Privacy Policy

We only collect the data that is necessary for communication and business relations:

• First and last name;
• Name and company details;
• Email address;
• Contact phone number;
• Messages sent via the contact form;
• Business correspondence details (for follow-up interactions).

We do not process data related to users, patients, or non-company representatives. We also do not request or store data related to age, gender, ethnicity, medical conditions, or political views.

Personal data is used exclusively for:

• Feedback on inquiries submitted through the website;
• Preparation of commercial offers and contracts;
• Communication with business partners;
• Fulfillment of legal obligations (accounting, tax reporting, contractual relations).

Data processing is carried out on the basis of:

• Article 6(1)(b) GDPR — performance of a contract or taking steps at our request prior to entering into a contract;
• Article 6(1)(c) GDPR — compliance with a legal obligation;
• Article 6(1)(f) GDPR — the legitimate interest of the company in relation to business communications.

The data is stored only for as long as necessary to achieve the purposes of its processing:

• Correspondence and contact information – up to 3 years from the last interaction;
• Accounting documents – 10 years (according to the Bulgarian Accountancy Act).
• After these periods, the data is deleted or anonymized.

"Balkan CBD" LTD does not sell or transfer personal data to third parties, except in cases where this is necessary for:

• Fulfillment of contractual obligations (e.g. courier or accounting services);
• compliance with Bulgarian and European legislation.

All contractors who have access to the data are required to comply with privacy and GDPR requirements.

The company implements technical and organizational security measures, including:

• Restricting access to data;
• Using secure servers and communication channels (HTTPS, SSL);
• Archiving and controlling employee access.

Every person whose data is processed has the right:

• To request access to your data;
• To rectify or erase data;
• To restrict or object to processing;
• To obtain a copy of your data (right to data portability).

To exercise your rights, you can send a request to: office@balkancbd.com