PRIVACY POLICY (GDPR)
lucaro-tools.com
1. Data Controller
The data controller responsible for processing your personal data is:
Lucaro Tools EOOD
Chudnite Mostove 4
9007 Varna, Bulgaria
UIC: 208628500
VAT No.: BG208628500
Email: info@lucaro-tools.com
Phone: +359879412065
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Full name
- Billing and delivery address
- Email address
- Phone number
- Payment-related information (processed via secure payment providers)
- IP address and device information
- Order history and purchase details
3. Purpose of Data Processing
Your personal data is processed for the following purposes:
- Processing and fulfilling orders
- Payment processing and fraud prevention
- Delivery of purchased goods
- Communication regarding orders and customer service
- Accounting and legal obligations
- Improving website functionality and user experience
4. Legal Basis for Processing
We process your personal data based on:
- Performance of a contract (order fulfillment)
- Legal obligations (tax and accounting requirements)
- Legitimate interest (website security, fraud prevention)
- Consent (where required, e.g., marketing if applicable)
5. Sharing of Personal Data
Your data may be shared with third parties only when necessary:
- Payment providers (e.g., UniCredit Bulbank)
- Courier and logistics companies
- Accounting and legal service providers
- IT and hosting service providers
All third parties are obligated to process your data securely and lawfully.
6. Payment Processing
All card payments are securely processed via UniCredit Bulbank.
We do not store or have access to your full card details.
7. Data Retention
We retain personal data only as long as necessary:
- Order and invoice data: up to 10 years (legal requirement)
- Customer communication: up to 3 years
- Technical data (logs, IP): limited retention as required for security
8. Your Rights under GDPR
You have the following rights:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
To exercise your rights, contact us at the email above.
9. Complaints
You have the right to file a complaint with a supervisory authority:
- Commission for Personal Data Protection (CPDP / KZLD), Bulgaria
10. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
11. Cookies
Our website uses cookies to ensure proper functionality and improve user experience.
Cookies may include:
- Essential cookies (required for website operation)
- Analytics cookies
- Functional cookies
You can manage cookie preferences through your browser settings.
12. Changes to This Policy
We reserve the right to update this Privacy Policy at any time.
The latest version will always be available on this page.
