Privacy Policy

01

Data Controller

The controller responsible for deciding how and why personal data collected through the EUBEAN website is processed is:

02

Personal Data We May Collect

The information we process depends on how you interact with EUBEAN. It may include:

• Identification and contact information, such as your name, email address, telephone number, billing address, and delivery address.
• Account information where customer account functionality is available.
• Order and transaction information, including products ordered, order history, delivery information, and related customer service records.
• Payment-related information necessary to process transactions. Payment card processing may be performed by third-party payment providers.
• Communications you send to us, including contact-form submissions, emails, support requests, wholesale enquiries, and other correspondence.
• Technical information such as IP address, browser type, device information, operating system, and similar technical identifiers.
• Website usage information, including pages visited, interactions with the website, and cookie or analytics information where such technologies are used lawfully.
• Marketing preferences and records of consent or opt-out requests.

03

How We Collect Personal Data

We may obtain personal data directly from you when you:

• Place or attempt to place an order.
• Create or use a customer account.
• Contact EUBEAN by email or through a website form.
• Submit a wholesale or business enquiry.
• Subscribe to marketing communications.
• Interact with the website or its consent and preference tools.

Certain technical or transaction-related information may also be received automatically from website technologies or from service providers involved in operating the website, processing payments, or fulfilling orders.

04

Why We Process Personal Data

Personal data may be processed for purposes including:

• Processing, confirming, fulfilling, and delivering orders.
• Processing payments and managing transaction records.
• Responding to questions, complaints, returns, and customer support requests.
• Managing wholesale enquiries and business relationships.
• Operating, maintaining, securing, and improving the website.
• Detecting or preventing fraud, misuse, and security incidents.
• Meeting tax, accounting, product, regulatory, and other legal obligations.
• Establishing, exercising, or defending legal claims where necessary.
• Sending marketing communications where there is a lawful basis to do so.
• Managing cookie and privacy preferences.

05

Legal Bases for Processing

Depending on the purpose and circumstances, EUBEAN may process personal data on one or more of the following legal bases:

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

06

Payment Information

Payments may be processed through external payment service providers. These providers may process information necessary to authorise and complete the transaction.

EUBEAN does not intend to store complete payment-card credentials where payment processing is handled by the relevant payment provider.

The payment provider may process personal data under its own privacy terms or act as a processor or independent controller depending on the service and circumstances.

07

Sharing Personal Data

We may disclose personal data to organisations where reasonably necessary to operate EUBEAN and provide the requested service.

These recipients may include:

• Website hosting and ecommerce service providers.
• Payment processors and financial service providers.
• Shipping, postal, courier, and logistics providers.
• IT, security, technical, and website-support providers.
• Accounting, legal, professional, and administrative service providers.
• Marketing or analytics providers where their use is lawful.
• Authorities, regulators, courts, or other bodies where disclosure is legally required.

We do not sell personal data as a business model.

08

Service Providers & Processors

Some third parties process personal data on behalf of EUBEAN in order to provide technical, operational, payment, fulfilment, communication, or other services.

Where a provider acts as a processor on our behalf, appropriate contractual and data-protection arrangements are used as required by applicable law.

09

Cookies & Similar Technologies

The website may use cookies and similar technologies for purposes such as website functionality, security, preferences, analytics, and marketing.

These technologies may include:

• Strictly necessary cookies required for core website functionality.
• Preference or functional cookies.
• Analytics or measurement technologies.
• Advertising or marketing technologies, where used and lawfully permitted.

Where consent is legally required for a non-essential cookie or similar technology, it should not be activated until the relevant consent has been obtained.

You may manage available cookie preferences through the consent mechanism provided on the website and, where relevant, through your browser settings.

10

Marketing Communications

Where you subscribe to EUBEAN marketing communications, we may use your contact details to send information about products, releases, availability, or related news where permitted by law.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or service communications that are necessary in connection with an order or customer relationship.

11

How Long We Keep Personal Data

Personal data is not retained longer than necessary for the purpose for which it was collected, subject to legal and legitimate business requirements.

The relevant retention period may depend on factors including:

• The duration of the customer or business relationship.
• Applicable tax, accounting, and record-keeping requirements.
• Warranty, return, complaint, or product-related requirements.
• The need to establish, exercise, or defend legal claims.
• Security and fraud-prevention requirements.
• Whether consent remains valid for consent-based processing.

When personal data is no longer required, it will be deleted, anonymised, or otherwise handled in accordance with applicable law.

12

International Data Transfers

Some service providers involved in operating the website or providing related services may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the EEA, EUBEAN will rely on an appropriate legal transfer mechanism where required, such as:

• An applicable European Commission adequacy decision.
• Approved standard contractual clauses.
• Another lawful safeguard or derogation available under data protection law.

Information concerning applicable safeguards may be requested using the contact details in this Privacy Policy.

13

Data Security

EUBEAN takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

No website or electronic transmission system can guarantee absolute security. Security measures are therefore reviewed and applied with regard to the nature of the processing and associated risks.

14

Your Data Protection Rights

Subject to the conditions and limitations provided by applicable data protection law, you may have rights including:

• The right to obtain information about the processing of your data.
• The right of access to personal data held about you.
• The right to correct inaccurate or incomplete personal data.
• The right to request erasure in applicable circumstances.
• The right to request restriction of processing.
• The right to object to certain processing.
• The right to data portability where applicable.
• The right to withdraw consent where processing is based on consent.
• The right to lodge a complaint with a competent supervisory authority.

These rights are not absolute and may be subject to statutory conditions or exceptions.

15

Exercising Your Rights

Requests concerning your personal data may be submitted to:

info@eubean.com

We may need to request information reasonably necessary to verify your identity before acting on certain requests.

Requests will be handled within the time limits required by applicable data protection law.

16

Automated Decision-Making

EUBEAN does not currently intend to make decisions about customers based solely on automated processing that produce legal effects or similarly significant effects, unless such processing is lawfully implemented and the required information and safeguards are provided.

17

Children’s Personal Data

The EUBEAN online store and services are intended for adult users and are not specifically directed at children.

We do not knowingly seek to collect personal data from children through the website for purposes that would require parental authorisation under applicable law.

If you believe personal data relating to a child has been provided to us inappropriately, please contact us so the circumstances can be reviewed.

18

Third-Party Websites & Services

The EUBEAN website may link to or integrate with websites, platforms, payment services, social networks, or other services operated by third parties.

Where a third party independently determines how personal data is processed, its own privacy policy and terms will apply to that processing.

19

Complaints

If you have a concern about how EUBEAN has processed your personal data, we encourage you to contact us first so that we can review the matter.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

For a controller established in Bulgaria, the national supervisory authority is the Commission for Personal Data Protection.

20

Changes to This Privacy Policy

EUBEAN may update this Privacy Policy where necessary to reflect changes in our services, website functionality, service providers, processing activities, or legal requirements.

The current version will be published on this page.

Where required by law, material changes may also be communicated through an appropriate additional notice.

21

Contact

For privacy questions, requests, or concerns, please contact: