Last updated: September 8, 2026

This Privacy Policy describes how "BGKOM TRADE" Ltd., the owner and administrator of the online store 999.bg, collects, uses, stores, and protects the personal data of visitors and customers of the site.

We process personal data in accordance with Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR), the Personal Data Protection Act, and other applicable Bulgarian and European legislation.

1. Data about the administrator

• The data controller is:
• Company: "BGKOM TRADE" Ltd.
• UIC: 205739919
• Address: Sofia, Mladost 2, bl. 295, entrance 2, office 2
• Website: https://999.bg/
• Phones: 088 207 4446; 02 408 6003
• Email: partners@999.bg

For any questions related to the processing and protection of personal data, you can contact us using the provided contacts.

2. What personal data do we collect

Depending on how you use the site, we may collect the following categories of personal data:

• names
• phone number
• email address
• delivery address and billing address
• invoice issuance data – name or company, UIC, VAT number, and address
• information about orders made and products purchased
• data provided when creating a user profile
• content of inquiries, messages, and correspondence with us
• information provided when submitting a complaint or exercising the right of withdrawal
• email address provided when subscribing to the newsletter
• IP address, device type, browser, operating system, and technical information about the visit
• information collected through cookies and similar technologies

We do not collect or store full credit card data. When electronic payment is used, payment data is processed by the respective licensed payment service provider.

3. For what purposes do we process personal data

Personal data may be processed for the following purposes:

Processing and fulfillment of orders

We use the provided data to:

• accept and confirm the order
• process the payment
• prepare and send the purchased products
• contact the customer
• issue an invoice or other accounting document
• provide warranty and post-warranty service
• process complaints, returns, or exchanges
• 
  

The legal basis is the performance of a contract or taking steps prior to entering into a contract.

Creating and managing a user profile

When you create a profile on 999.bg, we process the data necessary for its maintenance, order review, and use of the site's functionalities. The legal basis is the performance of a contract and providing the requested service.

Responding to inquiries

When you contact us via a contact form, phone, or email, we use the provided data solely to review the inquiry and respond to you. The legal basis is your request, taking pre-contractual actions, or our legitimate interest in serving customer inquiries.

Subscribing to the newsletter

When you explicitly subscribe to the 999.bg newsletter, we may use your email address to send information about new products, promotions, and special offers. The legal basis is your consent. You can withdraw it at any time through the unsubscribe link in the received message or by contacting us.

Accounting and legal obligations

Certain data is processed and stored to fulfill obligations arising from tax, accounting, and consumer legislation.

Security and prevention of abuse

We may process technical information and data about actions taken for the purpose of:

• protecting the site and user profiles
• identifying technical problems
• preventing fraud and unauthorized access
• establishing, exercising, or defending legal claims

The legal basis is our legitimate interest in ensuring the normal and secure operation of the site.

Analysis and improvement of the site

With provided consent, we may use analytical cookies to obtain aggregated information about visits and how users use the site.

4. To whom do we provide personal data

For the fulfillment of the stated purposes, personal data may be provided to:

• courier and logistics companies
• payment service providers and banking institutions
• accounting and legal consultants
• hosting, software support, and information service providers
• providers of electronic messaging services
• providers of analytical and advertising services – only when applicable and after obtaining consent
• government authorities and institutions when required by law

Recipients are provided only with the data necessary for the execution of the respective service or legal obligation. We do not sell or provide personal data to third parties for their independent marketing purposes.

5. Retention periods

We store personal data only for the period necessary to fulfill the purposes for which they were collected:

• order, invoice, and accounting document data – for the periods specified by applicable legislation
• data in user profiles – until the profile is deleted or the need for its maintenance ceases
• data from inquiries and correspondence – usually up to 3 years after communication ends
• data related to complaints and warranty service – until the case is closed and the applicable limitation periods expire
• newsletter data – until consent is withdrawn or unsubscribed
• technical data and security logs – for a limited period according to their purpose
• data processed based on consent – until it is withdrawn, unless there is another legal basis for retention

After the expiration of the respective periods, the data is deleted or anonymized.

6. Cookies

The site 999.bg uses cookies and similar technologies. Cookies are small text files that are stored on the user's device. They can be:

• mandatory cookies – necessary for the operation of the site, cart, orders, security, and user profile
• functional cookies – remember selected settings and preferences
• analytical cookies – help us analyze visits and usage of the site
• advertising cookies – used to measure advertising campaigns and display relevant content

Mandatory cookies can be used without consent when necessary for providing the service. Analytical and advertising cookies are activated only after obtaining consent when required. You can change your choice from the cookie settings on the site or through your browser settings.

7. Your rights

Under applicable legislation, you have the right to:

• receive information about whether we process your personal data
• request access to the processed data
• request correction of inaccurate or incomplete data
• request deletion of data when legal conditions are met
• request restriction of processing
• object to processing based on legitimate interest
• receive the data you provided in a structured and machine-readable format when applicable
• withdraw any consent at any time
• file a complaint with a supervisory authority

Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. To exercise your rights, you can send a request through the contacts provided in this policy. We may request additional information necessary to confirm your identity.

8. Complaint to a supervisory authority

If you believe that your personal data is being processed unlawfully, you have the right to file a complaint with:

Commission for Personal Data Protection

• Address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
• Website: https://www.cpdp.bg/
• Email: kzld@cpdp.bg

9. Data protection

We implement appropriate technical and organizational measures to protect personal data against:

• unauthorized access
• improper use or disclosure
• accidental loss
• destruction
• alteration
• other forms of unlawful processing

Access to personal data is granted only to individuals who need it to perform their job duties.

10. Data transfer outside the European Economic Area

Some providers of analytical, advertising, hosting, or information services may process data outside the European Economic Area. In such cases, we take the necessary measures to ensure an adequate level of protection, including using adequacy decisions, standard contractual clauses, or other mechanisms provided in the GDPR.

11. Automated decision-making

999.bg does not use personal data for making decisions based solely on automated processing that produce legal effects or significantly affect you. Automated means may be used to display relevant products or advertising messages when you have given the necessary consent.

12. Children's data

The site and the products offered through it are not intended for independent use by children under 18 years of age. We do not knowingly collect personal data from children without the consent of their parent or legal guardian.

13. External links

The site may contain links to other web pages. We are not responsible for their privacy policies and practices. We recommend reviewing the privacy policy of the respective external site.

14. Changes to the policy

We reserve the right to update this Privacy Policy in case of changes in legislation, technologies used, services, or the way personal data is processed. The current version will always be published on 999.bg with the date of the last change indicated.

15. Contacts

For questions, requests, or objections regarding your personal data, you can contact us:

• "BGKOM TRADE" Ltd.
• Address: Sofia, Mladost 2, bl. 295, entrance 2, office 2
• Phones: 088 207 4446; 02 408 6003
• Website: https://999.bg/