Last updated: 21 August 2026
1. Data controller
- Company: „Три дъщери“ ЕООД
- UIC (ЕИК): 206271569
- VAT No.: BG206271569
- Registered address: ул. „Цар Симеон Велики“ № 23, гр. Хасково 6300, България
- E-mail: info@trisestri.bg
- Phone: 0897 336 014
For any question about your personal data write to info@trisestri.bg.
2. What we collect and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Order fulfilment and delivery | Name, phone, e-mail, delivery address / courier office, order contents | Contract (Art. 6(1)(b) GDPR) | 5 years after the order |
| Invoicing and accounting | Invoice details, payment information (no card data) | Legal obligation (Art. 6(1)(c) GDPR; Accountancy Act, Tax Code) | 10–11 years |
| Customer account (optional) | E-mail, password (hashed), order history, wishlist | Contract | Until account deletion |
| Complaints and withdrawal | Correspondence, order data, bank account for refunds | Legal obligation / contract | 5 years |
| Answering enquiries | Name, e-mail, message | Legitimate interest (Art. 6(1)(f)) | 1 year |
| Site security | IP address, technical logs | Legitimate interest | Up to 30 days |
| Cookies and statistics | See Cookie Policy | Consent / legitimate interest | Per cookie |
3. Recipients
- Econt Express Ltd. – courier, for delivering your order (name, phone, address, COD amount);
- Hosting and maintenance – the Site is hosted on a server in the European Union administered by Drusoft (drusoft.dev), acting as our processor;
- E-mail services – for order confirmations and notifications (Brevo, EU);
- Accountant and public authorities where required by law.
We do not sell personal data and do not transfer it outside the EU/EEA unless expressly stated in the Cookie Policy.
4. Your rights
You have the right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interest, and to withdraw consent at any time. Send requests to info@trisestri.bg; we reply within one month. You may lodge a complaint with the Commission for Personal Data Protection (cpdp.bg).
5. Security
The connection to the Site is encrypted (HTTPS). Passwords are stored only in hashed form. Access to data is restricted to those who need it.
6. Children
The Site is not intended for persons under 16 and we do not knowingly collect their data.
7. Changes
We may update this policy; the current version is always published on this page with its date.