Privacy Policy

1) Who we are (Data Controller)

“PETMA” Ltd., UIC 208460725, VAT Number: BG208460725; Address: “Dravska Epopeya” Str. No. 8, fl. 5, City: Stara Zagora, Bulgaria.

 · Email address: info@spomena.com
 · Website: https://spomena.com
 · Platform: Shopify

This Policy explains how we collect, use and share personal data when you visit our site, place an order or communicate with us. We operate in Bulgaria.

2) Data we process

Identification and contact: name, email, phone, delivery/billing address.

Order and payment: items, amount, payment method/status (card data is processed by the payment processor/Shopify; we do not store full card details).

Personalisation: engraving text, images/files and instructions you send us.

Communications: content of emails/forms/chat.

Technical and usage: IP address, device/browser type, logs, cookies (see our Cookie Policy).

Marketing preferences (if we offer a newsletter).

3) Purposes and legal bases

Contract performance – accepting, producing and delivering your order; customer support.

Legal obligation – accounting and tax requirements; warranties/claims.

Legitimate interests – service security, fraud/abuse prevention, protection of rights, improvement of our site and processes.

Consent – marketing (e.g., newsletter) and non-essential cookies. Consent can be withdrawn at any time.

4) Who we share data with

We share data only when necessary with: Shopify (platform/hosting and related features), payment processors, Speedy (shipping), IT providers (hosting/support/analytics, if enabled), and competent authorities when required by law. In certain cases Shopify may act as an independent controller for its own features; see its privacy policy for details.

5) International transfers

Some recipients (incl. Shopify and/or IT service providers) may process data outside the EEA/UK. In such cases we apply GDPR-recognised transfer mechanisms (e.g., Standard Contractual Clauses – SCCs) to ensure an equivalent level of protection. We do not rely on blanket consent for transfers.

6) Retention periods

We keep data for as long as needed to fulfil and support your order, to meet legal time limits (e.g., accounting) and to protect rights/legal claims, after which we delete or anonymise it.

7) Your rights

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent (where processing is based on consent).

To exercise rights: email info@spomena.com. (We may ask you to verify your identity).

Complaint to the supervisory authority: Commission for Personal Data Protection (CPDP).

Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Tel.: +359 2 915 35 19
E-mail: kzld@cpdp.bg
Website: www.cpdp.bg

8) Security

We apply appropriate technical and organisational measures to protect data. No method is absolutely secure; we work with reputable partners (including Shopify) and maintain good cyber hygiene.

9) Cookies and marketing

We use cookies for essential functions, statistics and (if enabled) marketing/personalisation. Details and consent management are provided in our Cookie Policy and in the store’s consent banner.

10) Links to third-party sites

Our site may contain links to external websites. This Policy applies only to our site; we are not responsible for their practices. Please review their privacy policies before submitting data.

11) Changes to this Policy

We may update this Policy periodically. The version published on the site at the time of use/order applies. Material changes will be announced appropriately.