Privacy Policy

1. Data Controller

FLASH 2024 LTD (ФЛАШ 2024 ЕООД), UIC 207938834, Boulevard Cherny Vrah № 41, entr. D, 1407 Sofia, Bulgaria. Email: info@flash2024ltd.com.

2. Data We Collect

• Contact data you send us by email (name, email address, message content).
• Order and customer data needed to process purchases (name, address, phone, order details).
• Technical data such as IP address, browser type and pages visited, collected automatically by our hosting provider.

3. Purposes and Legal Bases

• Answering requests – legitimate interest (Art. 6(1)(f) GDPR).
• Performing contracts and sales – Art. 6(1)(b) GDPR.
• Accounting and tax obligations – Art. 6(1)(c) GDPR.
• Website security and operation – legitimate interest.

4. Retention

Data is kept only as long as needed for the purposes above, or as required by Bulgarian accounting and tax law (generally up to 10 years for accounting documents).

5. Recipients

Data may be shared with hosting and IT providers, couriers, payment providers, accountants and public authorities when required by law. We do not sell personal data.

6. International Transfers

If data is transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses.

7. Your Rights

You may request access, rectification, erasure, restriction, portability, and object to processing, or withdraw consent at any time, by writing to info@flash2024ltd.com. You can also lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

8. Changes

We may update this policy. The current version is always published on this page.