Last updated: [date]
Who is responsible
[Company legal name], [address], europe@ombrevelle.com, is the controller of your personal data under the General Data Protection Regulation (GDPR).
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, address, email, phone, order details | Processing and delivering your order, customer service | Contract (Art. 6(1)(b)) |
| Invoices and payment records | Accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Account login | Your customer account, if you create one | Contract (Art. 6(1)(b)) |
| Email address for the newsletter | Sending news and offers | Consent (Art. 6(1)(a)) |
| Analytics and advertising cookies | Measuring the shop and our ads | Consent (Art. 6(1)(a)) |
| Technical data (IP address, logs) | Security and fraud prevention | Legitimate interest (Art. 6(1)(f)) |
Who receives your data
Only the providers we need to run the shop, under data processing agreements: our hosting provider (servers in Frankfurt, Germany), our payment provider [name], our couriers [names], our email provider and, only with your consent, analytics and advertising services [Google, Meta]. Some of these companies may process data outside the EU; where they do, transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
Order and invoice data for as long as tax law requires ([10] years). Account data until you delete your account. Newsletter data until you unsubscribe.
Your rights
You can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interest, and withdraw consent at any time. Write to europe@ombrevelle.com. You may also complain to the Commission for Personal Data Protection in Bulgaria (cpdp.bg) or the data protection authority of your own country.
Cookies
See our cookie policy.