Privacy policy

We at "VALIVAL" Ltd. approach with responsibility the confidentiality, security and protection of the personal data of our customers and we want you to be familiar with the way in which we collect, use and process your personal data. We process your personal data in compliance with the principles of legality and transparency.


This Privacy Policy applies to the Personal Data We Process when you interact with our website located at $site_name whether you use a computer, mobile phone, tablet, TV, home appliance or other device to access our services.

This Privacy Policy can be changed at any time in case of changes in applicable laws, as well as changes in the way your Personal Data is processed. The current version of the Privacy Policy will always be available on this page, at the end of which you will find the date of the last update. We may notify you if the changes made significantly affect your rights.

The processing of Personal Data will always be in accordance with the General Data Protection Regulation 2016/679 ("Regulation"). For the purposes of this Privacy Policy, the terms "personal data", "data subject", "processing", "third party", "data subject consent" have the same meaning as provided by the European legislator when introducing the Regulation.


You do not need to provide Personal Data to use our Website, but if you wish to use certain of our services through our Website, the Processing of Personal Data may become necessary.

We collect the following Personal Data that you provide to us while using our Website

  • name and surname;
  • phone number;
  • Email;
  • other personal data provided by you;

In addition, if you give your prior consent, we collect information about your use of our Website - this is done through the so-called cookies. The information could include time and frequency of website visits, browser type, operating system type, network and IP address information, and more. For more information about cookies and how you can manage them, visit our Cookie Policy .


We only use your Personal Data for specific purposes specified in advance at the time of collection and after your express Consent (where Consent is a legal basis for processing), or for additional compatible purposes in accordance with the law.
The purposes for which we process your Personal Data are:

  • to respond to your inquiries submitted through our contact form;
  • to provide products and services that you order through our website;
  • to provide efficient service to our customers and to improve the content and functionality of our website;
  • to improve the quality of our services;
  • to contact you to provide newsletters, special offers, helpful tips, updates and information we think will be of interest to you;
  • to contact you with information about your use of our website;
  • to ask for your opinion about our products and services;
  • for the purposes of our marketing and advertising activities;
  • for any other purpose in accordance with this Privacy Statement or for which we have obtained your specific Consent.

Provision of Personal Data to third parties

  • Your Personal Data may be provided to third parties only on the condition that they undertake the same obligations to ensure adequate levels of protection provided for in the Regulation. 
  • Your Personal Data may also be transferred to third parties acting on our behalf, for further processing in accordance with the purposes for which it was originally collected, or to be Processed lawfully in another way, such as the provision of services, evaluating the usefulness of this website, marketing, data management or technical support.
  • Our contractual relationship with these third parties obliges them to use your Personal Data only for the agreed purpose and not to sell your Personal Data to third parties, and not to disclose it to third parties, except as required by the Regulation or as permitted by us or the terms specified in this Privacy Policy.
  • The personal data we collect from you may be processed, accessed and stored outside the European Union in countries with a lower degree of protection of Personal Data than that provided for in the Regulation. In the event that we provide your Personal Data to external companies in other jurisdictions, we will ensure that such transfers of Personal Data are protected against the appropriate safeguards provided by the Regulation, such as standard data protection clauses. You have the right to request a copy of the available standard data protection clauses based on which we transfer your Personal Data to such countries. Where the risk to the protection of your Personal Data is very low, we may rely on your informed consent for such transfers.
  • Your Personal Data may be disclosed: to third parties if we are required to do so by applicable law, court order, subpoena or government act; if we believe in good faith that disclosure is necessary to protect legal rights, protect your safety or that of others; as part of a criminal or other legal investigation or proceeding in the Republic of Bulgaria or abroad.
  • We do not transfer, sell or exchange your Personal Data to third parties (including for marketing purposes).
  • It is possible to provide analytical data to third parties based on the use of cookies. For more information about cookies and how we use them, visit our Cookie Policy .


Article 6, paragraph 1, b.a) of the Regulation is the legal basis for which we require your Consent for the purposes of specific processing. If the Processing of Personal Data is necessary for the performance of a contract to which you are a party, such as when the Processing is necessary for the delivery of goods or for the provision of another service, the Processing is based on Article 6, paragraph 1, b. b) of the Regulation. The same applies to Processing that is necessary to carry out pre-contractual measures, for example in the case of inquiries regarding our products or services. If our company has a legal obligation under which the Processing of Personal Data is necessary, such as for the fulfillment of tax obligations, the processing is based on Article 6, paragraph 1, b.c) of the Regulation. Processing that does not fall under the legal grounds stated above, but is necessary for the benefit of the legitimate interests of our company, except where the interests or fundamental rights and freedoms of the Data Subject prevail over such interests, is based on Article 6, paragraph 1, b.e) of the Regulation. In this case, the legitimate interest of our company is to carry out our activity for the benefit of our customers, employees.

Terms of storage of personal data

Your Personal Data will not be stored for longer than is necessary for the purposes for which it was collected. This means that once the objectives have been met, the data will be deleted or anonymized.

Also, your personal data is stored for the period relative to our contractual relationship and for a certain period thereafter, imposed by legal obligations.

When there are no other grounds that oblige us to store (part of) your Personal Data, you may request the deletion of information about you. 


We strive to use appropriate organizational, technical and administrative measures to protect Personal Data within our organization. For this purpose, we apply all legal and technical measures for the protection of Personal Data in accordance with Article 32 of the Regulation, as well as taking into account the latest advances in technology. Please note, however, that despite adequate steps to protect information, no website, Internet connection, computer system or wireless connection is completely secure.


  • Right to information and access:

    At any time, you have the right to receive free information about whether we process your Personal Data and the ways in which we process it, including purposes of processing, types of data, recipients of data, your rights and more. If you wish to take advantage of the right of access, you can contact us at any time at the contacts indicated at the end of the Privacy Policy.

  • Right to data portability:

    Where the processing of your Personal Data occurs in an automated manner based on your Consent or on the basis of a contractual agreement, you have the right to receive a copy of your data in a structured, widely used and machine-readable format, transferred to you or to another party.

  • Right to rectification:

    You have the right to request rectification of your Personal Data without undue delay if such data is inaccurate, and to have the data completed in case of incomplete information. You can correct your personal data by contacting us at the contacts indicated at the end of the Privacy Policy.

  • Right to erasure (“right to be forgotten”):

    You have the right to request the erasure of all personal data processed by us at any time in the following situations:

    - The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

    - You wish to withdraw your consent on which data processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the Regulation and there is no other legal basis for the processing;

    - You wish to object to processing pursuant to Article 21(1) of the Data Protection Regulation and there are no overriding legitimate grounds for the processing, or you object to processing pursuant to Article 21(2) of the Regulation;

    - Personal data were processed illegally;

    - Personal data must be deleted in order to comply with a legal obligation under the law of the European Union or the law of a Member State that applies to the controller;

    - The personal data were collected in connection with the provision of information society services under Article 8, paragraph 1 of the Regulation.

    If we have provided your Personal Data to third parties we are obliged – subject to available technology and implementation costs – to take appropriate steps, including technical measures, to inform these third parties that you have requested deletion of your data or copies or replicas of this personal data.

    The right to be forgotten cannot be exercised in the following situations:

    - if you have an outstanding debt to us, regardless of the method of payment;

    - if you are suspected of misuse or have misused our services;

    - if you have made a reservation, we will retain your personal data in connection with your transaction in accordance with legal obligations.

  • Right to object to processing based on legitimate interest:

    You have the right to object to processing of your Personal Data based on our company's legitimate interest. We will stop processing your Personal Data unless it is proven that there are compelling legal grounds for doing so that take precedence over your interests and rights or due to legal claims.

  • Right to object to direct marketing:

    You have the right to object to receiving marketing communications, including profiling and analysis for direct marketing purposes.

    You can opt out of direct marketing in the following ways:

    - by following the instructions in each message received on your e-mail;

  • Right to restriction of processing

    You have the right to request restriction of Processing when one of the following circumstances applies:

    - if you claim that your Personal Data is inaccurate, we will restrict Processing until the accuracy of the data has been verified.

    - the processing is unlawful, but the data subject does not wish the personal data to be deleted, but instead requests the limitation of its use;

    - if we no longer need your personal data for the purposes of the Processing, but they are necessary for the establishment, exercise or defense of legal claims;

    - if you object to the Processing on the basis of our legitimate interest, in which case we will restrict the Processing of the data pending the outcome of the verification of the legal grounds.


  • Right to withdraw consent

    You have the right to withdraw at any time your consent to the Processing of your Personal Data, when this Processing is carried out on the basis of consent.

  • Automated individual decision-making, including profiling

    You have the right not to be subject to a decision based solely on automated processing, including profiling, which gives rise to legal consequences for the data subject or similarly significantly affects the data subject, unless the decision: (1) it is necessary for the conclusion or performance of a contract between a data subject and an administrator; or (2) is permitted by the law of the Union or the law of a Member State which applies to the controller and which also provides for appropriate measures to protect rights and freedoms and legitimate interests; or (3) is based on the express consent of the data subject.

    For your information, the implementation of our activity does not require the making and implementation of automatic decisions, including profiling.

  • Right to lodge a complaint with a supervisory authority:

    If you believe that we are processing your Personal Data in an unlawful manner, you have the right to lodge a complaint with a supervisory authority in the European Union. The supervisory authority of the Republic of Bulgaria is:

Commission for the Protection of Personal Data

Sofia 1592, Prof. Blvd. Tsvetan Lazarov" No. 2    


phone: 02/91-53-555

How can you exercise your rights?

If you wish to exercise some of your legal rights, or you need help in exercising them or questions related to them, you can contact us at any time at the contacts indicated at the end of the Privacy Policy.

Protection of personal data of persons under 14 years of age

We understand the importance of protecting children's privacy. Our website is not intended for persons under the age of 14. We do not have a policy of intentionally processing data for persons under the age of 14.


Information about the administrator of personal data and contacts

  • EIK 201626112
  • 85 Knyaz Alexander Batenberg str., Stara Zagora, Stara Zagora, 6000, Bulgaria
  • +359 877 504 623

Date of last update: 26.11.2020