Privacy Policy

Last updated: 30 July 2026

1. Data Controller

The controller of the personal data processed through the online store shop.amz.bg is:

AMZ Ltd.
UIC: 831020756
Contact address: Serdika Business Centre, 2E Akademik Ivan Evstratiev Geshov Blvd., Building 2, Floor 2, Office 206, 1303 Sofia, Bulgaria
Telephone: +359 2 971 32 33; +359 2 971 28 48
Email: office@amz.bg

This Privacy Policy explains how we collect, use, store and protect the personal data of visitors and customers of our online store.

2. Personal Data We Process

Depending on how you use the website, we may process:

• name and surname;
• telephone number and email address;
• delivery and billing addresses;
• company name, UIC/VAT number and invoicing information where an invoice is required;
• information about orders, purchased products, payments, deliveries, returns and complaints;
• information provided when registering a customer account;
• the content of messages sent through contact forms, by email or through other communication channels;
• IP address, browser and device type, system logs and other technical information;
• cookie and marketing communication preferences.

When payment is made by bank card, the card details are processed by the relevant payment service provider. AMZ Ltd. does not store full bank card details.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Processing and Fulfilment of Orders

We use personal data to receive and confirm orders, process payments, issue accounting documents, arrange deliveries and handle product returns and complaints.

The legal basis is the performance of a contract or taking steps at the customer’s request before entering into a contract.

Creation and Management of Customer Accounts

We process the information required for registration, login, account management and access to order history.

The legal basis is the performance of a contract and the provision of a service requested by the user.

Communication and Customer Support

We use the information provided to respond to questions, requests, complaints and other messages.

The legal basis is the performance of a contract, taking pre-contractual steps or our legitimate interest in providing customer support.

Compliance with Legal Obligations

We store and process certain information in order to comply with accounting, tax, consumer protection and other applicable legal obligations.

Security and Protection of Legitimate Interests

Technical data may be used to protect the website, prevent fraud and misuse, identify technical problems and establish, exercise or defend legal claims.

The legal basis is the legitimate interest of AMZ Ltd. in maintaining a secure and reliable online store.

Marketing Communications

Where you have given your explicit consent, we may send you information about products, offers and promotions.You may withdraw your consent at any time by using the unsubscribe link contained in the communication or by contacting us.

The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Аналитични и рекламни технологии

Незадължителните аналитични и рекламни бисквитки се използват само след получаване на Вашето предварително съгласие. Допълнителна информация е предоставена в Политиката за бисквитките.

4. Recipients of Personal Data

Where necessary for the provision of our services, personal data may be disclosed to:

• courier and logistics companies, including Speedy;
• banks and payment service providers;
• accounting and professional advisory service providers;
• providers of hosting, technical support, email and cloud services;
• доставчици на маркетингови и аналитични услуги, когато сте дали необходимото съгласие;
• public authorities, courts and other competent institutions where required by law.

We provide only the information necessary for the performance of the relevant service or legal obligation.

We do not sell personal data or disclose it to third parties for their own independent marketing purposes.

5. Transfers Outside the European Economic Area

Some providers of technical, analytics or marketing services may process information outside the European Economic Area.

In such cases, transfers are carried out on the basis of an applicable adequacy decision or other appropriate safeguards under the General Data Protection Regulation, including Standard Contractual Clauses where required.

6. Data Retention

We retain personal data only for as long as necessary for the relevant purpose:

• order information and accounting documents are retained for the periods required by accounting and tax legislation;
• information relating to complaints and returns is retained until the matter has been resolved and the applicable limitation periods have expired;
• customer account information is retained while the account remains active or until its deletion is requested, unless a longer retention period is required by law;
• correspondence and enquiries are retained for as long as necessary to address them and protect our legitimate interests;
• marketing information is retained until consent is withdrawn;
• technical logs are retained for a reasonable period required for the security and proper operation of the website.

After the relevant period has expired, the information is deleted or anonymised unless its continued retention is required by law.

7. Your Rights

Under applicable data protection legislation, you have the right:

• to receive information about and access to your personal data;
• to request the correction of inaccurate or incomplete information;
• to request the deletion of your personal data where the legal requirements are met;
• to request the restriction of processing;
• to object to processing based on legitimate interests;
• to receive data provided by you in a structured, commonly used and machine-readable format, where applicable;
• to withdraw your consent at any time;
• to lodge a complaint with the competent supervisory authority.

To exercise your rights, please contact us at office@amz.bg. We may request additional information where necessary to verify your identity.

We will respond without undue delay and no later than one month after receiving your request, unless applicable legislation allows this period to be extended.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Website: www.cpdp.bg

9. Required Information

Providing certain personal data is necessary for entering into and performing a contract, processing and delivering an order or complying with a legal obligation.

If you do not provide the required information, we may be unable to accept or fulfil your order or respond to a particular request.

10. Automated Decision-Making

AMZ Ltd. does not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or disclosure.

Despite the measures taken, no method of transmitting or storing information can guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. The current version will be published on this page together with the date of the latest revision.