Privacy Policy

Personal Data Controller Information:
"AGRO MATEEV 99" EOOD is a company registered under the Commercial Law of the Republic of Bulgaria, UIC 207118245, with a registered address: Aleksandar Stamboliyski St. 47, Levski, Bulgaria.
Email: dimmysfarm@gmail.com

Legal Grounds and Purposes for Processing Your Personal Data

We process your personal data on the following legal grounds:
• Fulfillment of contracts for the delivery of our products;
• Creation of a user account on our website;
• Your explicit consent – specified in each specific case;
• Legal obligations as provided by applicable legislation.

In the following paragraphs, you will find detailed information on how we process your personal data based on the legal ground applicable in each case.

Processing for Contract Performance

We process your personal data in order to fulfill contractual and pre-contractual obligations, and to exercise our rights under contracts concluded with you.

Purposes of processing:
1. Verifying your identity;
2. Providing the functionalities of our website;
3. Issuing and sending invoices for the services/products you purchase from us;
4. Identifying and/or preventing illegal activities or actions that violate our terms and conditions.

Data processed under this ground includes:
- Contact details – mailing address, email address, phone number;
- Identification data – full name, personal ID number or foreigner’s ID number, address;
- Data related to orders placed by you;
- Correspondence related to overall service – emails, letters, requests for support, complaints, feedback;
- Payment information – credit/debit card details, bank account number, or other payment details related to transactions made;
- Additional information, such as:
- IP address when visiting our website;
- Demographic data;
- Data from your activity on the site.

Processing of the above-mentioned data is mandatory in order for us to enter into and fulfill our contract with you. Without this data, we would not be able to fulfill our contractual obligations.

Sharing Personal Data with Third Parties

We may share your personal data with third parties – subcontractors, including courier service providers, for the purpose of delivering the products you have ordered or, with your explicit consent, for direct marketing purposes.

Data Retention under Contractual Grounds

The data collected on this basis is deleted two years after the termination of the contractual relationship, regardless of whether it ended due to expiration, cancellation, or another reason.

Processing Based on Legal Obligations

In certain cases, we are legally required to process your personal data. This includes situations such as:

Compliance with the Measures Against Money Laundering Act;
Fulfilling obligations related to distance selling or off-premises sales, as per the Consumer Protection Act;
Providing information to the Consumer Protection Commission or other authorized bodies;
Compliance with obligations under the Personal Data Protection Act;
Obligations under the Accounting Act, the Tax and Social Security Procedure Code, and related regulations regarding lawful bookkeeping;
Providing data to courts or third parties within legal proceedings;
Age verification when purchasing online.

Data Retention under Legal Obligations

The data collected on the basis of legal obligations is deleted once the obligation for its collection and retention has been fulfilled or no longer applies.

Processing Based on Consent

We process your personal data on this basis only after your explicit, informed, and voluntary consent. Refusal to provide consent will not result in any negative consequences for you.

Consent is a separate legal ground for processing and the specific purpose is defined at the time it is given. It is not covered by the other grounds listed in this policy. If you have provided us with consent, and until such time as you withdraw it or terminate your relationship with us, we may:

Create personalized offers for products/services based on your preferences;
Conduct detailed analysis using basic personal data.

Data processed under this ground may include:

Data for direct marketing purposes;
Website usage data;
Social media profile data.

Sharing under this ground:
With your consent, we may share your data with marketing agencies, Facebook, Google, or similar service providers.

Withdrawal of Consent

You may withdraw your consent at any time. Withdrawal of consent does not affect the fulfillment of contractual obligations. If you withdraw your consent for any or all of the purposes described above, we will no longer use your personal data for those purposes. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

To withdraw your consent, simply contact us through our website or use our contact details.

Data Retention Under This Ground

Data collected on this basis will be deleted either upon your request or 12 months after initial collection.

How We Protect Your Personal Data

To ensure adequate protection of both company and customer data, we apply all necessary organizational and technical measures as required under the Personal Data Protection Act.

The company has implemented internal rules to prevent abuse and security breaches, supporting the safeguarding and security of your data.

For maximum protection during processing, transfer, and storage of your data, we may use additional mechanisms such as encryption, pseudonymization, and others.

User Rights

Every user of the site is entitled to all data protection rights under Bulgarian legislation and EU law. You can exercise your rights by contacting us via email.

You have the right to: - Be informed (about the processing of your personal data); - Access your personal data; - Request correction (if your data is inaccurate); - Request deletion of your personal data (the "right to be forgotten"); - Restrict processing by the controller or processor; - Data portability between different controllers; - Object to the processing of your personal data; - Not be subject to a decision based solely on automated processing, including profiling, which significantly affects you.

You may request deletion if: - The personal data is no longer necessary for the purposes for which it was collected; - You withdraw your consent and there is no other legal ground for processing; - You object to processing and there are no overriding legitimate grounds; - The data was unlawfully processed; - Deletion is necessary for compliance with a legal obligation under Union or Member State law; - The data was collected in relation to the offer of information society services to children and consent was given by a parent or guardian.

You may request restriction of processing when: - You contest the accuracy of the data (restriction applies for a period allowing verification); - Processing is unlawful and you oppose deletion, requesting restriction instead; - The controller no longer needs the data but you require it for legal claims; - You have objected to processing pending verification of overriding legitimate grounds.

Right to Data Portability

You have the right to receive your personal data, which you have provided to a controller, in a structured, commonly used and machine-readable format and to transmit that data to another controller. You may also request direct transfer between controllers where technically feasible.

Right to Object

Users have the right to object to the processing of their personal data. The controller must cease processing unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. Objections to direct marketing result in immediate cessation of processing.

Complaint to the Supervisory Authority

You have the right to lodge a complaint about unlawful processing of your personal data with the Commission for Personal Data Protection or the competent court.