Last updated: 2 June 2026
1. What are cookies?
"Cookies" are small text files stored on your computer or mobile device when you visit a website. They allow the website to remember your actions and preferences for a certain period of time.
2. Types of cookies
Our website uses the following categories of cookies:
- Strictly necessary cookies: these are required for the proper functioning of the website and cannot be disabled.
- Analytical cookies: used to collect statistical information about how visitors use the website, in order to improve its functionality.
3. How do we use Google Analytics?
Our website uses Google Analytics 4 (“GA4”), an analytics service provided by Google Ireland Limited (“Google”). Through it, we track traffic and user behaviour to improve our services. The information is generated anonymously and includes:
- Your abbreviated IP address (via enabled IP anonymisation);
- Technical data about your browser and device;
- On-site behaviour (pages viewed, time spent).
4. Data Transfer Outside the EU
Data collected through Google Analytics may be transferred to Google servers outside the European Union. In such cases, appropriate safeguards are applied, including standard contractual clauses approved by the European Commission, to ensure an adequate level of data protection.
5. Consent Management
Analytical cookies are used only after your explicit consent (Art. 6(1)(a) GDPR), given through the cookie banner upon your first visit.
You may change or withdraw your consent at any time via the “Cookie Settings” link available at the bottom of the website.
This policy is intended to inform you about the manner in which Excellpack Bulgaria Limited (hereinafter the “Controller” or “We”) collects, stores and processes personal data through the website Excellpack.com.
1. Information about the Controller
The controller of personal data is Excellpack Bulgaria Limited, UIC: 130635355, with registered office and address: 8E Akad. Petar Dinekov Street 8E, Floor 1, Apt. 1, Sofia, Bulgaria 1415.
Contact e-mail: office@excellpack.com
2. Categories of Personal Data Processed
We collect data relating to natural persons representing our existing or potential corporate clients:
- Identification data: Names of a legal representatives or contact persons.
- Professional contact information: Business e-mail address, business phone number, job title within the organisation.
- Technical access data: IP address (anonymised), device identifiers, browser and operating system data.
- Behavioural data: History of pages visited, time spent on site, and interactions with site elements.
3. Purposes and Legal Bases for Processing
Data processing is carried out on the following legal bases:
- Formation and performance of commercial contracts (Art. 6(1)(b) GDPR): Processing of quotation enquiries, logistics coordination and delivery of goods.
- Legal obligation (Art. 6(1)(c) GDPR): Issuance of tax and accounting documents.
- Legitimate interests (Art. 6(1)(f) GDPR): Optimisation of website functionality and protection of information security.
- Consent (Art. 6(1)(a) GDPR): Use of analytical tools such as Google Analytics 4.
4. Use of Google Analytics 4
We use Google Analytics 4 ("GA4”) for statistical analysis of traffic. The GA4 configuration on this website includes:
- IP Anonymisation: Your IP address is truncated within the EU/EEA before transmission to Google servers.
- Opt-out: You may withdraw your consent at any time via the cookie banner.
5. Data Retention Periods
Personal data is retained for the period necessary to fulfil the purposes for which it was collected, as follows:
- Inquiry data: up to 12 months from the last communication, except where a longer period is necessary to address ongoing requests, internal operational requirements, or potential legal claims;
- Data related to contractual relationships: for the duration of the contract and up to 5 years after its termination (or as required by applicable tax/statutory limitation laws);
- Data collected through analytical tools: retained in accordance with the technical specifications and maximum retention windows permitted by our analytics providers (currently up to 14 months for standard Google Analytics properties), or as modified by the provider's global policy updates.
6. Provision of Data
The provision of personal data is voluntary; however, in certain cases it is necessary for the conclusion and performance of a contract or for responding to an inquiry. If data is not provided, we may be unable to deliver the requested service.
7. Disclosure of Data to Third Parties
Your data is shared only with trusted partners to ensure the smooth operation of our business and the fulfilment of our services:
- Courier and transport companies for the purposes of delivery and logistics.
- IT service, cloud infrastructure, and software providers (including hosting, CRM systems, and email management tools).
- Payment gateways and financial institutions to securely process transactions and invoicing.
- Professional advisors and operational consultants, such as accountants, auditors, and legal counsel, to support our business administration and defend our rights.
- Public authorities and regulatory bodies where a strict legal basis or statutory obligation exists.
8. Data Transfer Outside of EU
Some data may be processed outside the European Union, including by service providers such as Google.
In such cases, appropriate safeguards are applied, including standard contractual clauses approved by the European Commission, to ensure an adequate level of protection.
9. Rights of Data Subjects
You have the right of access, rectification, erasure, restriction of processing, and the right to object. Complaints may be lodged with the Commission for Personal Data Protection (“CPDP”).
