Privacy Policy

The data controller is VELANO EOOD, company registration number (EIK) 208601414, VAT number BG208601414, registered address: 2 Lyuben Karavelov St., 4174 Duvanlii, Kaloyanovo Municipality, Plovdiv Province, Bulgaria, telephone: +359 894 385 632, email: office@velano.bg. For privacy questions or requests, please contact office@velano.bg.

Enquiry data. When you submit an enquiry form on the website or email us, we process the name, email address, phone number, city, company, approximate project area, enquiry type and message you provide, and the page it was sent from. Form submissions are transmitted to the website server, validated, and sent as an email to office@velano.bg through Lovable’s email sending service from an address on notify.velano.bg, with your email address set as the reply-to address. The website does not store enquiries in its own database — they are kept in the office@velano.bg mailbox for the retention periods stated here. The email service provider keeps limited technical sending records (such as recipient address, time and status) for delivery and diagnostics.

Technical data. When the website loads, hosting and related service providers may receive your IP address, request date and time, browser information and other technical data necessary to deliver and protect the site.

The current informational site is not designed to carry out advertising profiling or automated decision-making with legal or similarly significant effects. External services and browser storage are described below and in the Cookie Policy.

Enquiries from individuals about a potential purchase or service: taking steps at your request before potentially entering into a contract (Article 6(1)(b) GDPR).

General correspondence and business-representative enquiries: our legitimate interest in receiving and responding to business communications (Article 6(1)(f) GDPR). This interest consists of maintaining business relationships and replying to voluntarily submitted enquiries.

Contractual and accounting documents: compliance with applicable legal requirements, including accounting and tax obligations (Article 6(1)(c) GDPR).

Technical delivery and security of the website: our legitimate interest in keeping the website operational and protecting it against abuse (Article 6(1)(f) GDPR).

We do not automatically enrol people who submit an enquiry in advertising mailing lists.

Correspondence relating to enquiries that do not result in a contract is retained until the enquiry is closed and for 12 months after the last substantive communication, unless longer retention is required by law or for the establishment, exercise or defence of legal claims.

Where a contract is concluded, documents and correspondence needed to perform it or comply with accounting, tax or other legal obligations are retained for the applicable periods. Technical logs held by external providers are retained in line with their verified settings and retention periods for the relevant service.

Google Workspace — provides the office@velano.bg mailbox and processes incoming correspondence.

Lovable — sends website form enquiries as email to office@velano.bg (email sending service on the notify.velano.bg domain).

Cloudflare Turnstile — protects the forms against spam and automated abuse. When a form loads and is submitted, Cloudflare processes technical data such as IP address and browser and device characteristics to check that the request comes from a human. Legal basis: legitimate interest in protecting the website and our mailbox (Art. 6(1)(f) GDPR). VELANO does not use this data for advertising or profiling.

Lovable and the hosting services actually in use — website delivery and protection. Cloudflare manages the domain’s DNS and may take part in delivering website traffic.

The website’s fonts are hosted locally with the website; your browser does not send requests to Google Fonts.

Shopify — provides catalogue information; automated website ordering and payment are not active.

A provider or its subprocessors may process information outside the European Economic Area. Where a particular operation involves transferring personal data to a third country, a lawful transfer basis must be in place (for example, an adequacy decision or appropriate safeguards under Chapter V GDPR). You can request details of the applicable mechanisms and how to obtain information about relevant safeguards at office@velano.bg. We do not sell personal data.

Subject to the conditions set out in the GDPR, you have rights of access, rectification, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests. If any separate activity relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, contact office@velano.bg.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, and seek a judicial remedy.

For information about functional browser storage and potential cookies used by service providers, see the Cookie Policy.

Whether data must be provided. You may browse the website without giving contact details. Information included in an enquiry is voluntary, but we may be unable to respond without a contact address. Further information may be required to conclude a contract, and you will be informed separately where applicable.

This policy may be updated, for example when the online shop launches. The date of the latest version is shown on this page.