Privacy Policy

Last updated: 27.07.2026

1. Personal data controller

The controller of personal data is “V I H SECURITY” EOOD, UIC 200857689, with registered office and address of management: Sofia 1220, “Nadezhda” district, “Nadezhda I” housing estate, bl. 109, entrance A, floor 7, apt. 17.

For questions about the processing of personal data you can contact us by email: info@vihsecurity.com.

2. What personal data we process

Depending on the way you use the site, we may process:

  • names, telephone number, email and delivery address;
  • data required for issuing an invoice;
  • information about orders placed, payments and deliveries;
  • information about the site and the content of the enquiries sent;
  • IP address and technical data necessary for the security and the normal operation of the site;
  • data about the use of the site, collected through Google Analytics after consent has been given.

When paying by card, the card details are entered in the secure environment of the selected payment service provider. “V I H SECURITY” EOOD does not store the full bank card details, but receives information about the status of the payment.

3. Purposes and legal bases

We process personal data for:

  • accepting, confirming and fulfilling orders;
  • processing payments and arranging deliveries;
  • responding to enquiries and preparing proposals;
  • providing the goods and services requested;
  • issuing and storing accounting documents;
  • handling complaints and defending against legal claims;
  • ensuring the security and the normal operation of the site;
  • analysing traffic and the use of the site through Google Analytics, where consent has been given.

The legal bases are taking steps prior to entering into a contract, performance of a contract, compliance with a legal obligation, legitimate interest or consent – depending on the specific purpose.

The data marked as mandatory when placing an order are necessary for the order to be accepted and fulfilled. Without them the order cannot be processed.

4. Who we provide the data to

Where this is necessary for the relevant activity, personal data may be provided to:

  • the selected courier or logistics company;
  • banks and payment service providers;
  • providers of hosting, software and technical support;
  • Google in connection with the use of Google Analytics;
  • accounting and legal advisers;
  • the competent state authorities, where this is required by law.

Recipients receive only the data necessary to carry out the relevant activity.

When Google Analytics is used, data may be processed outside the European Economic Area, subject to the mechanisms and safeguards for protection provided for in the legislation. Further information is provided in the Cookie Policy.

5. Retention periods

Personal data are retained for the following periods:

  • data about orders, payments, invoices and other accounting documents – for the applicable statutory accounting and tax periods;
  • enquiries that have not led to a contract – up to 12 months after the communication has ended;
  • data necessary for complaints or legal claims – until the applicable limitation periods expire;
  • technical security records – up to 6 months, except where they are necessary for investigating an incident or for defence in a legal dispute;
  • data collected through Google Analytics – up to 14 months or until consent is withdrawn, to the extent that the data allow the user to be identified.

After the relevant period expires, the data are deleted or anonymised.

6. Your rights

Under the conditions of the applicable legislation, you have the right:

  • to access your personal data;
  • to rectification or completion;
  • to erasure or restriction of processing;
  • to data portability;
  • to object to processing based on legitimate interest;
  • to withdraw a consent you have given at any time.

The withdrawal of consent does not affect the lawfulness of the processing carried out before it.

To exercise your rights you can write to info@vihsecurity.com. Requests are answered within the period laid down by law.

7. Complaint to a supervisory authority

You have the right to lodge a complaint with the Commission for Personal Data Protection:

Sofia 1592, 2 “Prof. Tsvetan Lazarov” Blvd.
Website: www.cpdp.bg

8. Security

We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.

9. Cookies and changes to the policy

Detailed information about the cookies used and about Google Analytics is published in the separate Cookie Policy.

This policy may be updated in the event of changes to the site, the services used or the applicable requirements. The current version and the date of the last change are published on this page.

Cart