This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

  1. Data Controller

The controller of your personal data is RED BARONESS LTD, registered in the Republic of Bulgaria, with contact details as follows:

  • Email: [redbaroness.art@gmail.com]
  • Address: [Sofia/Bulgaria]

We are committed to protecting your personal data and complying with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Bulgarian Law of Protection of Personal Data.

  1. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification and contact details: name, email address, phone number, delivery address;
  • Order information: product purchases, transaction details, order history;
  • Communication records: messages, inquiries or feedback you send us;
  • Account information: if you create an account on our website;

–     Technical data: IP address, browser type, device type (collected during site visits).

  1. Why We Process Your Data (Legal Grounds)

We process your personal data only when legally permitted. Most commonly, we rely on the following grounds:

  • Performance of a contract: to fulfill your orders and provide customer service;
  • Legal obligations: to comply with applicable accounting, tax, and consumer protection laws;
  • Legitimate interests: to improve our services, prevent fraud, and protect our business;
  • Your consent: where explicitly required (e.g., for sending newsletters)
  1. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Up to one year for accounting and tax-related records;
  • For the duration of your account, and up to one year after deactivation;
  • Immediately upon request, for data processed solely on the basis of your consent
  1. Who We Share Your Data With

We do not sell your data. We may share personal data only with:

  • Service providers (e.g., couriers, payment processors, IT support);
  • Public authorities when required by law;
  • Professional advisors, where necessary for legal or regulatory matters;

All third parties are contractually obliged to handle your data securely and only for specified purposes.

  1. International Data Transfers

Your data may be transferred outside the EU/EEA, but only:

  • To countries with an adequacy decision by the European Commission;
  • Under Standard Contractual Clauses (SCCs) or other legal safeguards;

We ensure all transfers comply with GDPR requirements.

  1. Your Rights

You have the right to:

  • Access your personal data;
  • Request rectification of incorrect or incomplete data;
  • Request deletion of your data (“right to be forgotten”);
  • Restrict processing under certain circumstances;
  • Object to processing based on legitimate interests or direct marketing;
  • Data portability, where applicable;
  • Withdraw consent at any time (if processing is based on consent).

To exercise your rights, contact us at: [redbaroness.art@gmail.com]. We may ask you to verify your identity before fulfilling your request.

  1. Complaints

If you decide that your data protection rights have been violated, you may send a complaint to the Bulgarian Commission for Personal Data Protection (CPDP):

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone: +359 2 91 53 518

Email: kzld@cpdp.bg

Website: www.cpdp.bg

We encourage you to contact us first so we can try to resolve your concern.