Tan Shapes EOOD (We, the Data Administrator) respects the privacy of its customers and guarantees the maximum protection of their personal data. This Privacy and Data Protection Policy (hereinafter referred to as the “Privacy Policy”) has been prepared and is based on the current Bulgarian and European legislation in the field of personal data protection. It aims to explain what data we collect about you, how and why we process it.

Please read this Privacy Policy carefully before using the site (the Site) or any of its functionalities, as well as before placing an order through the site. If you do not wish us to process your personal data in the manner described in this Privacy Policy, please do not provide it to us. The provision of personal data by you is voluntary, in order to purchase the goods we offer. Please note that we will not be able to deliver the goods you want to order if you do not provide us with the necessary information.

If you have any questions or comments about this Privacy Policy, please contact us at the contact details below.

Who processes and is responsible for your personal data?

Tan Shapes EOOD is a company registered in the Commercial Register and the Register of Non-Profit Organizations at the Registry Agency with UIC 206188803, which collects, processes and stores your personal data under the terms of this Privacy Policy. Tan Shapes EOOD is a personal data administrator within the meaning of the Personal Data Protection Act (PDPA). You can contact us at any of the following coordinates:

Address of management and correspondence: Sofia, Iztok residential complex, 3 Svetoslav Obretenov Str., 1st floor, apartment 1


Categories of personal data we process:

Identification data;
Contact details – e-mail, telephone number;
Statistics – IP address; pages visited; identifiers stored in cookies locally at the user of the Site, information about the browser / information system.
Financial information – bank account, VAT registration, etc. required by applicable accounting or tax legislation. This information is not always collected, but only if you have chosen a payment method that requires its collection or have requested an invoice in your name.
Data on the legal representative or proxy of the legal entity – the above data may also be collected for the representatives of the legal entity, if the sale was made to the legal entity and / or if an invoice is required to the legal entity.

For what purposes do we use your personal data?

Tan Shapes EOOD is a manufacturer of the goods offered on the Site. We process your personal data so that we can offer and sell our goods. The main platform for selling our goods is our online store, operated through the platform of the Site.

Legal basis for processing your personal data:

for concluding or fulfilling contracts with us (expressed in concluding contracts for purchase and sale of goods) or in connection with preparation for concluding contracts with us. This includes the administration of our contractual relations, including the provision of warranty service (if applicable);
to fulfill our legal obligations in connection with your order – such as: obligations in connection with our activities; processing and administration of your complaints, signals, complaints and compliments; communication with competent authorities in connection with a signal or complaint submitted by you; tax and social security control by the relevant competent authorities; fulfillment of financial obligations – obligations provided for in the Accounting Act and the Tax-Insurance Procedure Code and other related normative acts, in connection with the maintenance of correct and lawful accounting; fulfillment of obligations in connection with distance selling, off-site sales, provided for in the Consumer Protection Act, etc .;

For how long do we store and process your personal data?

Personal data processed for the purpose of concluding / amending and executing contracts – for the term of the contract and until the expiration of 5 years from its termination / execution;
Personal data processed for the purpose of issuing accounting / financial documents and for the purposes of tax control, audit and subsequent financial inspections – 10 (ten) years, as of January 1 of the reporting period following the reporting period to which they relate ( 12, para 1, item 2 of the Accounting Act).

Personal data may be stored for a longer period than indicated above in the event of a legal dispute or administrative inspection, until their final resolution by an effective court / arbitration decision or completion of the inspection, as well as in other cases provided in the law.

Where do we store your data?

The data we process for you are stored within the European Union and the European Economic Area (“EEA”).

Based on the information available as of the date of this notification, we (as a Data Controller) do not transfer or plan to transfer your personal data outside the European Union.

Any changes to the information above will be reflected by a change to this Privacy Policy.

Categories of third parties that may access and process your personal data

Your personal data, which is accessed by third parties, is processed to achieve the purposes described in this Policy. In the process of providing the services and administering the relationship with you, it may be necessary to use third parties, such as:

Transport / courier companies, postal operators in order to fulfill our contractual obligations, incl. with a view to sending the goods ordered and purchased by you and the need to verify their identity upon delivery;
persons who on assignment maintain equipment, software and hardware used for personal data processing and necessary for building the company’s network and for performing various services for reporting, payment for services and products, technical support, etc .;
Persons performing consulting services in various fields – lawyers, accountants, etc.
bodies, institutions and persons to whom we are obliged to provide personal data under current legislation;
banks, payment institutions – to service the payments made by you;

Please note that some of these companies have an independent right or obligation to process your personal data as independent administrators.

!! Please note that if you choose to pay by online debit / credit card transaction, payment is facilitated through an independent payment service provider. When you prefer to pay online, the Site will redirect you to the payment site where the data needed to process the transaction is collected. No part of the data processed during the online transaction is sent to us. We only receive information about the successful execution of the online payment.

Your Rights in connection with the processing of your personal data

– General rights

At any time while storing or processing your personal data, you have the following rights:

to request from us a copy of your personal data and the right to access your personal data at any time, as well as to request information why we process them;
request that we correct, without undue delay, your inaccurate personal data as well as data that is no longer up to date;
if there are certain prerequisites, to request from us your personal data in a form convenient for transfer to another personal data controller, or to ask us to do so (right of portability);
request that we delete your personal data without undue delay if there are any legal grounds for doing so;
ask us to restrict the processing of your personal data, in which case your data will only be stored but not processed. Our refusal to limit the processing of your personal data (if any) will be explicit and only in writing, and we are obliged to motivate it with a legitimate reason;
to withdraw your consent (if the processing is based on prior consent) for the processing of your personal data at any time with a separate request addressed to us when the processing is based on a given consent;
to object to the processing of your personal data in cases where the processing is based on our legitimate interest. If your objection is justified, we will suspend the processing of your personal data;

– You have the right to appeal to the supervisory authority
In connection with the processing of your personal data by us, you have the right to file a complaint to the supervisory authority, the competent authority being the Commission for Personal Data Protection, address: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov ”№ 2 (

– Automated decision making
We do not use your personal data for automated decision-making, including profiling, which has legal consequences for you or significantly affects you.

– Can you refuse to provide personal data and what are the consequences?
We need certain data to identify the party to the contract, its proxy, contact details, delivery details. Failure to provide such information prevents us from entering into a contract with you.

Link to other sites

Sometimes the Site may contain links (hyperlinks) to other sites. We do not operate the linked sites and do not endorse the content, services and products of these sites. We are not responsible for the privacy policies or content of such sites and advise you to review their privacy policies.

Amendments to the Privacy Policy

We may periodically update our Privacy Policy. In the event of a change in this policy, a notice will be posted on our website, as well as the updated Privacy Policy. All changes and additions to the Privacy Policy will be applied only after the publication of its current content, available through our Site.

This policy has been adopted and enters into force on 15.08.2020.

© 2021 CottonHug. All rights reserved.

Web development Сайт изработка от Георги Жуковски
Add to cart