Privacy Policy (GDPR)
This notice explains how personal data is processed when you visit or use CepteWeb and its services. It is intended to satisfy transparency requirements under the GDPR for users in the EEA/UK and related jurisdictions.
1. Controller
- Legal name: ДЖЕПЕТЕВЕС ДИГИТАЛ СЪРВИСИС ЕООД (CEPTEWEB DIGITAL SERVICES LTD)
- Registered address: ЖК ЛЮЛИН 10, бул. ГЕН. НИКОЛАЕВ ГЕНЕВ № 12А, партер, Sofia 1335, Bulgaria
- UIC/EIK (Bulgaria): 208656341
- VAT: BG208656341
2. Categories of data
- Account & contact: name, email, phone (if provided)
- Transactions: orders, billing details, shipping/contact addresses
- Technical: IP address, device/browser data, logs, session/cookie data
- Support: messages and support tickets
3. Purposes & legal bases
- Contract: provide services, manage accounts, process orders
- Legal obligation: accounting/tax and mandatory record-keeping
- Legitimate interests: security, fraud prevention, service improvement
- Consent: marketing communications and analytics/marketing cookies where required
4. Cookies & similar technologies
We use essential cookies required for the website to function. Where required by law (e.g., in the EEA/UK), analytics or marketing tags are only used after your consent.
See: Cookie Policy
5. Sharing / recipients
We may share personal data with service providers strictly as needed to deliver the service:
- Payment providers (Stripe Inc. - payment processing)
- Shipping/logistics providers (for physical products)
- Hosting/email delivery/support tooling providers
- Authorities where legally required
6. International transfers
Depending on infrastructure location, data may be transferred internationally. For EEA/UK transfers, appropriate safeguards (e.g., SCCs) are used where required.
7. Retention
We retain data only as long as necessary for the purposes above and in line with legal retention periods.
8. Your rights
You may have GDPR rights including access, rectification, erasure, restriction, objection, and data portability. Where processing is based on consent, you can withdraw consent at any time.
9. Supervisory authority
You may lodge a complaint with your local data protection authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP).
10. Contact
For privacy requests: support@cepteweb.com
Language & Interpretation: This Agreement is executed in English. In case of any discrepancy between translations, the English version shall prevail.
Last updated: 2 January 2026