Controller
Audio Express OOD, company number 203189686, VAT BG203189686. Registered and return address: 30 Sofroniy Vrachanski St, Varna 9028, Bulgaria. Phone: +359 89 672 4840. Email: [email protected]. You can also use the contact form for written enquiries.
Data and legal bases
We process recipient details, phone, optional email, address or courier point, products, quantities, value, notes, accepted terms and order history to take steps at your request and fulfil the contract. Enquiries contain a name, email and message so we can respond. Accounting data is processed to meet legal obligations; technical logs protect the store on the basis of legitimate interests. Orders are not used for marketing.
Recipients and security
Data is stored in a server database with restricted administrative access and backups. Hosting and Cloudflare process technical data to deliver and protect the site; Cloudflare may process data outside the EEA under applicable contractual safeguards. The trader shares necessary delivery details with the selected Speedy or Econt when arranging shipment. Loading office lists does not send your personal details to the courier. There is no advertising profiling or automated decision with legal effects.
Retention
Enquiries and unconfirmed requests are retained for up to 12 months after the last contact. Completed order data is retained for up to 5 years for support and legal claims; accounting records follow statutory retention periods. Necessary records relating to a dispute are retained until it is resolved. Backups rotate daily and are kept for 7 days.
Your rights
Where applicable, you may request access, correction, erasure, restriction or portability, or object to processing. Contact the controller by phone, contact form or post. We may request necessary identity verification. Requests are normally answered within one month. You may complain to Bulgaria’s data protection authority (cpdp.bg).
Account and order access
Accounts store favourites you explicitly save until removed or the account is closed, your email, name, saved phone/address, password hash and session records to provide the service you request. Plain-text passwords are not stored. Sessions expire after 30 days and password changes terminate active sessions. Password recovery uses a single-use code provided by the administrator after identity checks; it expires after 30 minutes. Account data is retained while the account is active; you may request closure through the store, subject to required order/accounting retention. Guest tracking requires the private code in your receipt; keep it confidential. Internal merchant notes are not shown to customers.