Privacy Policy

1. General information

This Privacy Policy describes how NUTTY LTD processes personal data in the course of its business and when you use this website.

Personal data controller:
NUTTY LTD
UIC: 203098126
VAT: BG203098126
Address: Bulgaria, 1606, Sofia, Krasno selo district, 2 Gen. E. Totleben Blvd., entrance G, floor 1, apt. 2
Email for data protection inquiries: info@nuttymagazin.com

The company acts as a personal data controller in accordance with Regulation (EU) 2016/679 (GDPR).

2. What data we process

We may process the following categories of personal data:

2.1. Data provided through the contact form

  • first and last name
  • job title
  • company name
  • email
  • phone
  • message content

2.2. Data obtained through business communication

  • contact details of company representatives
  • information needed to prepare commercial offers
  • contractual and billing data

2.3. Technical data when visiting the website

  • IP address
  • browser and device data
  • cookies and similar technologies

3. Purposes of processing personal data

Personal data are processed solely for the following purposes:

  • processing and responding to commercial inquiries
  • preparing and performing contracts
  • taking pre-contractual measures at the data subject's request
  • accounting and tax compliance
  • protecting the company's legitimate interests
  • ensuring the operation and security of the website

The company does not use personal data for automated decision-making or profiling.

4. Legal basis for processing

Processing of personal data is carried out on the basis of:

  • Article 6(1)(b) GDPR — performance of a contract or pre-contractual measures
  • Article 6(1)(c) GDPR — compliance with legal obligations
  • Article 6(1)(f) GDPR — legitimate interest of the controller
  • Article 6(1)(a) GDPR — consent of the data subject (where required)

5. Data retention

Personal data are stored:

  • for the duration of the business relationship
  • for the period required by Bulgarian accounting and tax legislation
  • until the purpose of processing is achieved
  • until consent is withdrawn (where processing is based on consent)

After the relevant period expires, data are deleted or anonymised.

6. Transfer of data to third parties

The company may transfer data to:

  • accounting and legal advisors
  • IT and hosting providers
  • public authorities where required by law

All third parties process data in accordance with GDPR and applicable law. Personal data are not transferred outside the European Union except where appropriate safeguards are in place.

7. Data subject rights

Under the GDPR you have the right to:

  • access your data
  • have inaccurate data rectified
  • have data erased ("right to be forgotten")
  • restrict processing
  • data portability
  • object to processing
  • withdraw consent at any time
  • lodge a complaint with the Commission for Personal Data Protection of the Republic of Bulgaria (CPDP)

CPDP contact: www.cpdp.bg

8. Data security

NUTTY LTD applies technical and organisational measures to protect personal data from:

  • unauthorised access
  • loss
  • alteration
  • unlawful disclosure

9. Policy changes

The company reserves the right to update this Privacy Policy. The current version is always available on the website.