Privacy policy

GDPR — Personal Data Protection

Controller: Nadin Leder Studio EOOD, VAT BG207691088
Address: 11 Soglasie St, Burgas, Bulgaria
Contact: nadinleather@yahoo.com

Data we collect: name, delivery address, email, phone (for order fulfillment); payment data (processed by certified providers — we do not store card details); cookies (for site functionality and analytics).

Legal basis for processing:
- Contract performance (Art. 6(1)(b) GDPR) — order processing and delivery
- Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax requirements
- Legitimate interest (Art. 6(1)(f) GDPR) — fraud prevention and security
- Consent (Art. 6(1)(a) GDPR) — marketing communications (can be withdrawn at any time)

Your rights: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection. To exercise your rights, contact us at nadinleather@yahoo.com.

Data retention: personal data is retained only as long as necessary for the purposes collected, or as required by law (e.g. 5 years for accounting records).

Complaints: You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP): www.cpdp.bg