PRIVACY POLICY

1. Controller

The controller is “SHARENIYKI” EOOD, UIC 208518121, 26 Otets Paisiy St., floor 5, apt. 82, Varna, Bulgaria. For questions and to exercise your rights: sharena.art@gmail.com, 0893 596 086.

2. What data we collect

We do not request special categories of data. Do not send sensitive information that is not necessary for the inquiry or order.

• name, email address and/or telephone number;
• message content and artwork details;
• order, delivery, payment and accounting-document data where a contract is concluded;
• correspondence, claims and service history;
• IP address, device and browser type, and technical logs to the extent collected for security and operation of the Website;
• evidence of consent given or withdrawn where processing is based on consent.

3. Purposes and legal bases

Submitting the contact form does not subscribe the visitor to advertising messages.

• responding to an inquiry and preparing an order — steps before entering into a contract and legitimate interest for general inquiries;
• concluding and performing a contract — performance of a contract;
• accounting — legal obligation;
• claims and protection of rights — legal obligation and legitimate interest;
• security and technical maintenance — legitimate interest;
• analytics, advertising technologies or marketing — prior consent where required.

4. Required data

Required fields are necessary so that we can respond or fulfil the order. Without them, this may be impossible. Other data is provided voluntarily.

5. Recipients

Data may be provided only where necessary to OpenAI/ChatGPT Sites and the related hosting infrastructure for the operation and security of the Website; FormSubmit.co for transmitting the contact form; the email provider; the courier and payment or banking provider agreed for the specific order; accounting, legal and IT advisers; and competent authorities where legally required.

We do not sell personal data. The specific courier and payment method are stated in the individual offer.

6. Transfers outside the EEA

Where a provider processes data outside the European Economic Area, an applicable adequacy decision or appropriate safeguards, including standard contractual clauses, and additional measures where necessary, are used.

7. Retention periods

• general inquiries without a contract — up to 12 months after the correspondence ends;
• contracts, payments and accounting documents — for the statutory accounting and tax periods;
• claims and disputes — until they are resolved and the applicable limitation periods expire;
• technical logs — for the hosting provider’s minimum periods necessary for security;
• consent-based data — until consent is withdrawn or the stated period expires.

8. Your rights

To exercise your rights, write to sharena.art@gmail.com. We may request the information necessary to confirm identity and will respond within the statutory time limits.

• access and information; rectification; erasure; restriction;
• portability where applicable;
• objection to legitimate-interest processing and direct marketing;
• withdrawal of consent without affecting prior lawful processing;
• a complaint to the Bulgarian Commission for Personal Data Protection through cpdp.bg.

9. Security

We apply appropriate technical and organisational measures against loss, unauthorised access, alteration and disclosure. No internet transmission can be guaranteed as absolutely secure.

10. Children’s data

The Website is not intended for children to enter into contracts independently. If unnecessary children’s data is received without a valid basis, we take steps to erase it.

11. External services

Facebook, Instagram and other external services are independent controllers for processing after you open them. Please read their policies.

12. Changes

The policy is updated when the processing or the law changes. Material changes are indicated in an appropriate manner.