Privacy Policy
At Neri Karra, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, store and use the information you provide when using the website www.nerikarra.bg.
1. DATA CONTROLLER
The data controller is NERI KARRA Ltd., UIC BG115123262, with registered office and management address at:
3B Acad. Nikolay Haytov Square, Asenovgrad, Bulgaria.
You may contact us by email at: [enter email address].
2. WHAT DATA DO WE COLLECT?
To process your orders and provide you with high-quality service, we collect the following categories of personal data:
Contact details: First and last name, email address and telephone number.
Delivery details: Full delivery address or selected courier office, city and postal code.
Technical data: IP address, browser type, device information and browsing history on the Website, collected through cookies.
3. LEGAL BASIS AND PURPOSES OF PROCESSING
We collect and process your personal data only for the following purposes:
Performance of a contract: To process your order, arrange delivery through Econt or Speedy and accept cash-on-delivery payments.
Compliance with legal obligations: To issue accounting documents, including invoices, and to comply with applicable tax legislation.
Legitimate interest: To improve the functionality of our Website and ensure its security.
Marketing, subject to your consent: To send newsletters and special offers where you have expressly subscribed to receive them.
4. WHO DO WE SHARE YOUR DATA WITH?
Your personal data is not sold to third parties.
It is shared only with trusted partners whose services are necessary for fulfilling your order:
Courier companies, including Econt and Speedy: To deliver your order to you.
Public authorities: Only where there is a valid legal basis, including the Bulgarian National Revenue Agency, the Ministry of Interior and other competent authorities.
5. DATA RETENTION PERIOD
We retain your personal data only for as long as necessary:
Order-related data is retained for a period of 10 years in accordance with Bulgarian accounting legislation.
Data processed for marketing purposes is retained until you withdraw your consent.
6. YOUR RIGHTS
Under the General Data Protection Regulation (GDPR), you have the following rights:
- The right to access your personal data;
- The right to correct inaccurate or incomplete personal data;
- The right to erasure, also known as the “right to be forgotten”, unless we are legally required to retain the data;
- The right to restrict the processing of your personal data;
- The right to withdraw your consent at any time, including consent to receive newsletters.
7. COOKIES
Our Website uses cookies to provide better navigation and a more personalised experience.
You can manage or disable cookies directly through your browser settings.
8. SECURITY
We apply appropriate technical and organisational security measures to protect your personal data against unauthorised access, theft, loss, alteration or disclosure.
Our Website uses an SSL certificate to encrypt the connection and protect the transmission of information.
9. SUPERVISORY AUTHORITY
If you believe that your personal data protection rights have been violated, you have the right to lodge a complaint with:
Commission for Personal Data Protection
Address:
2 Prof. Tsvetan Lazarov Boulevard
1592 Sofia, Bulgaria
Website: www.cpdp.bg
This Privacy Policy may be updated periodically. The date of the most recent revision will be stated below.
Last updated: 18 February 2026