This Privacy Policy is intended to inform you how “RULER-VELIKOV 91” EOOD collects, uses, and protects your personal data in connection with the use of the Urban Rovex website.
PRIVACY AND PERSONAL DATA PROTECTION POLICY
Last updated: May 15, 2026
1. GENERAL INFORMATION
This Privacy Policy aims to inform you in a clear and detailed manner how “RULER-VELIKOV 91” EOOD collects, uses, stores, protects, and processes personal data in connection with the use of the urbanrovex.bg website and the Urban Rovex online store.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR), the Personal Data Protection Act, the Electronic Commerce Act, the Consumer Protection Act, the Accountancy Act, and other applicable Bulgarian and European legislation.
By using the site, creating a profile, sending an inquiry, or placing an order, you confirm that you are familiar with this Privacy Policy.
2. DATA CONTROLLER
The personal data controller is:
“RULER-VELIKOV 91” EOOD
UIC: 202216568
Registered office and management address: Bulgaria, Brest village, p.c. 5971, 43 Bulgaria St.
Website: https://urbanrovex.bg
Email: office@urbanrovex.bg
Telephone: 0885 52 66 08
For all questions related to the processing of personal data, you can contact us at the specified email or telephone number.
3. WHAT PERSONAL DATA WE PROCESS
Depending on how you use the site, we may process the following categories of personal data:
Identification data: first and last name.
Contact details: email address, telephone number, delivery address, city/town, postal code, selected courier office.
Order data: selected products, size, color, quantity, order value, delivery method, payment method, order history, order status, information regarding returns, exchanges, or complaints.
Payment data: selected payment method, payment status, cash-on-delivery information, or card payment confirmation. Urban Rovex does not store full bank card details.
User profile data: username, email, encrypted password, delivery and billing addresses, order history.
Communication data: content of messages, inquiries, emails, chat messages, information from contact forms, feedback, complaints, and customer service interactions.
Technical data: IP address, device type, operating system, browser, language settings, date and time of access, visited pages, actions on the site, security logs, and technical errors.
Data via cookies and similar technologies: session information, shopping cart, preferences, analytical data, marketing identifiers, and other data described in the Cookie Policy.
4. DATA WE DO NOT COLLECT
We do not intentionally collect special categories of personal data, such as health data, biometric data, political opinions, religious beliefs, trade union membership, ethnic origin, or data concerning sexual orientation.
We do not require customers to provide sensitive information that is not necessary for order fulfillment or service.
5. SOURCES OF PERSONAL DATA
We receive personal data primarily directly from you when you:
place an order through the site;
create a user profile;
fill out a contact form;
request a return, exchange, or file a complaint;
subscribe to marketing messages, if such an option is available;
communicate with us via email, telephone, chat, or social networks;
use the site and its functionalities.
Certain technical data is collected automatically through the site’s systems, server logs, cookies, analytical, and security tools.
6. PURPOSES OF PROCESSING
We process personal data for the following purposes:
- acceptance, confirmation, processing, and fulfillment of orders;
- delivery of ordered products via a courier company;
- contacting the customer if clarification regarding an order is needed;
- payment processing;
- issuing and storing accounting documents;
- processing returns, exchanges, contract withdrawals, and complaints;
- management of user profiles;
- providing customer service;
- responding to inquiries and messages;
- improving the website, products, and services;
- maintaining website security;
- preventing abuse, fraud, and unauthorized access;
- fulfillment of legal obligations;
- protection of the rights and legitimate interests of the controller;
- sending marketing messages only when there is a valid basis, such as consent or another applicable legal option;
- analysis of traffic and user behavior through permitted cookies and tools.
7. LEGAL GROUNDS FOR PROCESSING
The processing of personal data is carried out on one or more of the following grounds:
- Performance of a contract or taking steps prior to entering into a contract — when you place an order, create a profile, request delivery, return, or exchange.
- Legal obligation — when we are required to store accounting, tax, or other information required by law.
- Consent — when you subscribe to marketing messages, accept certain categories of cookies, or give explicit permission for specific processing.
- Legitimate interest — when we protect the site, prevent abuse, analyze basic service performance, protect our rights, or improve service, provided that your rights and freedoms do not override this interest.
8. DATA UPON ORDERING
When placing an order, we process the data necessary for accepting, processing, sending, and completing the order. This includes name, telephone, email, delivery address or selected courier office, data on the selected products, and selected payment method.
Without providing this data, we cannot accept and fulfill your order.
9. DELIVERY VIA COURIER
To deliver the order, we provide the necessary data to the courier company Econt or another courier when necessary for the execution of the delivery.
The data provided usually includes name, telephone, delivery address or courier office, cash-on-delivery value, shipment information, and other data necessary for delivery.
The courier company processes this data according to its own legal obligations and personal data protection rules.
10. PAYMENTS
The following payment methods can be used in the online store:
- cash on delivery;
- payment by bank card.
When paying by card, the card data is processed by the respective licensed payment operator or bank. Urban Rovex does not store the full bank card number, CVC/CVV code, expiration date, or other sensitive card data.
Our system may store information about the payment status, order number, date, amount, and technical information necessary for confirmation and accounting reporting.
11. USER PROFILES
If you create a user profile, we process data necessary for its management. The profile may contain email, name, delivery and billing addresses, order history, and other data provided by you.
Passwords are stored in encrypted form and are not accessible to us in a readable format.
You may request the deletion of your profile, which does not affect data that we are required to store by law, such as order data and accounting documents.
12. CONTACT FORMS AND COMMUNICATION
When you contact us via a contact form, email, telephone, chat, or social networks, we process the data provided by you to respond to your inquiry and provide assistance.
This data may include name, email, telephone, message content, date and time of communication, and other information you have voluntarily provided.
13. MARKETING MESSAGES
We send marketing messages, newsletters, promotions, or commercial offers only when we have a valid legal basis for doing so.
When processing is based on consent, you can withdraw it at any time via an unsubscribe link, if available, or by contacting us at office@urbanrovex.bg.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
14. ANALYTICS AND STATISTICS
The site may use analytical tools such as Google Analytics, Google Site Kit, or similar services to understand how users use the site, which pages are visited, what devices are used, and how the user experience can be improved.
Where required by law, analytical tools are activated only after your consent via the cookie banner.
Data may include IP address, device identifiers, site behavior, source of visit, pages visited, and other technical data.
15. ADVERTISING AND REMARKETING
The site may use marketing tools, including Meta/Facebook Pixel, Google Ads, remarketing codes, or similar technologies when activated.
These tools can help show more relevant ads, measure campaign effectiveness, and create audiences for advertising.
Marketing cookies and similar technologies are used only after your consent, where required.
16. COOKIES
The site uses cookies and similar technologies for proper operation, remembering the shopping cart, user sessions, security, analysis, and marketing.
Cookies can be:
- necessary cookies, without which the site cannot function normally;
- functional cookies that remember preferences;
- statistical cookies that help analyze traffic;
- marketing cookies used for advertising and remarketing.
Detailed information is available in the separate Cookie Policy published on the site.
You can manage your consent through the cookie banner or browser settings.
17. SERVER LOGS AND SECURITY
When visiting the site, the server may automatically record technical information, including IP address, date and time of visit, browser, operating system, visited URLs, and technical events.
This data is used for security, diagnosing problems, preventing abuse, and maintaining the normal operation of the site.
18. HOSTING AND TECHNICAL SUPPORT
The site is hosted on server infrastructure provided by a hosting provider. The hosting provider may have technical access to data stored on the server only to the extent necessary for service maintenance, security, archiving, and technical support.
If necessary, providers of technical support, development, WordPress maintenance, WooCommerce, plugins, themes, security, and optimization may also be used.
19. RECIPIENTS OF PERSONAL DATA
We may provide personal data to the following categories of recipients:
- courier companies;
- payment operators and banks;
- accounting services;
- hosting providers;
- technical support providers;
- email service providers;
- providers of analytical and marketing tools, when there is a valid basis;
- state authorities, when required by law;
- legal consultants, when necessary to protect rights and legitimate interests.
We do not sell personal data to third parties.
20. DATA TRANSFER OUTSIDE THE EUROPEAN UNION
It is possible that some service providers, such as analytical, marketing, cloud, or technical providers, may process data outside the European Union or the European Economic Area.
When such a transfer is carried out, it takes place only in the presence of an appropriate legal basis and guarantees under the GDPR, such as adequacy decisions, standard contractual clauses, or other applicable mechanisms.
21. RETENTION PERIODS
We store personal data only as long as necessary for the purposes for which it was collected or as required by law.
Approximate periods:
- order data — for the period necessary for order fulfillment, service, complaints, protection of rights, and accounting obligations;
- accounting documents and data related to tax control — 10 years, starting from January 1 of the reporting period following the reporting period to which they relate;
- user profile data — until the profile is deleted or as long as it is necessary for customer service, unless the law requires longer storage;
- data from contact forms and correspondence — for the period necessary to process the inquiry, subsequent service, and protection of legitimate interests;
- marketing data — until withdrawal of consent or unsubscribing;
- technical logs — for a reasonable period necessary for security, diagnostics, and site protection;
- cookies — according to the type and period specified in the Cookie Policy and the consent banner settings.
22. DATA SECURITY
We apply appropriate technical and organizational measures to protect personal data, including:
- use of an SSL certificate;
- access control to the administrative part of the site;
- restricting access only to persons for whom it is necessary;
- protection of user passwords through encryption;
- regular updating of systems, plugins, and software, where applicable;
- data backup;
- measures against unauthorized access, loss, destruction, or abuse;
- use of secure payment methods through external payment operators.
Despite security measures, the transmission of information over the internet cannot be guaranteed as completely risk-free.
23. USER RIGHTS
Under the GDPR, you have the following rights:
- right to information regarding the processing of your personal data;
- right of access to the data we process about you;
- right to rectification of inaccurate or incomplete data;
- right to erasure of personal data when legal grounds are present;
- right to restriction of processing;
- right to object to processing;
- right to data portability;
- right to withdraw given consent at any time;
- right not to be subject to a decision based solely on automated processing, including profiling, when this produces legal effects for you or significantly affects you;
- right to lodge a complaint with a supervisory authority.
24. EXERCISING RIGHTS
You can exercise your rights by sending a request to:
office@urbanrovex.bg
To protect your data, we may request additional information to confirm your identity when necessary.
We will respond to your request within the timeframes provided in the GDPR. For complex or numerous requests, the period may be extended according to applicable legislation.
25. LIMITATIONS OF RIGHTS
In certain cases, we cannot delete or restrict the processing of all data, for example, when we are required to store it by law, when it is necessary for accounting and tax purposes, for the establishment, exercise, or defense of legal claims, or for the fulfillment of contractual obligations.
26. AUTOMATED DECISION-MAKING
Urban Rovex does not perform automated decision-making that produces legal effects for users or significantly affects them.
Analytical and marketing tools may be used to profile audiences for advertising purposes when the user has given the corresponding consent via the cookie banner.
27. CHILDREN’S DATA
The Urban Rovex website and services are not directed at persons under 18 years of age. We do not intentionally collect personal data from children.
If we determine that data has been provided by a person under 18 without the consent of a parent or legal representative, we will take steps to delete it, unless the law requires otherwise.
28. LINKS TO EXTERNAL SITES
The site may contain links to external sites, social networks, payment operators, couriers, or other providers. We are not responsible for the content and privacy policies of these external sites.
We recommend that you familiarize yourself with the privacy policies of each external site you visit.
29. SOCIAL NETWORKS
Urban Rovex may maintain profiles on social networks such as Facebook, Instagram, or other platforms. When you interact with us through social networks, the respective platform may also process your personal data according to its own rules.
30. COMPLAINTS, RETURNS, AND EXCHANGES
In the event of a complaint, return, or exchange, we process the data necessary to identify the order, communicate with the customer, organize the return, refund the amount, or exchange the product.
This data may include name, telephone, email, address, bank account for bank transfer refunds, order data, and other information necessary for the fulfillment of legal and contractual obligations.
31. BANK ACCOUNT DATA FOR REFUNDS
When a refund via bank transfer is necessary, we may process a bank account provided by you. This data is used solely for refunding the amount due and accounting documentation of the operation.
32. OBLIGATORY NATURE OF DATA PROVISION
The provision of order and delivery data is necessary for the conclusion and performance of a contract. If you do not provide the necessary data, we will not be able to process and deliver the order.
The provision of data for marketing and non-essential cookies is voluntary.
33. COMPLAINT TO A SUPERVISORY AUTHORITY
If you consider that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection:
Commission for Personal Data Protection
Address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Website: https://www.cpdp.bg
Email: kzld@cpdp.bg
34. CHANGES TO THE POLICY
Urban Rovex reserves the right to amend and update this Privacy Policy in the event of changes in the law, the services used, the functionalities of the site, or the method of processing personal data.
All changes will be published on this page. We recommend that you periodically review the Privacy Policy.
35. CONTACT
For questions regarding this Privacy Policy or the processing of personal data, you can contact us:
“RULER-VELIKOV 91” EOOD
Email: office@urbanrovex.bg
Telephone: 0885 52 66 08
