Tel: +359 2 915 35 18

Of course, you can contact us first at sale@capsiobg.com so we can try to resolve this together.

9. Changes to the Privacy Policy

We may update this Policy from time to time. Any changes will be posted on capsiobg.com, and the date of the last update will be indicated at the beginning. By continuing to use the site after changes are announced, you agree to the changes.