Privacy and cookies
Version 2026-10-20.2 · 20 October 2026
1. Data controller and contact
TECHNO ENTERTAINMENT OOD, company ID 121516665, VAT BG121516665. Address: 6, Street 32, Vrazhdebna, Sofia 1839, Bulgaria. Email: office@technoled.eu; telephone +359 882 179 963.
This notice covers technoled.eu, its online store and the related CRM. Data is received directly from you, from your organisation’s authorised contact person or through a transaction you request. The store and CRM share one database; access is limited by staff roles.
2. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention / review criteria |
|---|---|---|---|
| Orders, delivery and payment | Name, contact and delivery details, ordered items, payment status and company invoice details when requested. | Steps requested before a contract and performance of the contract — Article 6(1)(b); applicable accounting and tax obligations — Article 6(1)(c). | Until the order, delivery, returns and applicable warranty obligations are completed. Accounting records follow their statutory retention period, counted from the relevant accounting period. Data needed for an actual claim is restricted and retained until its final resolution and the applicable limitation period. |
| Enquiries, quotations and chat | Name, email, telephone if supplied, product interests and the messages you send. | Pre-contractual steps you request — Article 6(1)(b). General business correspondence and defence of claims — legitimate interest under Article 6(1)(f). | Enquiries not resulting in an order are reviewed for deletion or anonymisation no later than 24 months after the last substantive contact. A message forming part of an order, warranty case or actual dispute follows the retention criteria for that record. An open enquiry is reviewed while it remains unresolved. |
| CRM contacts, partners and suppliers | Business contact details, organisation, contact persons, interactions, tasks and related transactions. | Contract and pre-contractual steps — Article 6(1)(b); maintaining business relationships and protecting legal claims — Article 6(1)(f). | For the active business relationship. Inactive contact records without an outstanding transaction, claim or legal retention duty are reviewed within 24 months of the last substantive contact. Linked transaction records follow their own retention criteria. |
| Warranty and complaint handling | Contact details, product/order reference, serial number, supporting documents and service history. | Performance of the contract — Article 6(1)(b); statutory duties where applicable — Article 6(1)(c); establishing and defending claims — Article 6(1)(f). | Until the case and applicable warranty duties end. Any longer retention is limited to documents required by a legal duty or an actual claim, with restricted access until the applicable limitation or statutory retention period ends. |
| Voluntary feedback and recommendations | Rating and comment linked to the service case; no card details or public customer profile. | Your consent — Article 6(1)(a). Participation is voluntary and is separate from marketing consent. | Invitation links expire after 30 days or after one response and may be revoked earlier. Feedback is reviewed for deletion or anonymisation within 24 months of receipt, unless it is necessary to resolve an associated complaint or claim. Consent may be withdrawn by email. |
| Optional website analytics | Page/product events, cart and checkout events and confirmed purchases; a hashed random session identifier. Analytics records do not contain name, email or IP address. | Consent — Article 6(1)(a). | 90 days. Withdrawing analytics consent removes this browser’s current identifier, related events and order-attribution link from the analytics module. |
| Marketing activities | Contact details, interest, campaign and documented marketing permission. | Consent under Article 6(1)(a), or a separately documented legitimate interest under Article 6(1)(f) where permitted for the particular communication. An enquiry or order alone does not grant marketing consent. | Until consent is withdrawn or an objection is received; inactive permissions are reviewed within 24 months. A minimal suppression record may be kept to respect the objection. |
| Administration and security | Personal staff account, role, login and action records. | Legitimate interest in protecting the service and controlling authorised access — Article 6(1)(f). | Access ends when the staff role ends. Security and action records are reviewed at least annually and retained only while needed for an incident, access review or related claim. |
The review periods above are operational limits, not permission to retain unnecessary data. We assess the last substantive contact, completion of contractual and warranty duties, the category of accounting document and any actual claim. Records needed only for a legal obligation or dispute are separated from everyday marketing use. The service team handles retention reviews; automated 90-day deletion applies to analytics.
3. Recipients and external services
Authorised staff, hosting and SMTP service providers, the selected courier (for example Speedy or Econt), accounting advisers and competent authorities receive only the data necessary for their task or a legal duty. Card details are not stored by TECHNOLED. If card payments are enabled and you proceed to checkout, Stripe processes the payment on its own secure page. Google Maps is loaded only after consent to external content. This version loads no GA4 or advertising pixels.
Google and Stripe may process data outside the EEA according to their applicable arrangements. Information about their recipients, transfers and safeguards is available in the Google Privacy Policy and Stripe Privacy Policy. External maps are optional; contact and address details remain available without loading a map.
4. Cookies and browser storage
Necessary storage supports a service you request or remembers your privacy choices. Optional analytics and external maps are disabled until accepted. You may accept or reject these categories separately using “Cookie settings”. Refusal does not prevent ordering or contacting us.
| Identifier | Provider / storage | Purpose | Duration |
|---|---|---|---|
| technoled-cart-v1 | TECHNOLED / local storage | Necessary cart contents | Until you clear it or remove the products |
| technoled_session | TECHNOLED / HttpOnly cookie | Necessary staff authentication | Up to 12 hours |
| technoled-consent-v2 | TECHNOLED / local storage | Necessary record of privacy choices | Up to 6 months |
| tl-chat-token | TECHNOLED / session storage | Access to the chat you start | Current tab; server token expires after 7 days |
| tl-last-order | TECHNOLED / session storage | Order status and payment retry | Current tab session |
| tl-visitor / tl-attribution | TECHNOLED / session storage | Optional analytics and campaign attribution, after consent | Current tab session; server events 90 days |
5. Your rights and choices
You may request access, correction, erasure where applicable, restriction, portability for consent/contract-based automated processing, or object to processing based on legitimate interest, including direct marketing. You may withdraw consent at any time without affecting earlier lawful processing. Email office@technoled.eu and identify the relevant enquiry, order or service case; we request only information proportionate to verifying identity.
Order and delivery fields marked required are necessary to handle the requested contract. Without them we cannot complete that request. Optional feedback and marketing permission are not conditions of purchase. We do not make decisions with legal or similarly significant effects solely by automated processing. CRM segments assist staff and do not determine statutory rights.
You may complain to the Bulgarian Commission for Personal Data Protection or another competent supervisory authority. Browser storage may also be cleared in browser settings; this may remove the cart and access to chat.