Privacy policy

Last updated: March 14, 2025

Privacy Policy of www.teo.kenduro.bg

What is this policy?

We recognize the need for adequate protection of your personal data. With this policy, we want to inform you about the personal data we collect, who and how will process it, what we use it for, how long we will store it, and what protection measures we have taken to safeguard it.

Please read this document carefully before providing your personal data.

Who processes your personal data?

Your personal data is processed by "Kenduro" Ltd. "Kenduro" Ltd is registered in the Republic of Bulgaria with UIC 207045135, with its registered office and management address: Republic of Bulgaria, Blagoevgrad Region, Bansko Municipality, Bansko, 2770, 29 Pirin Street, hereinafter referred to as the "Administrator."

We are the Administrator of your personal data. As such, we are responsible for processing and storing your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation) and Bulgarian legislation.

You can contact the Administrator in the following ways:

  • In writing at: Bansko, 2700, 29 Pirin Street;

  • By phone: 0886230023;

  • By email: sales@kenduro.bg

When do we process your personal data?

We process your personal data only if you voluntarily provide it to us. The website contains options that allow you to:

  • Register on our Website;

  • Place an order for a specific product on our Website;

  • Place an order for a specific product via phone call;

  • Exercise your right to withdraw from the contract (right to return the product(s));

  • Subscribe to our newsletter if you wish to receive information about our latest products.

If you choose to use any of the above options, the Administrator processes your personal data.

What categories of personal data do we process?

Data collected during website registration: If you decide to create an account on www.kenduro.bg, you need to provide your first name, last name, and email address.

Data collected when placing an order via the Website: If you wish to place an order through the Website, you must provide your first name, last name, address within the country, phone number, and email address.

Data collected when placing an order via phone call: If you wish to place an order by calling our employee, you must provide your first name, last name, address within the country, phone number, and email address.

Data collected when exercising the right to withdraw from the contract: If you choose to exercise your right to withdraw from the contract, you must complete a standardized electronic form available on the Website or contact our employee by phone and provide your first name, last name, and address within the country.

Data collected when subscribing to the newsletter: If you want to be the first to learn about our new offers and products, you can subscribe to our newsletter by providing your email address.

We process your personal data for the following purposes:

  • To register on our Website;

  • To place an order for a specific product from our Website;

  • To place an order for a specific product via phone call;

  • To exercise the right to withdraw from the contract (right to return the product(s));

  • For direct marketing purposes if you have subscribed to our newsletter and wish to receive interesting news and offers;

  • When necessary for official procedures such as civil lawsuits, etc.;

  • For other purposes when a specific applicable law requires us to perform this processing or when we have received your explicit consent.

What legal bases do we rely on to process your personal data?

We process your personal data based on one of the following grounds:

  • Given consent for the processing of personal data for one or more specific purposes;

  • Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract;

  • Processing is necessary for compliance with a legal obligation applicable to the Administrator;

  • Processing is necessary for the legitimate interests of the Administrator or a third party unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring personal data protection.

In all cases, we will process your personal data on the grounds provided in Article 6 of Regulation (EU) 2016/679.

Do we use cookies?

To improve the functionality and quality of our website, the Administrator uses cookies. More information on the use of cookies can be found in the Cookie Policy.

Who can we share your personal data with?

We may share your personal data with the following categories of recipients:

  • Government and municipal authorities with authoritative powers;

  • Business entities, our subcontractors providing services such as IT system support, website maintenance, and other consulting services;

The Administrator has implemented appropriate technical and organizational measures to ensure the rights and freedoms of data subjects. We may share your personal data with the aforementioned categories of recipients only if they have taken the necessary guarantees and measures to ensure an adequate level of security.

The Administrator does not transfer personal data provided by data subjects to third parties outside the European Union unless we notify you in advance and specify the legal basis in Regulation (EU) 2016/679.

How long will we store your personal data?

  • Data provided for contract performance: Processed for a general limitation period of 5 years under Article 110 of the Bulgarian Obligations and Contracts Act.

  • Data provided based on consent (newsletter subscription): Processed until you withdraw your consent.

What rights do you have as a data subject?

You have the right to:

  • Access and obtain a copy of your data;

  • Rectify inaccurate or outdated data;

  • Request erasure ("right to be forgotten");

  • Restrict processing in certain cases;

  • Data portability;

  • Withdraw consent at any time;

  • Lodge a complaint with the Commission for Personal Data Protection (CPDP).

How can you exercise your rights?

You can exercise any of these rights by sending a written request to: Bansko, 2770, 29 Pirin Street, addressed to the Administrator. You can also send a request electronically per the Bulgarian Electronic Document and Electronic Signature Act.

If you have any questions about exercising your rights, contact us at sales@kenduro.bg.

What measures have we taken to protect your personal data?

The Administrator has implemented appropriate technical and organizational measures to ensure the security of your data, including:

  • Lawful and transparent processing;

  • Purpose limitation;

  • Data minimization;

  • Accuracy and timely updates;

  • Limited storage duration;

  • Secure processing against unauthorized access or loss.

What happens if you are under 16 years old?

We do not process personal data of individuals under 16 years old. By providing your data, you declare that you are at least 16 years old.

Can this policy change?

The Administrator reserves the right to change this policy at any time. Changes will be published on www.kenduro.bg.

This Privacy Policy is effective as of January 20, 2023.