Privacy Policy

Last updated: 26 April 2026

1. Who We Are

RaiskiGazSofia.BG is a personal data controller within the meaning of Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act. Registered seat: ul. "Atanas Manchev" 1, Studentski Kompleks, 1700 Sofia, Bulgaria.

For questions regarding the processing of Your data: [email protected] or phone +359 8778 925 87.

2. What Data We Collect

When You use our website or place an order, we may process:

Identification data: name, phone number, delivery address – only when ordering;
Technical data: IP address (anonymized), browser type, operating system, pages visited, time spent, referrer URL – via Google Analytics 4;
Cookies: small text files stored in Your browser (see section 6);
Communication data: contents of conversations via phone, Viber, Telegram, WhatsApp – only within the scope of a specific order.

We do not collect sensitive personal data (health information, political opinions, religious affiliations, etc.).

3. Why We Process Data

Your data is processed for the following purposes and on the following legal grounds:

Performance of contract (Art. 6(1)(b) GDPR) – for receiving, confirming, and delivering orders;
Legal obligation (Art. 6(1)(c) GDPR) – for invoicing, accounting reporting, and compliance with Article 56d of the Bulgarian Health Act;
Legitimate interest (Art. 6(1)(f) GDPR) – for traffic analysis, website improvement, fraud prevention;
Consent (Art. 6(1)(a) GDPR) – for analytics and marketing cookies.

4. Retention Period

Order data: 5 years per Bulgarian Accounting Act and VAT Act;
Analytics data (GA4): 14 months;
Cookies: per specific cookie – see section 6;
Server logs: 90 days.

5. Data Recipients

Your data may be disclosed to the following categories of third parties – only to the necessary extent:

Courier and logistics partners for delivery;
Hosting provider (for storing the website);
Google LLC (for Google Analytics 4 – with IP anonymization enabled);
Cloudflare Inc. (CDN and security);
State authorities – only under legal obligation.

We do not sell or provide Your data to third parties for marketing purposes.

6. Cookies

The website uses the following types of cookies:

Functional (necessary): cart storage, language preferences – 30 days;
Analytics (Google Analytics 4): _ga, _ga_*, _gid – up to 2 years, with IP anonymization and Consent Mode v2 enabled;
Marketing: we currently do not use marketing cookies.

You can disable or delete cookies in Your browser settings. Note that disabling may affect some site functions.

7. International Transfers

Google Analytics 4 and Cloudflare may transfer data to servers in the USA. Transfers are made under the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs), ensuring an adequate level of protection under GDPR.

8. Your GDPR Rights

You have the right to:

Access Your data (Art. 15);
Rectification of inaccurate data (Art. 16);
Erasure ("right to be forgotten", Art. 17);
Restriction of processing (Art. 18);
Data portability (Art. 20);
Object to processing (Art. 21);
Withdraw consent at any time;
Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, cpdp.bg.

To exercise these rights: [email protected]. We will respond within 30 days.

9. Security

We apply technical and organizational protection measures: HTTPS encryption, Cloudflare protection, restricted staff access, regular updates, XSS/CSRF attack protection.

10. Children

The website is not intended for persons under 18 and we do not knowingly collect their data. If we discover we have processed data of a minor, we will delete it immediately.

11. Policy Changes

We may update this policy periodically. The current version is always available here, with the date of last revision marked. For substantial changes, we will notify You appropriately.

12. Contact

RaiskiGazSofia.BG – Data Protection Officer
Address: ul. "Atanas Manchev" 1, Studentski Kompleks, 1700 Sofia, Bulgaria
Email: [email protected]
Phone: +359 8778 925 87