Privacy Policy
1. Who We Are
This Privacy Policy describes how Мемори Фабрика ООД (trading as Memory Fabrica), EIK 208330094, registered at ул. „Граф Игнатиев" № 5, гр. Силистра, пк 7500, България, collects and uses your personal data. We are the Data Controller under GDPR and the Bulgarian Personal Data Protection Act (ЗЗЛД, last amended SG No. 16/2026).
Contact: team@memoryfabrica.com
2. What Data We Collect and Why
| Purpose | Data collected | Legal basis | Retention |
|---|---|---|---|
| Expedition booking | Name, email, phone, address, payment info | Contract execution | 5 years after contract end |
| Contact form enquiries | Name, email, message content | Legitimate interest | 12 months |
| Invoicing and accounting | Name, address, EIK/EGN, payment details | Legal obligation | 11 years (Bulgarian accounting law) |
| Event photography / video | Images and video footage taken during expeditions | Legitimate interest / consent | Duration of content use |
3. How We Store and Protect Your Data
Your data is stored on servers within the European Union and processed only by authorised personnel or contracted data processors. We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
4. Who We Share Your Data With
We share your data only where necessary to deliver our services:
- Cloudflare — website hosting, performance, and security (cloudflare.com)
- Stripe — payment processing (stripe.com)
- Resend / Amazon Web Services — transactional email delivery
- State authorities — when required by law (НАП, КЗП, court orders)
Where processors are based in the United States, they participate in the EU-US Data Privacy Framework (European Commission Decision of 10 July 2023, confirmed by the EU General Court in September 2025), ensuring lawful cross-border data transfer.
5. Your Rights
Under GDPR and Bulgarian personal data law, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten"), where applicable
- Restrict how we process your data
- Receive your data in a portable, machine-readable format
- Object to processing (including direct marketing — takes effect immediately)
- Not be subject to automated decision-making or profiling
To exercise any of these rights, email team@memoryfabrica.com. We will respond within 1 month.
You also have the right to lodge a complaint with the Bulgarian data protection authority:
Комисия за защита на личните данни (КЗЛД)
www.cpdp.bg | +359 2 915 3580
6. Cookies
This website uses only technically necessary cookies required for security and basic functionality. No analytics or marketing cookies are set without your explicit consent. If you have questions about specific cookies in use, contact us at team@memoryfabrica.com.
7. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on this page with an updated "Last updated" date. We encourage you to review this page periodically.
8. Contact
Мемори Фабрика ООДул. „Граф Игнатиев" № 5, гр. Силистра, пк 7500, България
ЕИК: 208330094
team@memoryfabrica.com