Privacy policy
1. Who processes your data
The controller of personal data collected through the online shop at evrogas.lemonkit.store is:
Name: Evrogas 2006 OOD. Unified Identification Code (EIK): {eik}. Address: East Port - cargo gate, Varna. Email for data protection enquiries: office@evrogas.bg. Telephone: +359 877 282 806.
2. What data we collect
Order and delivery data: first and last name, telephone, email, company, delivery address or selected collection point, and order notes.
Order data: order number, items ordered, amounts, chosen delivery and payment methods, and status.
Data about messages sent to you: recipient address and message type in the outgoing email log.
Technical data: IP address, browser type and server log entries needed for shop security.
Cookies and similar technologies described on the Cookie policy page.
We do not collect card payment details. When payment is made by card, the card details are entered directly with the payment service provider and do not pass through the shop.
3. Purposes and legal bases for processing
Performance of the distance sales contract: accepting, processing and delivering orders and handling complaints. Legal basis: Article 6(1)(b) of the General Data Protection Regulation.
Compliance with legal obligations: issuing and retaining accounting documents and responding to requests from competent authorities. Legal basis: Article 6(1)(c) of the Regulation.
Legitimate interests: shop security, prevention of misuse and defence in disputes. Legal basis: Article 6(1)(f) of the Regulation.
Consent: where you have expressly requested commercial communications. Legal basis: Article 6(1)(a) of the Regulation. Consent may be withdrawn at any time.
4. Retention periods
Accounting documents and the data they contain are retained for the periods prescribed by the Accountancy Act, including 10 years for accounting registers and financial statements.
Customer data is retained for as long as necessary for the purposes in section 3, after which it is deleted or anonymised at the customer's request or at the controller's decision.
Technical logs are retained for a short period necessary for diagnostics and security.
5. Who receives data
The courier company making the delivery, to the extent necessary for delivery.
The payment service provider where payment is made by card or bank transfer.
Hosting and email service providers processing data on the controller's instructions.
Competent public authorities where required by law.
All processors act under contract and on the controller's instructions.
6. Your rights
Under the General Data Protection Regulation, you have the following rights:
Access to your data and a copy of it (Article 15). On request, the controller prepares a complete electronic record of the data the shop holds about you: customer profile details, delivery data for each order, order notes and records of messages sent to you.
Rectification of inaccurate data (Article 16).
Erasure (Article 17). Where a request is justified, personal data is irreversibly deleted: names, telephone, email, company, delivery address, order notes and the recipient address in the outgoing email log. The order itself, its number, items and amounts remain as an accounting record without data identifying you.
Restriction of processing (Article 18).
Data portability (Article 20).
Objection to processing based on legitimate interests (Article 21).
Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.
Every action on an access or erasure request is recorded in an audit log: who requested it, when and its scope.
Requests may be sent to office@evrogas.bg or to East Port - cargo gate, Varna. A response is provided within one month.
7. Supervisory authority
If you believe your rights have been infringed, you may complain to the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, website cpdp.bg.
8. Changes
The current version of this policy is published on this page. Last updated: 11 November 2026.