Personal Data Protection Policy – FICOSOTA

This Privacy Policy has been prepared in compliance with the obligations of “FICOSOTA” Ltd., UIC: 837055835 (hereinafter referred to as “Ficosota” and/or “We”) in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons (General Data Protection Regulation – GDPR) and the Personal Data Protection Act in connection with the processing of personal data through the website https://savexlaundry.com and its language versions (“the Website”). This policy is for informational purposes and aims to explain what personal data Ficosota collects, for what purpose, on what legal basis, how we process and store this data, and when it is necessary to disclose personal data to third parties. This policy also provides information regarding the rights that data subjects have with respect to the processing of their personal data, as well as the technical and organizational measures implemented to ensure its protection.

About Us

The controller of the personal data collected and processed is: “FICOSOTA” Ltd., UIC: 837055835.

Registered office and business address	Shumen, Bulgaria, 9700, 48 Madara Blvd.
Contact Information
Email	privacy@ficosota.com
Website	www.ficosota.com

Information about our Data Protection Officer:
Ficosota takes the storage and processing of personal data very seriously, and to this end, we have appointed a responsible for data protection, whose role is to serve as a point of contact for all matters related to the processing of your personal data, including the exercise of your rights under the law.

Name	Yordan Cholakov
Contact Information	Sofia 1000, 25 Vitosha Blvd., 2nd Floor, Office 4
Email	dpo@ficosota.com

Data Subjects

Ficosota collects and processes your personal data when you visit the Website and when you contact us via the contact form, including as a user, distributor, or other current or potential business partner. This data may include:

Data that visitors provide to us via the contact form: names, email address, phone number, country, company, subject and content of the inquiry, product lot number, and attachments.
The IP address of each visitor’s device, which we automatically receive when they visit our Website.
Information about the visit to our Website itself (e.g., pages visited, browser and device type, date and time of the visit), which is generated automatically. Statistical and marketing cookies are placed only with your consent.

Personal Data Collected and Processed; Legal Bases and Purpose of Processing

We may collect personal data about you when you use the Website. The personal data we may collect when you use the Website will be used for the following purposes:

Providing access to the Website and ensuring its security, including protecting the contact form from automated abuse.
Analyzing Website usage to improve it, only if you have consented to the relevant cookies.
Responding to inquiries submitted through the Website, including addressing reports and complaints related to our products, and taking steps prior to entering into a contract with distributors and other business partners.

We process your personal data based on our legitimate interest, to comply with a legal obligation, to take steps prior to entering into a contract, or based on your consent, depending on the specific purpose, as indicated in the table below. In all cases, we process only the minimum information necessary to achieve the specific purpose.

We may collect and process the following information about you:

Categories of Personal Data	Purpose of processing	Legal Bases (applied alternatively depending on the specific category and purpose of processing)
Names Email address Phone number Country and company Subject and content of the inquiry Attachments	Responding to your inquiries via the contact form. Responding to your requests for information and/or complaints.	Processing is necessary to safeguard our legitimate interests as a data controller (Article 6(1)(f) of the GDPR).
Names Email address and phone number Company and country Content of the inquiry	Taking steps prior to entering into a contract in response to partnership inquiries from distributors and other business partners.	Taking steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR), and when you represent a legal entity, legitimate interest (Article 6(1)(f) of the GDPR).
Names and contact information Product batch number Description of the issue and attached files	Reviewing reports and complaints related to the safety and quality of our products and maintaining an internal complaint register.	Compliance with a legal obligation under Article 9 of Regulation (EU) 2023/988 on general product safety (Article 6(1)(c) of the GDPR), and for other complaints, legitimate interest (Article 6(1)(f) of the GDPR).
IP address Technical data about the browser and device	Providing access to the Website and ensuring its security, including protecting the contact form from automated abuse.	Legitimate interest (Article 6(1)(f) of the GDPR).
Online identifiers Data on Website Visits and Activity	Analysis of Website usage and marketing on Meta platforms through statistical and marketing cookies.	Your consent (Article 6, Paragraph 1, Subparagraph “a” of the GDPR), which you may withdraw at any time.

Providing data via the contact form is voluntary, but without your name and email address, we would not be able to respond to your inquiry. Please do not include data about third parties or sensitive information, such as data regarding your health, in your message or in any attached files, unless this is necessary to describe a product issue. In this case, we will use this information only to the extent necessary to address the issue.

The legitimate interests we pursue are as follows:

To respond to inquiries and reports submitted through the Website and to improve our products.
To improve customer service.
To establish and develop business relationships with distributors and other partners.
To ensure the security of the Website and protect it from automated abuse.
To avoid legal disputes or to protect our rights should such disputes arise.

Sharing Your Information

Ficosota does not disclose personal data to third parties until it has ensured that all technical, organizational, and legal measures (through the signing of agreements) have been taken to protect such data. We exercise strict control over the achievement of this objective. To this end, we may use third parties to assist us with certain contractual activities. Some of these third parties (service providers) may include: law firms and accounting firms, auditors, couriers, carriers, contractors, or suppliers to government agencies, as well as other individuals or legal entities – for example, providers of software and/or hardware solutions and/or infrastructure, and external consultants in connection with the establishment of rights pursuant to a legal obligation or in pursuit of their legitimate interests, as applicable. In connection with the Website, such providers include the hosting provider and the parties that maintain the Website, the providers of email, fonts, and icons used for the operation of the Website, and Cloudflare, Inc. (contact form protection), and, where consent for cookies has been given, Google Ireland Limited (Google Analytics and YouTube) and Meta Platforms Ireland Limited (Meta Pixel). Ficosota and Meta Platforms Ireland Limited are joint controllers with respect to the collection of data via Meta Pixel and its transfer to Meta, and Meta’s subsequent processing of this data is governed by its privacy policy.
The provision of personal data is mandatory in certain cases to comply with legal requirements imposed on us, and for this purpose we provide information to: state and municipal authorities, ministries, the National Revenue Agency, the National Social Security Institute, the Commission for Protection of Competition, the Commission for Consumer Protection, and other regulatory bodies and commissions.

Automated Algorithms

We do not use automated decision-making tools.

Security

The security of the data you have entrusted to us is very important to us. That is why we protect your data by implementing all appropriate technical and organizational measures at our disposal to prevent unauthorized access, unauthorized or malicious use, loss, or premature deletion of information.
Ficosota takes measures to protect your personal data against accidental loss or unauthorized access, use, alteration, or disclosure. We have policies and procedures in place designed to protect information from loss, misuse, or unlawful disclosure. In addition, we take additional information security measures, including access controls, strict physical safeguards, and reliable practices for the collection, storage, and processing of information. Some of the measures we implement include:

Protecting the personal data we collect against unauthorized use and traces of its processing;
Maintaining secure computer systems through which personal data is processed. Our systems implement adequate mechanisms for controlling data segregation and management;
Adopting strict policies and procedures applicable to our staff to minimize the risks associated with the processing of personal data;
Ficosota employees are familiar with the applicable rules and are trained to process personal data with the utmost care and in accordance with approved best practices;
In conducting its business, Ficosota works only with reputable organizations and avoids working with companies that we believe may compromise the security of individuals’ personal data;
When implementing and administering security systems and monitoring technological developments, we have adopted best practices regarding potential risks to information security within our company;
We ensure the security of computer systems and the personal data they contain, including restrictions on company employees’ access to certain types of personal data;
We grant access only to the personal data necessary for the performance of the relevant employee’s job duties.

Furthermore, we implement technical measures such as encryption, pseudonymization, and anonymization of the collected personal data wherever possible.

When do we delete your personal data?

Ficosota destroys the collected and processed personal data in accordance with a specific procedure within the timeframes provided by law (for example, in the Accounting Act) and, if no such timeframes exist, within the timeframes specified below, and after the final settlement of all our relationships and the expiration of the statute of limitations. Personal data is not retained for longer than is necessary for the specific purposes.
In the event that personal data is anonymized, the aforementioned time limits do not apply, as we cannot identify you.

Retention Period

Ficosota will retain your personal data as follows:

Type of personal data

Retention period

Website visit and traffic data

For the periods specified in the Cookie Policy, unless you delete the cookies earlier through your browser settings or withdraw your consent.

Data regarding inquiries submitted via the Website form

For up to 6 months after the conclusion of communication between Ficosota and the visitor. Data regarding reports and complaints related to product safety are retained for as long as necessary to address them, but no longer than 5 years from their entry into the internal complaints register. When an inquiry leads to the conclusion of a contract or to a dispute, the data is retained until the expiration of the time limits applicable to the contract, or until the final resolution of the dispute and the expiration of the statute of limitations, respectively.

Cross-Border Transfer

In the course of its normal business operations, Ficosota does not transfer personal data outside the EU. In specific situations, we may transfer your data outside the European Union, but only if an adequate level of protection or appropriate safeguards and legal grounds for such a transfer are ensured. Such a transfer is possible when using the services of Cloudflare, Google, and Meta, which also process data in the United States. In these cases, the transfer is based on the European Commission’s decision regarding the adequate level of protection under the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Your Rights Regarding Personal Data

You have the right to information, access, and a copy of your personal data processed by Ficosota. If you believe that the information Ficosota holds about you is inaccurate or incomplete, you may request that your personal data be corrected.
In addition, you have the right to:

object to the processing of your personal data when the processing is based on a legitimate interest;
request the correction and rectification of inaccurate or incomplete personal data about you;
request the destruction/deletion of your personal data when the legal grounds for its processing no longer apply;
request the restriction of the processing of your personal data when certain conditions are met;
receive the data you have provided to us in a structured, commonly used, and machine-readable format and request its transfer to another controller when the processing is based on consent or a contract and is carried out by automated means;
object to automated processing, including profiling, if such processing is carried out by Ficosota;
withdraw your consent whenever Ficosota processes your personal data on the basis of consent (without such withdrawal affecting the lawfulness of the processing carried out prior to said withdrawal);
file a complaint with the supervisory authority – the Commission for Personal Data Protection (Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., or www.cpdp.bg).

Ficosota will comply with requests, withdrawals, or objections in accordance with the requirements of the applicable data protection regulations; however, these regulations are not absolute: they do not always apply, and exceptions are possible. In response to a submitted request, you may be required to verify your identity and/or provide additional information to help us better understand your request.
When you have exercised your right to access information or obtain a copy of your data in a machine-readable format more than once, Ficosota may charge a reasonable fee based on the administrative costs involved in providing it.

How can you exercise your rights?

Any of the rights provided by law may be exercised by submitting a request to exercise the relevant right. A request to exercise the rights of data subjects may be submitted in the following ways:

Electronically at the following email address:dpo@ficosota.com .
In person at the following address: 9700 Shumen, 48 Madara Blvd.

The request to exercise rights regarding personal data must contain the following information:

Identification of the individual – name and email address or phone number used when contacting us;
Contact and feedback information – address, phone number, email address;
Request – a description of the request.

Ficosota will provide information regarding the actions taken in connection with your request to exercise your rights within one month.
If necessary, the aforementioned period may be extended by an additional two months, taking into account the complexity and number of requests from the specific individual. Ficosota will inform the individual of any such extension within one month of receiving the request, specifying the reasons for the delay. The information provided to the data subject, as well as any communication and actions taken to exercise the data subject’s rights, are provided free of charge (except in cases of abuse of the rights granted).
We may request additional information necessary to verify your identity when there are doubts regarding the identity of the individual who submitted the request. If you exercise your rights through an authorized representative, you must also provide us with a notarized power of attorney.
Ficosota is not obligated to respond to a request if it is unable to identify the data subject.
When a request is submitted electronically, the information is provided electronically, unless you have expressly requested otherwise.

Use of Cookies

Ficosota collects or processes personal data through cookies, and you can find more information about this in the Cookie Policy published on the Website. You can change or withdraw your consent to cookies at any time using the “Manage Consent” button on the Website.

Updates to the Privacy Policy

This policy may be amended by Ficosota and was last updated on September 18, 2026. Any future changes or additions to this policy will be duly noted.