Privacy policy

This policy is under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

Controller

ДЕМЕТРА 2 ЕООД

Seat: гр. Плевен 5800, ул. Захари Зограф 1, вх. В, ап. 6

Manager: Ваня Ганчева Димитрова

UIC 202409407 · VAT BG202409407

Phone: +359 898 949 988

Email: contact@boragokitchen.eu

What data we collect

• Name, phone, delivery address, entrance, floor, apartment, note
• Map coordinates, so we can find the address
• Order contents and value, payment method and status
• Technical data: session, CSRF token, order time, IP address (to prevent spam and abuse), tracking link; during delivery — the courier’s approximate location

We do not store bank card numbers. If payment is online, it goes through Stripe. If you pay by card on delivery, we only record the payment method.

Why and on what legal basis

• Performance of a contract (Art. 6(1)(b) GDPR) — accepting, cooking, delivery, payment, status in Viber or SMS
• Legal obligation (c) — accounting and tax
• Legitimate interest (f) — site security and preventing abuse

Who receives data

• Kitchen and couriers — to fulfil the order
• SMSAPI — if SMS notices are enabled; Viber — if you open the bot to track the order
• OpenStreetMap Nominatim — to turn coordinates into an address at checkout
• We do not load fonts or ads from Google

We do not sell data. There is no profiling with legal effect.

Retention

Orders are kept for fulfilment and for accounting periods under Bulgarian law (up to 10 years for tax documents). The session is deleted when you close the browser.

Your rights

You can submit a request through the data-rights form or call us. Data (GDPR) · +359 898 949 988 / contact@boragokitchen.eu

You may lodge a complaint with the Commission for Personal Data Protection: cpdp.bg, Sofia, 2 Prof. Tsvetan Lazarov Blvd. cpdp.bg

Cookies

See the cookie policy. Cookies.

Updated: 30.09.2026