Privacy Policy

Last updated: March 2026

1. Introduction

Odessos Supply Ltd. ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website odessossupply.com, in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Bulgarian data protection laws.

2. Data Controller

Odessos Supply Ltd.
Business Park Varna
Varna, Bulgaria
Email: [email protected]

3. Types of Data We Collect

We may collect the following categories of personal data:

  • Contact Information: Name, email address, phone number, company name
  • Communication Data: Messages you send us via contact forms or email
  • Technical Data: IP address, browser type, operating system (collected automatically)
  • Usage Data: Pages visited, time spent on site (collected automatically)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

  • Consent: For processing inquiries submitted via contact forms (Art. 6(1)(a) GDPR)
  • Legitimate Interest: For improving our services and website functionality (Art. 6(1)(f) GDPR)
  • Contract Performance: For responding to business inquiries (Art. 6(1)(b) GDPR)

5. How We Use Your Data

We use your personal data for the following purposes:

  • Responding to your inquiries and providing information about our services
  • Processing and fulfilling requests for quotes or consultations
  • Improving our website and user experience
  • Complying with legal obligations
  • Maintaining business relationships with partners and clients

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we keep inquiry data for up to 3 years after our last communication, unless a longer retention period is required by law.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you
  • Right to Rectification: You can request correction of inaccurate personal data
  • Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: You can request limitation of processing
  • Right to Data Portability: You can request your data in a structured, machine-readable format
  • Right to Object: You can object to processing based on legitimate interests
  • Right to Withdraw Consent: You can withdraw consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure storage systems. However, no method of transmission over the Internet is 100% secure.

9. Data Sharing

We may share your personal data with:

  • Service providers who assist us in operating our website and business
  • Professional advisors (lawyers, accountants) when necessary
  • Legal authorities when required by law or to protect our rights

We do not sell your personal data to third parties. Any third-party processors are bound by data processing agreements complying with GDPR.

10. Cookies

Our website may use cookies to enhance user experience. Cookies are small files stored on your device. You can control cookies through your browser settings. For detailed information, please refer to our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any website you visit.

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically.

14. Supervisory Authority

If you have concerns about how we process your personal data, you have the right to lodge a complaint with the Bulgarian Data Protection Commission (Commission for Personal Data Protection):

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd.
Sofia 1592, Bulgaria
Website: www.cpdp.bg

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Odessos Supply Ltd.
Business Park Varna
Varna, Bulgaria
Email: [email protected]