This Privacy Policy explains how ТРЕВОЛЯК ЕООД (“we”, “us”, “our”), operating the commercial brand gardenweedpro via www.gardenweedpro.com, collects, uses, stores, and protects your personal data when you visit our website or purchase our on-site garden weeding and lawn care services.

We are fully committed to processing your personal data in strict compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national data protection legislation in Bulgaria and the European Union.

1. Data Controller

ТРЕВОЛЯК ЕООД acts as the legal Data Controller responsible for the secure collection, processing, and safeguarding of your personal data.

  • Company Legal Name: ТРЕВОЛЯК ЕООД
  • Brand Name: gardenweedpro
  • Company Registration Number (EIK): 208743698
  • Registered Address: ул. Георги Бенковски №56, вх. А, ап. 3, 9601 Балчик, България
  • Official Support Email: control@gardenweedpro.com
  • Telephone: +359 889403233
  • Official Website: www.gardenweedpro.com

2. Personal Data We Collect

We collect personal data that you voluntarily provide when requesting a service quote, placing an order, or communicating with us. This includes:

  • Contact & Property Information: Full name, service location/property address, email address, and contact telephone number.
  • Order & Service Details: Property dimensions, scheduled garden maintenance dates, service history, and communication preferences.
  • Financial & Payment Information: Billing address, payment transaction IDs, and status. (Full payment card details are processed directly by our external gateway and are not stored on our systems).
  • Technical & Usage Data: IP address, browser type, operating system, and system access logs recorded when interacting with our website.

3. Payment Processing & Stripe Compliance

We do not directly collect, store, or process sensitive payment card numbers on our servers.

All payment transactions executed through www.gardenweedpro.com are managed and processed securely by Stripe, Inc. and its European affiliate, Stripe Payments Europe, Limited, acting as our authorized payment service provider.

  • Data Shared with Stripe: To execute billing, clear transactions, and prevent financial fraud, necessary order data (including order value, currency, cardholder name, billing details, and email address) is transmitted securely to Stripe.
  • Security Standards: Stripe handles and stores payment data in accordance with the highest industry standards, including PCI-DSS Level 1 Certification and applicable European privacy laws.

4. Lawful Basis and Purposes for Processing

We process your personal data under the following legal bases pursuant to Article 6 of the GDPR:

  • Performance of a Contract (Art. 6(1)(b) GDPR): To fulfill service requests, process payments, schedule on-site garden visits, and handle customer care inquiries.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To comply with mandatory European Union and Bulgarian tax, accounting, audit, and statutory record-keeping laws.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To protect our website against fraud, ensure payment security, and maintain accurate records of business transactions.

5. Data Retention Period

We retain personal data only for as long as necessary to accomplish the purposes outlined in this policy or as mandated by European law:

  • Contractual & Service Records: Retained for the duration of the service contract and up to 5 years following completion to address legal or liability claims.
  • Financial & Accounting Documents: Transaction records and sales invoices are retained for 10 years in compliance with Bulgarian statutory tax and financial record-keeping laws.
  • Customer Support Inquiries: General correspondence and emails are retained for up to 2 years after ticket closure unless linked to active service obligations.

Once retention periods expire, personal data is securely purged or permanently anonymized.

6. Data Transfers and Third-Party Sharing

We do not sell, rent, or trade your personal data to third parties. Data is shared exclusively with operational sub-processors bound by confidentiality agreements, including:

  • Payment Service Providers: Stripe (for secure payment authorization and fraud prevention).
  • Hosting & IT Infrastructure: Cloud hosting providers operating data centers strictly located within the European Economic Area (EEA).

Any potential transfer outside the EEA is conducted strictly under EU Standard Contractual Clauses (SCCs) to ensure equivalent data protection levels.

7. Your GDPR Privacy Rights

As an EU resident, you possess the following statutory rights regarding your personal data:

  • Right of Access: Request a copy of the personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of data where legal retention grounds no longer apply.
  • Right to Restriction of Processing: Request temporary restriction of processing under qualified disputes.
  • Right to Data Portability: Receive your personal data in a structured, standard, machine-readable format.
  • Right to Object: Object to data processing based on legitimate business interests.

To exercise your rights, please submit a written request to control@gardenweedpro.com.

You also maintain the right to lodge a complaint with a supervisory authority.

8. Security & Cookies

Our website utilizes essential technical cookies required for core navigation, shopping cart sessions, and safe checkout operation. We implement robust technical and organizational security protocols to shield your personal data against unauthorized access, loss, or unauthorized disclosure.

9. Contact Information

For questions, requests, or privacy inquiries regarding this policy, please contact us at:

  • Legal Entity: ТРЕВОЛЯК ЕООД (brand: gardenweedpro)
  • Registered Address: ул. Георги Бенковски №56, вх. А, ап. 3, 9601 Балчик, България
  • Support Email: control@gardenweedpro.com
  • Telephone: +359 889403233