Home / Privacy Policy

Privacy Policy

How yelmira.eu collects, uses, and protects your personal information.

1. Introduction

yelmira.eu Ltd. ("yelmira.eu", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit yelmira.eu or place an order for Power Stream products. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation — GDPR) and the Bulgarian Personal Data Protection Act (PDPA).

By using this website or submitting an order, you acknowledge you have read and understood this Policy. If you do not agree, please refrain from using the website.

2. Data Controller

The data controller responsible for your personal data is:

• Company: yelmira.eu Ltd.
• Address: Sofia, Bulgaria
• Email: [email protected]
• Phone: +359 87 346 2193
• Supervisory Authority: Commission for Personal Data Protection (CPDP), Bulgaria — www.cpdp.bg

3. Data We Collect

3.1 Data You Provide Directly

• Full name
• Telephone number
• Email address
• Delivery address (street, city, postal code)
• Order details (product, quantity, payment method)
• Optional notes or messages submitted via contact forms

3.2 Data Collected Automatically

• IP address and approximate geographical location
• Browser type, device type, and operating system
• Pages visited, time on site, and referring URLs
• Cookie identifiers (see our Cookie Policy)

4. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR): Processing is necessary to fulfill your order and deliver the product.
• Legal obligation (Art. 6(1)(c) GDPR): We process data where required by Bulgarian tax, accounting, or consumer protection law.
• Legitimate interests (Art. 6(1)(f) GDPR): To prevent fraud, maintain site security, and improve our services.
• Consent (Art. 6(1)(a) GDPR): For non-essential cookies and optional marketing communications, where you have given explicit consent.

5. How We Use Your Data

• To process and fulfill orders for Power Stream
• To contact you for order confirmation and delivery updates
• To handle returns, complaints, and customer service inquiries
• To comply with legal and regulatory obligations
• To analyse website traffic and improve user experience (aggregated, anonymised)
• To send you promotional communications if you have consented — you may unsubscribe at any time

6. Data Sharing and Third Parties

We do not sell your personal data. We may share it only with:

• Delivery providers: Speedy AD and Econt Express OOD, for shipping your order
• Payment processors: Secure payment gateways for card transactions and ePay.bg
• Accounting / legal advisors: Only to the extent required by Bulgarian law
• Authorities: Where required by a lawful request from Bulgarian law enforcement or the CPDP

All third-party providers are required to process data only under our instructions and in compliance with GDPR.

7. Data Retention

• Order and customer data: retained for 5 years as required by Bulgarian accounting legislation
• Contact form submissions: retained for 12 months and then deleted
• Cookies and analytics data: as specified in our Cookie Policy

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — for any processing based on consent, at any time
• Right to lodge a complaint — with the Bulgarian CPDP at www.cpdp.bg

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

We use cookies to enhance your experience on this website. Please review our full Cookie Policy for details on the types of cookies we use, their purposes, and how to manage your preferences.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure — you submit data at your own risk.

11. Minors

Our products are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that a minor has submitted data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will reflect any changes. Continued use of the website after an update constitutes acceptance of the revised Policy.

13. Contact

For any privacy-related questions, to exercise your rights, or to report a concern, please contact us:

• Email: [email protected]
• Phone: +359 87 346 2193
• Address: Sofia, Bulgaria