Privacy Policy

Dear customers,

We kindly ask you to pay attention once again to point 3 of our Terms and Conditions, which describe the Privacy Policy of ted.bg

3. Protection of Personal Data

TED BED EAD processes personal data obtained through the operation of the website https://ted.bg in accordance with the provisions of Regulation (EU) 2016/679 (“GDPR”) and related legal frameworks, including the Personal Data Protection Act.

3.1. What Are Personal Data

"Personal data" means any information related to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

3.2. What Personal Data Do We Process

The categories of personal data we process are “ordinary” personal data – names, email, address, IP address, phone number, email, etc.

3.3. For What Purposes Do We Collect Personal Data

The purposes for which TED BED EAD processes personal data are: managing our online store; fulfilling orders placed through TED BED EAD's online store based on a contract; maintaining certain functionalities of the services offered. Promoting TED BED EAD’s goods and services. The use of “cookies.” We use personal data because it helps us develop, deliver, and improve our products, services, content, and advertising. We may periodically use your personal information to send important notifications such as updates about your purchases and changes to our policies, terms, and other regulations. We may also use your personal data for internal purposes such as audits, data analysis, and research to improve TED BED EAD’s products, services, and customer communication. If you participate in an event, lottery, competition, or promotion, we may use the information you provide to manage those programs.

3.4. On What Basis Do We Process Your Personal Data

When you place an order in the ted.bg online store, we collect and process your name, phone number, delivery address, email, as this processing is necessary for the performance of the service offered based on a contractual relationship with you to fulfill the order, according to Article 6, paragraph 1, letter b) of Regulation (EU) 2016/679.
For the purpose of registering on the website (creating a profile), we process your first name, last name, email address based on your consent;
If you wish to use credit or a loan for your purchase via the online store https://ted.bg/, in this case, your personal identification number (EGN) is processed, and we act as a data processor for the administrator – the credit company you have chosen (TBI Bank EAD or Unicredit Consumer Financing EAD). We process data based on a contract with them, following their personal data protection policies, and based on your expressed intention to enter into an agreement with the selected credit company;
For tax and accounting purposes when issuing an invoice, we process your name, EGN, address, and in the case of an invoice issued to a sole trader – their name, and if issued to a legal entity – the name of the responsible person (MOL) according to our obligations under the Accounting Act;
For the purpose of sending a newsletter with offers, promotions, and news, we process your email based on your consent according to Article 6, paragraph 1, letter a) of Regulation (EU) 2016/679, meaning that the data subject has given consent for the processing of their data for the explicitly stated purposes. Based on your consent, we may also process your personal data (name, surname, phone number, and/or email) for the purposes of organizing and involving you in lotteries, games, and surveys.
For better user experience and to ensure the security of the ted.bg website, we use cookies and IP addresses based on the protection of our legitimate interest;
If you contact us by email or via the website contact form (name, email, phone), or if you call our contact numbers, we process the personal data you provide to respond to your inquiries based on a pre-contractual relationship. If the reason for your call or email is related to an order, a complaint, or another matter concerning our contractual relationship, we process your personal data based on the contract concluded between us.
Based on our legitimate interest, namely improving our products and services by collecting feedback from our customers, after purchasing a product from our online store, we may send you an email asking you to rate the purchased product, and we will provide you with an option to unsubscribe from receiving such emails. In this case, your name and rating, as well as a written review if you wish, will be published on the page of the product you purchased in our online store. By filling out and submitting the review form, you agree to this.
According to the opportunities provided by the ePrivacy Directive and based on our legitimate interest, namely increasing our sales, we may send you a reminder email to complete an order with abandoned products in your cart, and we will provide you with an option to unsubscribe from receiving such emails.

3.5. Who we disclose your Personal Data to

In certain cases, TED BED EAD may disclose personal data to our partners who work for us, providing products and services related to the Company's activities or assisting TED BED EAD in its marketing towards customers. Personal information will only be shared with us for the purpose of improving our products, services, and advertising; it will not be shared with third parties for their marketing purposes. When required by law, during legal proceedings, in a legal dispute, and/or upon request from public and government authorities within or outside your country of residence, TED BED EAD may disclose your personal data to third parties. It is also possible that we may disclose information about you if we determine that such disclosure is necessary or appropriate for national security, law enforcement, or other issues of public importance.

3.6. Transfer to Third Countries

As a rule, TED BED EAD does not transfer your data to third countries outside the EU. In certain cases, your data may be transferred to third countries for the execution of a contract between TED BED EAD and a company acting as a contractor for certain services. In these cases, TED BED EAD ensures that this transfer is carried out in full compliance with the level of personal data protection provided by Regulation (EU) 2016/679 (“GDPR”).

3.7. How long we retain your Personal Data

The personal data provided by you for the purpose of purchase and for the purpose of complaint are retained for a period of 5 years from the delivery, and if there is a complaint – 5 years from the last action related to the complaint. If a legal case is initiated within the above periods, the retention period is extended until the case is completed with a final court decision.
Personal data from invoices are retained by us in compliance with our legal obligation for a period of 10 years from January 1 of the reporting period following the period to which the invoice refers;
In case of purchase of goods on credit or through a loan, after the necessity of processing your personal data expires, we return or destroy these personal data made available to us in connection with the credit agreement;
For personal data that we process based on your consent – until the consent is withdrawn, and within 2 months, these data will be deleted.

3.8. What measures we take to protect your Personal Data

The security measures applied to protect personal data include the introduction of appropriate technical and organizational measures both at the time of defining the means for processing and at the time of processing itself, developed with a view to the effective application of data protection principles, such as minimizing the data and integrating the necessary guarantees into the processing process, as well as introducing appropriate technical and organizational measures to ensure that, by default, only personal data necessary for each specific processing purpose is processed.

3.9. What are your rights

In relation to the collection and processing of your personal data, you have the following rights:

You have the right to request a copy of your personal data and the right to access your personal data at any time;
You have the right to transfer your personal data to another personal data controller without being hindered by us;
You have the right to request the correction of inaccurate personal data, as well as data that is no longer up to date, without unnecessary delay. For the purposes of correcting or supplementing your personal data, you should submit a separate declaration stating the updated personal data;
You have the right to request that your personal data be deleted without unnecessary delay in the presence of any of the following grounds: personal data is no longer necessary for the purposes for which it was collected; when you withdraw your consent; when you object to the processing; when the processing is unlawful; when personal data must be deleted to comply with a legal obligation under Union or Member State law applicable to the controller; when personal data was collected in relation to the offering of information society services. Your personal data may not be deleted only if one of the following reasons applies:

a) exercising the right to freedom of expression and the right to information;

b) compliance with a legal obligation of the controller or for the performance of a task in the public interest, or in the exercise of official authority vested in the controller;

c) for reasons of public interest in the area of public health;

d) for the purposes of archiving in the public interest, for scientific or historical research, or for statistical purposes, to the extent that the erasure is likely to make it impossible or seriously hinder the achievement of the purposes of this processing; or for the establishment, exercise, or defense of legal claims;

You have the right to request that the controller restrict the processing of your personal data, in which case the data will only be stored but not processed;
You have the right to withdraw your consent to the processing of your personal data at any time with a separate request submitted to us. You have the right to object to the processing of your personal data, and the competent authority for this is the Commission for Personal Data Protection, address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2 (www.cpdp.bg);
If we need to use your personal data for a new purpose not covered by these terms, we will provide you with a new data protection notice and, when and where necessary, we will ask for your prior consent for the new processing.

3.10. What are the consequences if you withdraw your consent for processing

If you withdraw your consent for the processing of your personal data, you may do so at any time. The withdrawal of consent does not affect the lawfulness of processing before the withdrawal. Withdrawal of consent can be done via the electronic form on the website https://ted.bg or at the following email: [email protected]. Withdrawal of consent for processing data for the purposes mentioned above will result in TED BED EAD being unable to send you messages and newsletters with advertising, marketing, and commercial purposes, as well as contacting you regarding the customer program electronically. Withdrawal of consent for the processing of data for the above-mentioned purpose will result in TED BED EAD being unable to contact you regarding the customer program via the mobile phone you provided, as well as sending SMS messages and messages via the Viber application for advertising, commercial, and marketing purposes.

3.11. Customer Service Call Center

As a personal data controller, TED BED EAD records telephone calls (incoming and outgoing) with call centers and lines (phone numbers) intended for customer service and infrastructure management. The recording of telephone conversations and the storage and processing of audio recordings (along with personal data disclosed during the conversations) is carried out to protect the rights and legitimate interests of TED BED EAD or in connection with contractual relationships, including when orders are placed over the phone during communication between the parties in this manner (via telephone conversation).

TED BED EAD stores the audio recordings for a period of 30 days while ensuring the necessary security measures. For the above purposes, the recording is carried out with technical means and systems without automated processing features for personal data (including biometric data) of the subjects recorded in them, as well as without features for deleting personal data of the subjects in the recording or ensuring full compliance between the identity of the subjects in the recording and those who may claim their right to receive a copy of this recording. Therefore, to protect the rights of the individuals involved in the recording, the created recordings are not provided to third parties unless there is another legal basis for this.

Contact Information if you wish to reach us regarding personal data protection issues:

By email: [email protected], Plovdiv 4027, Goliamo Konarsko Shosse, TED Mattress Factory, or contact our Data Protection Officer – Brand Building Company EOOD by email: [email protected] or at the address: Plovdiv, “Mara Gidik” Str. 1, Floor 2, Office 5