CLEAR AND ACCESSIBLE
Privacy policy
How we use data when you visit, register, contact us or shop at PlusStore.BG.
Updated 3 November 2026
Who is responsible
The data controller is САЛАЗАР ЕООД, company no. 206001214, VAT BG206001214, 2 Hristo Botev St., 2260 Svoge, Bulgaria. For questions and requests: [email protected] or +359 895 954 580.
Accounts, orders and contact
We use your email address and the information you add to your account. A purchase requires your name, contact and delivery details, products and amounts; an invoice requires the relevant recipient details. We process these data to take steps at your request and perform a contract under GDPR Article 6(1)(b). Accounting and tax records are processed to comply with legal obligations under Article 6(1)(c). General enquiries, system security and establishing or defending claims may rely on our legitimate interests under Article 6(1)(f). Optional recently-viewed history is enabled by your choice, on consent under Article 6(1)(a).
Stock notifications and offers
A stock request stores your name, email, product, language, date and evidence of each separate choice. We send a confirmation link; product notifications require confirmation. Marketing news and offers are a separate optional choice and are not required for the stock notification. The legal basis is consent under GDPR Article 6(1)(a). Unconfirmed requests are periodically removed; confirmed product requests last until notification, cancellation or at most 6 months. Product-request data is removed during cleanup after completion. Confirmed marketing consent lasts until withdrawal through the separate email link; withdrawing removes your name and email from the marketing record. Minimal evidence of consent and withdrawal may be retained to establish or defend claims. These details do not create an account without your action.
Technical data and choices
Technical storage supports login, cart, language and the wishlist and comparison functions you request. Infrastructure operation and security may involve IP addresses, browser details, dates and technical events. Passwords are handled by the authentication system and are not sent in readable form in store emails. We do not use these data for solely automated decisions producing legal or similarly significant effects.
Providers and recipients
The shop uses Forge.BG for hosting, Amazon Web Services / Amazon SES for transactional email, and Cloudflare for infrastructure services and Email Routing. Incoming business correspondence is forwarded to the mailbox designated by the company in Google/Gmail. Authorised customer-service and technical staff, accounting or legal advisers where necessary, and competent authorities where legally justified may receive data. For an order, necessary data are shared with the delivery and payment providers actually selected and used. We do not sell personal data.
Processing outside the EEA
Amazon SES is configured in eu-north-1. This does not mean that every operation of every provider stays in the EEA. AWS and Cloudflare terms provide for Standard Contractual Clauses for applicable international transfers. Google publishes its EU–US Data Privacy Framework certification for covered transfers to Google LLC. Links to these safeguards appear below; request details or a copy of the applicable safeguards at [email protected].
Retention
Retention depends on purpose. Account details are needed while the account is used, except data required for a legal obligation or claim. Correspondence, returns and complaints are kept to handle the case and for applicable periods for protecting rights. Accounting records follow the category and period in Article 12 of the Bulgarian Accounting Act: specified registers, reports and tax-control documents for 10 years; other accounting media for 3 years, calculated under that Act. This is not a general ten-year period for all data. Technical logs and backups are limited according to security, recovery and legal needs. We do not promise automatic deletion on a date where a legal-basis assessment is needed.
Your rights
Where applicable, you may request access, rectification, erasure, restriction or portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. Contact [email protected]; proportionate identity verification may be needed. We normally respond within one month, subject to statutory exceptions and notification. You may complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg.
Sharing and required fields
Anyone receiving a shared wishlist or comparison link can view it. An external share button opens the platform you choose and does not send a message by itself. That platform applies its own policy. Fields marked required are needed for the service requested; without them we may be unable to provide it.
гр. Своге 2260, ул. „Христо Ботев“ №2
[email protected]