Working text. The lawyer is still reviewing it.

Data processing

Last changed: 01.11.2026

Roles

The shop is the controller of its buyers' data. RASTEZH DIGITAL EOOD, company no. 208950483, Sofia 1574, Hristo Smirnenski 10A, bl. 10A, fl. 3, apt. 11, Bulgaria. Contact: zdravei@rastezh.bg. is the processor and acts only on the shop's instructions, given through the settings and this text.

Data

Names, addresses, phone numbers, emails and orders of the shop's buyers, plus messages to them.

Security

Encryption in transit, encrypted access to connected services, data separated between shops and access only when needed. Our people keep it confidential.

Breach

If there is a data breach, we tell the shop without delay and within 72 hours.

Subprocessors

The shop allows the providers on the “Subprocessors” page. For a new one we write at least 30 days ahead and the shop can object.

Transfers outside the EU

Only to providers shown under “Subprocessors” with a location outside the EU, under standard contractual clauses.

Help

We help with buyer requests, audits and impact assessments.

End

After the contract ends the shop can download its data. We delete it within 30 days, except what the law requires us to keep.