Privacy Policy

Since May 25, 2018, the General Data Protection Regulation (EU) 2016/679 (GDPR) adopted by the European Union has been in force. The purpose of the regulation is to guarantee the protection of personal data of individuals in all EU member states and to harmonize the rules for their processing.

Kylyan Europe Ltd. complies with all requirements of the regulation, collecting only data that is necessary for providing the service, and processes it lawfully and fairly.

1. Information about the personal data controller

  • Name: Kylyan Europe Ltd.

  • UIC: 207935368

  • Registered office and management address: Bulgaria, Sliven, Todor Dimitriev St. 14

  • E-mail: sales@kylyan.com

  • Phone: 0882 44 68 68

2. Information about the competent supervisory authority

  • Name: Commission for Personal Data Protection

  • Registered office and address: Sofia 1592, "Prof. Tsvetan Lazarov" Blvd. No. 2

  • Phone: 02 915 3 518

  • E-mail: kzld@government.bg, kzld@cpdp.bg

  • Website: www.cpdp.bg

3. Basis for collecting and processing personal data

  • Kylyan Europe Ltd. collects and processes personal data only for the purpose of fulfilling a contract or sending an offer for our services, after obtaining explicit consent from the client.

  • The principles we adhere to:

    • Lawfulness, fairness, and transparency;

    • Purpose limitation;

    • Data minimization.

4. Types of personal data collected

  • First and last name;

  • Email address;

  • Phone number.

Purpose of collection: sending an offer and fulfilling an order.

5. Data we do not collect or process

  • Data concerning racial or ethnic origin;

  • Political, religious, or philosophical beliefs, trade union membership;

  • Genetic and biometric data, data concerning health, sex life, or sexual orientation.

6. Retention period

Personal data is stored for up to 300 days after the order is fulfilled.

7. Rights of data subjects

  • Withdrawal of consent – you can withdraw your consent for processing at any time through a written request.

  • Right of access – to receive confirmation as to whether we process personal data related to you.

  • Right to rectification – to request the correction or completion of inaccurate or incomplete data.

  • Right to erasure – to request the deletion of your personal data.

  • Right to restriction of processing – to request a temporary suspension of processing.

  • Right to data portability – to receive your data in a structured, machine-readable format or to transfer it directly to another controller.

  • Right to object – to object to the processing of your personal data at any time.