Legal

Privacy policy

Last updated: 19 October 2026

This policy explains how HATONIS EOOD (“Hatonis”, “we”, “us”) uses personal data when you visit this website, send a request through the form, write to us or call us. It is written under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Bulgarian Personal Data Protection Act.

1. Controller

The controller is HATONIS EOOD, single-member limited liability company (EOOD), registered office 17 Mermer Kamak St., Entr. 2, Fl. 6, Ruse 7000, Bulgaria. E-mail: hatoniseood@gmail.com, phone: +359 87 913 2879.

2. What data we process

• Requests sent through the form: your name, e-mail address and/or phone number, what you need (making a garden, watering, exotic plants), the type of place, the town and the approximate area if you give them, and your message.
• E-mail and phone: your name, contact details and the content of your message or call.
• Technical data: when the site is delivered, our hosting provider processes your IP address, browser (user agent), the page requested and the time of the request, for security and delivery of the site.

When you press Send in the request form, the details you entered are stored in a database hosted by Cloudflare so that we can reply to you. To protect the form against abuse, a salted one-way hash of your IP address is stored with the request and used only to limit how many requests can be sent in a short time. If the form cannot be sent, the page shows our e-mail address and phone number instead.

3. Purposes and legal bases

• To reply to your request and prepare an offer — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• To answer other questions, keep our correspondence in order and keep the website and the form secure — Article 6(1)(f) GDPR (our legitimate interests in running the business and the site).

4. How long we keep data

We keep requests and correspondence as long as needed to deal with the enquiry. Requests sent through the form are deleted from the website database automatically 12 months after they arrive. Where an order follows, records are kept as long as Bulgarian accounting and tax law requires. Hosting logs are kept by the provider for a short period for security purposes.

5. Who receives data

Cloudflare, Inc. hosts and delivers this website and stores the requests sent through the form, as our processor and on our behalf. E-mail providers deliver the e-mails you send us. We do not sell personal data and do not share it for marketing.

6. Transfers outside the EEA

Cloudflare may process technical data and stored requests outside the European Economic Area, including in the United States. Such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the Standard Contractual Clauses adopted by the European Commission.

7. No cookies, no tracking

The website sets no cookies and uses no analytics, advertising or tracking tools. There is no profiling and no automated decision-making. See the Cookie policy.

8. Your rights

Under Articles 15–22 GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. Giving your data is voluntary, but without contact details we cannot reply to a request. To use any of these rights, write to hatoniseood@gmail.com.

9. Complaints

You have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

10. Changes

We may update this policy when the website or our processing changes. The date at the top shows the current version.