Privacy Policy

Controller: AZ I TI Ltd., company ID (EIK) 120600078, with its registered office at 15A Bulgaria Blvd., Smolyan, Bulgaria.

Questions about personal data and exercising your rights: office@detskimagazin.eu, tel. +359 885 306 223.

• Order data: first and last name, delivery and billing address, telephone, email, products ordered, order value and payment method, order notes.
• Account data, if you create an account: email, encrypted password, order history.
• Correspondence: the content of messages you send us by email, telephone or the contact form.
• Returns and complaints data: order details, bank account for refunds of cash-on-delivery orders, photographs of the goods.
• Technical data: IP address, browser and device type, timezone, browser language, date and time of visit.
• Website usage data via Google Analytics — only if you have given consent.

We do not receive or store payment card details — these are processed directly by the payment service provider.

The online store is intended for adults. We do not knowingly collect personal data of children. Choosing an age or size for a product is not linked to data about any particular child.

• Fulfilling orders, delivery, payment, returns and complaints — performance of a contract (Art. 6(1)(b) GDPR).
• Accounting, tax obligations and obligations under the Consumer Protection Act — legal obligation (Art. 6(1)(c) GDPR).
• Responding to enquiries and communicating with customers — steps at your request or legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Website security, fraud prevention and the defence of legal claims — legitimate interest (Art. 6(1)(f) GDPR).
• Automatic selection of the website language — legitimate interest (Art. 6(1)(f) GDPR).
• Traffic analysis with Google Analytics — consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

We share data only to the extent necessary with:

• courier companies — for delivering and returning parcels;
• payment service providers and banks — for processing payments and refunds;
• hosting, IT and web maintenance providers — as processors acting on our behalf;
• accounting and legal advisers;
• Google Ireland Limited — for the Google Analytics service, only with your consent;
• public authorities — where required by law.

Some providers, such as Google, may process data in countries outside the EEA, including the United States. Such transfers are based on a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

• Order data and accounting documents — for the periods required by accounting and tax legislation.
• Data needed to defend legal claims — until the applicable limitation period expires.
• Complaints register — for the periods required by the Consumer Protection Act.
• Correspondence — up to 2 years after the last communication, unless needed to defend legal claims.
• Customer account — until you ask us to delete it.
• Google Analytics data — up to 14 months.

We use only the cookies necessary for the website to work, and analytics cookies only with your consent. Details are in our Cookie Policy, and you can change your choice via "Cookie settings" in the website footer.

You have the right to:

• access your personal data;
• have inaccurate data rectified;
• have your data erased (the "right to be forgotten") where the legal grounds apply;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email us at office@detskimagazin.eu. We will respond within one month, which may be extended in the cases provided for by the GDPR.

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection — 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg — or with the data protection authority in the country where you live or work.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Automatic language selection is not such a decision, and you can change the language at any time.

We apply appropriate technical and organisational measures to protect personal data, including an encrypted HTTPS connection, restricted access to data and protection of administrative systems.

We may update this Policy. The current version is published on this page with the date of the last update.