Privacy Policy

This translation is provided for convenience. The Bulgarian text governs.

PRIVACY STATEMENT ON THE PROCESSING OF PERSONAL DATA WHEN USING THE ONLINE SHOP “fiecoffee.com”

Date: 07.10.2026

1 Details of the controller and how to contact it.

The online shop “fiecoffee.com” is owned by Indotrade Group LTD („ИНДОТРЕЙД ГРУП“ ООД), a legal entity entered in the Commercial Register and Register of Non-Profit Legal Entities under UIC 208011495, with its registered seat and address of management at Sofia, Lyulin 8, bl. 820, ent. B, shop 6 (гр. София, ж.к. Люлин 8, бл. 820, вх. Б, ап. магазин 6)

The Company's contact details include:

Address: ul. William Gladstone 32, 1000 Sofia (ул. „Уилям Гладстон“ 32, 1000 София)

Tel.: +359 89 5122004

E-mail: shop@fiecoffee.com

We recognise that it is important for you to understand how we collect, store and share the personal data processed when the online shop “fiecoffee.com” is used. In keeping with the principles of transparency and fairness of processing towards the data subject, we provide information through this Privacy Statement, in accordance with the requirements of European data protection legislation.

2 Who is this Statement for?

This Privacy Statement is intended for all persons whose personal data we process in connection with the operation of the online shop “fiecoffee.com”. Such persons may be:

· Visitors to the website/the online shop's social network profiles;

· Persons with a registered account in the online shop;

· Persons who have bought products from the online shop;

· Persons who have made enquiries by telephone or by e-mail.

3 What personal data do we process, for what purposes, and on what basis do we process them?

The type of personal data we process depends on the purpose for which we need them and on the activities in which we receive the data.

3.1 Visiting “fiecoffee.com”

When you visit the online shop “fiecoffee.com”, we record the following data in so-called log files: IP address; the date, time and duration of the visit; browser type; the user's operating system and information about the computer or device. We process this information to ensure the operation of our online shop, e.g. to establish a connection with the website and to analyse the security of the system. The basis for processing this information is the protection of our legitimate interests, which consist in achieving the purposes stated.

When you visit the site, we create data that we store on your end device. More information about the data processed, the purposes and the bases for processing them is contained in our Statement on the use of cookies.

The data we process when the site is visited do not allow us to establish your identity, unless you browse it as a registered user.

3.2 Registering an account

If you are a natural person, all the data you provide to us in the registration process and when using the Online Shop are personal data.

Such data are:

· Registration data (e-mail address; telephone number and password) – we process these data to ensure the operation of your registered account and to provide you with the information required by law. The bases for the processing activities are the conclusion and performance of a contract (for the use of a digital service) and compliance with our legal obligations (e.g. when sending a message confirming the registration).

· Address data (country, locality, address within the locality) – processing the address data is necessary so that we can deliver the products you order. The basis for the processing is the conclusion or performance of a contract concluded with the data subject, and providing the data is mandatory. If you provide address data before placing an order, we process the data on the basis of your consent, expressed by affirmative action. You can withdraw it at any time by deleting the data from your account.

· Data on wished-for products (containing the products you have marked as favourites) – processing these data is necessary to give you a personalised service, including by making it easier to order the products. The basis for the processing is your consent, expressed by the affirmative action of marking the product as a favourite. You can withdraw your consent at any time through the functions of the information system.

· Choice to receive notifications (newsletter) – by keeping the data on your choice, we enable you to decide whether to receive messages containing our newsletter. The basis for the processing is a legal obligation, namely the requirement to prove that we send the newsletter in accordance with our customers' wishes.

· Data on orders placed (date and number of the order, products ordered, amount due, ordering method, payment method, the courier who will make the delivery, and the order's waybill number) – these data are created in connection with the conclusion and performance of a contract for the sale of the goods we offer. The basis for the processing is the conclusion and performance of a contract with the data subject.

· Data on returned products (date and number of the return request, product returned, amount to be refunded, refund method) – these data are necessary to comply with our legal obligation to give you the option of returning products bought at a distance. The basis for the processing is compliance with a legal obligation of the controller.

3.3 Buying from the online shop “fiecoffee.com”

To process an order you place and to be able to fulfil it, we need you to provide information about the product ordered, including its price, an e-mail address and telephone number (when ordering by telephone, by e-mail or through the social networks), names and a delivery address. In the course of processing the order, we will keep data on the date and number of the order, the products ordered, the amount due, the ordering method, the payment method, the courier who will make the delivery, and the order's waybill number. The basis for processing the data is the conclusion and performance of a contract with the data subject.

To fulfil our obligation to refund the amount paid if you withdraw from the contract, we process bank details (IBAN) or record a customer credit for you to use at a later stage. The basis for processing these data is compliance with a legal obligation.

We use the data created in the process of concluding and performing the contracts for the sale of our goods to identify and prevent the conclusion of contracts with customers acting in bad faith who do not observe the rules laid down in our General Terms and Conditions. An example of such processing is identifying several consecutive cases in which the person who is to receive the order cannot be found at the address, or attempts to return goods whose commercial appearance has been impaired. Establishing such a practice will lead to the termination of the customer's registered account and to a refusal to conclude a contract. All decisions to remove a registration and/or to refuse to conclude a contract are taken with human involvement.

3.4 Customer service

To make our interaction with customers and potential customers easier, we process data about such persons when they send questions and enquiries to the published telephone number and e-mail address. This information includes names, e-mail address or telephone number, and any other information provided to us in the course of the communication. Please do not give us information that is not relevant to our business!

The basis for these processing activities is the protection of our legitimate interests, which consist in the effective management of relations with customers and potential customers.

3.5 Marketing

To promote our business and to attract new customers, we use various forms of direct marketing. The information we use depends on the type of activity. E.g. when we notify you by message of current goods, promotions and games, we use the e-mail address provided. When we offer you goods through the social networks, data on your preferences are also used. We base these activities on the legitimate interests of promoting and developing our business by providing up-to-date information about the goods we offer and promotional terms.

We may also process the information about the purchases made to analyse our business or for marketing purposes. In this case, the basis for the processing is the protection of our legitimate interests, which consist in the development of our business.

In every case where we use your information for our legitimate interests, we take care and take the necessary measures to ensure that your fundamental rights and freedoms are not affected. You can stop the processing of your personal data for marketing purposes at any time, and we will act on your request. To do so, you can use the unsubscribe option in the messages you receive, use the function for managing Notifications in your registered account, or use the standard way of exercising rights set out below.

We use the data from the advertising cookies (the shop's own Meta pixel) for behavioural advertising only if you have allowed them in the cookie bar. You can withdraw your consent at any time from the “Cookies” link at the bottom of every page (more information can be found in the Statement on the use of cookies).

The analytics cookies (Google Analytics 4, the shop's own property) are loaded only if you have allowed them in the cookie bar. In that case, we keep the identifier from the _ga cookie – a random number, not a name or e-mail address – with the order, for 14 months from the order. If the order is cancelled or returned, the shop reports this to Google Analytics directly from its server: the order's number, value and products and this identifier, without a name, e-mail address or postal address.

3.6 Social network profiles

We maintain profiles on the social networks Facebook and Instagram (services of Meta Platforms Ireland Ltd., 4 Grand Canal Square, D2 Dublin), through which we publish and share content, including commercial messages about goods and services we offer. When you visit our profiles, the social network concerned records your visit and behaviour through cookies and other technologies. You can find out more by reading the privacy information that each of them provides to its users.

As regards the information we receive through the Page Insights service, we are a joint controller together with Facebook. The service allows us to understand how our pages are used and what interests the people who visit them, but does not allow us to identify you individually and unambiguously. The main elements of the joint controller agreement are available at: https://www.facebook.com/legal/terms/information_about_page_insights_data.

4 From whom do we receive the data?

Most often we receive the data directly from you when you visit or buy products through our online shop, or when you contact us. The data may also be received from other persons, e.g. when the person placing the order and the person to whom the goods are delivered are different

If you give us information about other persons, make sure that you have a basis for providing the data (e.g. you have the person's consent) and make the person aware of this Privacy Statement.

5 How long do we keep data?

We keep personal data only for as long as is necessary to achieve the purposes for which they were collected, or for as long as the law provides. The retention periods depend on the type of information concerned. As the law requires, data on contracts of sale are kept for a maximum period of 10 years. Data on the site's visitors (kept in the log files) are kept for 1 year.

6 To whom do we disclose your personal data?

In certain cases, we may give access to the data to providers who support our business and provide us with services necessary for the operation of the online shop. Such services may be hosting and data storage (“SuperHosting.BG”). As our processors, they are obliged to ensure a high level of security, and we control the processing activities they carry out.

We do not transfer personal data to third countries or to international organisations without having ensured a reliable mechanism for protecting your rights in that exchange.

We provide data to the competent state authorities whenever the law so provides.

Where there is a basis for it, we may provide data to private-law entities that process them as independent controllers – e.g. we give courier service providers the recipient's names, telephone number and address and the amount to be paid (if payment is by cash on delivery).

7 Are your data protected?

We take reasonable physical, technical and organisational security measures designed to protect all personal data against loss, misuse, alteration, destruction or damage, as the law requires. We determine these measures on the basis of the risks we have identified, review the measures in place periodically and update them where necessary.

If you would like to know more about the measures in place, please contact us in the ways given above.

Responsibility for protecting the data is also yours. Use a password that meets current security requirements (at least 8 characters, containing an upper-case and a lower-case letter, a digit and a symbol). Keep your access details secret and do not give them to other persons. Bear in mind that even after you leave our website you remain logged in to your registered account automatically, which is why we advise you always to use the “Logout” function before leaving the site.

8 What rights do you have?

When processing personal data in connection with our business, we apply in good faith the statutory rules for the exercise of data subjects' rights.

As a data subject, you have the right to request:

· that we give you access to your personal data, subject to the rights of third parties;

· that we rectify inaccurate personal data (including the right to have incomplete personal data completed);

· that we erase personal data. This applies only in the following cases:

◦ the personal data are no longer necessary for the purposes for which they were processed;

◦ you withdraw your consent and there is no other basis for the processing;

◦ you object to processing based on our legitimate interests and we cannot show that our interests override your rights;

◦ the personal data have been processed unlawfully;

◦ the erasure is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

· that we restrict the processing of personal data to storage only, where:

◦ the accuracy of the personal data is contested;

◦ the processing is unlawful, but you oppose the erasure of the personal data;

◦ we no longer need the personal data, but you still need them for the establishment, exercise or defence of legal claims;

· to withdraw your consent at any time, the withdrawal not affecting processing already carried out;

· to exercise your right to portability – for the data that are processed by automated means on the basis of your consent or of a contract.

· to object to processing on the basis of legitimate interest, including to direct marketing – if you object to marketing, we stop the processing unconditionally;

· not to be subject to a decision based solely on automated processing – we do not take such decisions.

You exercise your rights by writing to us at shop@fiecoffee.com or to the Controller's address. We reply without undue delay and at the latest within one month; where requests are complex or numerous, the period may be extended by a further two months, of which we will inform you. We may ask you to confirm your identity.

You have the right to lodge a complaint with the Commission for Personal Data Protection: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., www.cpdp.bg, kzld@cpdp.bg – or with the supervisory authority in the Member State of your habitual residence.

9 Changes

We may update this Statement; the current version and its date are published on the site. In the event of a material change, we will notify you by e-mail if you have an account.

This Statement has been drawn up in Bulgarian. Its translation into another language is for convenience; in the event of a discrepancy, the Bulgarian text governs.