Privacy Policy and Personal Data Protection

1. General provisions and information about the Controller

This Privacy Policy sets out how SOKKA EOOD (SOKKA LTD), as a reliable supplier of high-tech ingredients for the food industry, collects, processes, stores and protects the personal data of website visitors, customers, partners and counterparties.

We respect the privacy of your data and ensure full compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR), the Bulgarian Personal Data Protection Act and the applicable European Union law.

2. Principles of personal data processing

When processing personal data, SOKKA EOOD is guided by the following core principles:

• Lawfulness, fairness and transparency: Data is collected on a legal basis and processed in a transparent manner towards data subjects.
• Purpose limitation: Data is collected for specific, explicitly stated and legitimate purposes (supply of raw materials, technological support, commercial enquiries).
• Data minimisation: Only personal data that is adequate, relevant and limited to what is necessary for the purposes is collected.
• Accuracy: Measures are taken to correct or delete inaccurate data without delay.
• Storage limitation: Data is kept for no longer than necessary for the purposes for which it is processed.
• Integrity and confidentiality: Appropriate technical and organisational measures are applied to protect against unauthorised or unlawful processing, loss or damage.

3. Categories of personal data collected

3.1. Data you provide directly

When you contact us through the website, by phone (+359 888 958169), by email (sokka.eood@gmail.com) or in person at our office, you may provide us with:

• Identification data: First and last name, job title, company/employer name;
• Contact details: Email address, phone number, correspondence or delivery address;
• Enquiries and commercial information: A description of your enquiry about high-tech ingredients (AGRANA aseptic fruit solutions, pectins, milk proteins, Bulgarian bacterial cultures and other ingredients) and requests for technological support.

3.2. Data collected automatically (when you visit the website)

• Technical information: IP address, browser type and version, operating system, device type;
• Visit data: Pages viewed, date and time of the visit, referring website (URL).

4. Purposes and legal bases for processing

We process your personal data for the following purposes and on the following legal bases under Article 6(1) of the GDPR:

• Handling enquiries and consultations: Preparation for entering into a contract or taking pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Supply of raw materials and technological support: Performance of commercial arrangements and regular deliveries to your sites or warehouses (Art. 6(1)(b) GDPR).
• Legal obligations: Accounting and tax reporting, issuing invoices, compliance with legal requirements under Bulgarian and European legislation (Art. 6(1)(c) GDPR).
• Legitimate interest: Improving the functionality of the website, protecting the security of the IT infrastructure and managing business relationships (Art. 6(1)(f) GDPR).

5. Cookies

Our website uses cookies and similar technologies to ensure the normal operation of the site, remember your preferences and analyse traffic. You can manage and restrict cookies through your internet browser settings.

6. Sharing and disclosure of data (third parties)

SOKKA EOOD does not sell, rent or trade personal data. Data may be disclosed only to:

• Processors (service providers): IT and hosting companies, accounting firms, courier and logistics partners acting on the basis of written arrangements and complying with security requirements.
• State and competent authorities: Courts, the National Revenue Agency, the Ministry of Interior and other supervisory authorities where required by law or a court order.
• Protection against automated requests (Cloudflare Turnstile): When you submit the contact form, we use the Cloudflare Turnstile service provided by Cloudflare, Inc. (USA) to tell humans from automated programs (bots). For this purpose, technical data such as your IP address and browser and device data may be processed. The processing is based on our legitimate interest in protecting the website and the contact form from abuse (Art. 6(1)(f) GDPR).

7. Data retention period

We keep your personal data only for as long as necessary to achieve the purposes for which it was collected, or for the periods set by law:

• Commercial transaction data and accounting documents: Kept for 10 years in accordance with the Accountancy Act.
• Consultation enquiry data: Kept for up to 3 years after the correspondence ends, unless it develops into a contractual relationship.
• Technical analytics data: Kept in accordance with the standard retention periods of the respective analytics tools (up to 12–24 months).

8. Rights of data subjects

As a data subject, under the GDPR you have the following rights:

• Right of access: To request confirmation and a copy of the personal data processed about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure ('right to be forgotten'): To request deletion of your data where there are legal grounds.
• Right to restriction of processing: To request a temporary suspension of processing under certain conditions.
• Right to data portability: To receive your data in a structured, commonly used and machine-readable format.
• Right to object: To object to processing based on legitimate interest.
• Right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP) Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592 Website: www.cpdp.bg | Email: kzld@cpdp.bg

9. Data security

We apply modern technical, physical and administrative measures to protect personal data against unauthorised access, loss, alteration or destruction, including connection encryption (SSL/TLS) and strict access control.

10. Changes to the Privacy Policy

We reserve the right to update this Policy periodically. All changes will be published on our website with an updated date at the beginning of the document.

11. Contact us

To exercise your rights or if you have questions about personal data protection, you can contact us at:

• Name: SOKKA EOOD
• Office address: 10 6-ti Septemvri Blvd., 4002 Plovdiv, Bulgaria
• Phone: +359 888 958169
• Email: sokka.eood@gmail.com