Privacy Policy

What are cookies?

"Cookies" are small text files stored on your computer or mobile device when you visit a website. They allow the website to remember your actions and preferences for a certain period of time.

Types of cookies

Our website uses the following categories of cookies:

• Strictly necessary cookies: these are required for the proper functioning of the website and cannot be disabled.
• Analytical cookies: used to collect statistical information about how visitors use the website, in order to improve its functionality.

‍

How do we use Google Analytics?

Our website uses Google Analytics 4 (“GA4”), an analytics service provided by Google Ireland Limited (“Google”). Through it, we track traffic and user behaviour to improve our services. The information is generated anonymously and includes:

• Your abbreviated IP address (via enabled IP anonymisation);
• Technical data about your browser and device;
• On-site behaviour (pages viewed, time spent).

‍

Data Transfer Outside the EU

Data collected through Google Analytics may be transferred to Google servers outside the European Union. In such cases, appropriate safeguards are applied, including standard contractual clauses approved by the European Commission, to ensure an adequate level of data protection.

Consent Managnment

Analytical cookies are used only after your explicit consent (Art. 6(1)(a) GDPR), given through the cookie banner upon your first visit.

You may change or withdraw your consent at any time via the “Cookie Settings” link available at the bottom of the website.

This policy is intended to inform you about the manner in which Excellpack Bulgaria Limited (hereinafter the “​Controller” or “We”) collects, stores and processes personal data through the website Excellpack.com.

Information about the Controller

The controller of personal data is Excellpack Bulgaria Limited, UIC: 130635355, with registered office and address: 8E Akad. Petar Dinekov Street 8E, Floor 1, Apt. 1, Sofia, Bulgaria 1415.
Contact e-mail: office@excellpack.com

Categories of Personal Data Processed

We collect data relating to natural persons representing our existing or potential corporate clients:

• Identification data: Names of a legal representatives or contact persons.
• Professional contact information: Business e-mail address, business phone number, job title within the organisation.
• Technical access data: IP address (anonymised), device identifiers, browser and operating system data.
• Behavioural data: History of pages visited, time spent on site, and interactions with site elements.

‍

Purposes and Legal Bases for Processing

Data processing is carried out on the following legal bases:

• Formation and performance of commercial contracts (Art. 6(1)(b) GDPR): Processing of quotation enquiries, logistics coordination and delivery of goods.
• Legal obligation (Art. 6(1)(c) GDPR): Issuance of tax and accounting documents.
• Legitimate interests (Art. 6(1)(f) GDPR): Optimisation of website functionality and protection of information security.
• Consent (Art. 6(1)(a) GDPR): Use of analytical tools such as Google Analytics 4.

‍

Use of Google Analytics 4

We use Google Analytics 4 ("GA4”) for statistical analysis of traffic. The GA4 configuration on this website includes:

• IP Anonymisation: Your IP address is truncated within the EU/EEA before transmission to Google servers.
• Opt-out: You may withdraw your consent at any time via the cookie banner.

‍

Data Retention Periods

Personal data is retained for the period necessary to fulfil the purposes for which it was collected, as follows:

• Inquiry data: up to 12 months from the last communication;
• Data related to contractual relationships: for the duration of the contract and up to 5 years after its termination;
• Data collected through analytical tools: up to 14 months.

‍

Provision of Data

The provision of personal data is voluntary; however, in certain cases it is necessary for the conclusion and performance of a contract or for responding to an inquiry. If data is not provided, we may be unable to deliver the requested service

Disclosure of Data to Third Parties

Your data is shared only with trusted partners:

• Courier and transport companies for the purposes of delivery.
• IT service and hosting providers.
• Public authorities where a legal basis exists.

‍

Data Transfer Outside of EU

Some data may be processed outside the European Union, including by service providers such as Google. In such cases, appropriate safeguards are applied, including standard contractual clauses approved by the European Commission, to ensure an adequate level of protection.

Rights of Data Subjects

You have the right of access, rectification, erasure, restriction of processing, and the right to object. Complaints may be lodged with the Commission for Personal Data Protection (“CPDP”).