1. Data Controller Identification
   For the purposes of applicable data protection regulations, including the General Data Protection Regulation (GDPR) and Bulgarian legislation, the data controller responsible for the processing of your personal data collected via www.cupnexa.com is Би Март 25 ЕООД (company registration number: 208273565), with its registered office located at Bulgaria, Stara Zagora 6000, Samara 3, Block 12, Entrance 2, Apt.23. You may contact us regarding data privacy matters via email at center@cupnexa.com or by telephone at +359 889076594.
2. Information We Collect
   When you interact with www.cupnexa.com, place orders for our drinkware products, or communicate with our team, we collect personal information necessary for the execution of commercial transactions and fulfillment operations. This information includes your full name, billing address, delivery address, electronic mail address, telephone contact details, and transaction history.
3. Payment Processing and Financial Data
   All online payments and financial transactions processed through www.cupnexa.com are handled securely by Stripe as our designated payment processing service provider. When you complete a purchase, your payment card details and financial information are transmitted directly to Stripe. Stripe processes your personal and financial data in accordance with its own privacy policies and international security standards. We do not store complete payment card credentials on our internal servers.
4. Purpose and Legal Basis for Processing
   We process your personal data strictly on lawful grounds recognized under European Union and Bulgarian data protection frameworks. Data processing is necessary for the performance of our contractual obligations arising from product purchases, compliance with statutory accounting and tax regulations imposed by Bulgarian law, and our legitimate commercial interests in maintaining secure, efficient business operations.
5. Data Retention Periods
   Personal data collected through our website shall be retained only for as long as necessary to fulfill the purposes for which it was gathered, including legal, accounting, and reporting obligations. In accordance with statutory requirements under Bulgarian commercial and tax law (such as the Accountancy Act), accounting records, financial documents, and related transaction data containing personal details are retained for a mandatory period of up to 10 years starting from the beginning of the calendar year following the reporting period. Personal data processed solely on the basis of user consent or general inquiries will be retained for a duration necessary to resolve the correspondence, not exceeding 12 months unless a longer period is mandated by law.
6. User Rights Under European Regulations
   In accordance with the GDPR, individuals residing within the European Economic Area possess specific rights concerning their personal data. These rights include the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to specific types of data processing. To exercise any of these statutory rights, data subjects may submit a formal written request to our designated email address at center@cupnexa.com. Furthermore, users have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection if they believe data processing practices violate statutory standards.
7. Policy Amendments
   Би Март 25 ЕООД reserves the right to modify or update this Privacy Policy at any time to maintain compliance with evolving legal frameworks and operational requirements. Any revisions will be published directly on www.cupnexa.com, and continued utilization of our website constitutes formal acknowledgment of such modifications.