Политика за поверителност

Last updated: 09.08.2026

This policy describes how ORANG Ltd. processes your personal data in connection with the General Data Protection Regulation (GDPR).

Data controller

Company	ORANG Ltd.
Company number	207723739
Address	27 Krastyo Rakovski St, floor 10, apt. 53, Plovdiv, Bulgaria
Email for data protection enquiries	info@tasiansports.com

What data we collect and why

Purpose	Data	Legal basis	Retention
Fulfilling an order	name, email, phone, delivery address	Performance of a contract	The period under Art. 12 of the Bulgarian Accountancy Act
Accounting and invoicing	name, address, invoice details	Legal obligation	10 years
Customer account	email, order history, addresses	Performance of a contract	Until the account is deleted; inactive accounts — 3 years
Complaints and returns	details from the request, IBAN	Legal obligation	Up to 3 years after closure
Newsletter	email	Consent	Until consent is withdrawn
Product reviews	name, email, content	Consent	Until consent is withdrawn
Site security	IP address, log records	Legitimate interest	Up to 12 months

Who we share data with

We share personal data only when necessary and in the minimum volume required:

Courier company — to deliver the parcel.
Accounting services — for invoicing and reporting.
Hosting provider — as a processor of the data stored on the site.
Competent public authorities — where required by law.

We do not sell or rent personal data to third parties.

Your rights

To access the data we hold about you.
To request correction of inaccurate data.
To request erasure where we have no legal ground to keep it.
To restrict processing or object to it.
To receive your data in a machine-readable format.
To withdraw your consent at any time.
To lodge a complaint with the Bulgarian Commission for Personal Data Protection.

Important: data on issued invoices and completed orders cannot be erased before the statutory retention period expires.

Security

The site runs over HTTPS with an encrypted connection. Passwords are stored one-way encrypted and cannot be recovered. Access to the administration area is restricted.

We do not store bank card data.

Transfers outside the EU

Your personal data is stored within the European Union.

How to exercise your rights

Send a request to our contact email. We reply within one month. To protect your data, we may ask for additional information to verify your identity.

Supervisory authority

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria
cpdp.bg

Privacy policy