Legal
Privacy Policy
Last revised:
This document describes how the personal data you submit through the site is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
1. Who processes the data
The data controller is Тея Мей.
Contact for data protection matters: [email protected].
The volume of data processed is small and does not require the appointment of a data protection officer.
2. What data is collected
The request form collects only the data needed to send the book:
- full name
- phone number
- email address
- town and courier office, or delivery address
- number of copies requested
- a note to the author, if you choose to write one
No payment data is collected — payment happens entirely at the courier. No national ID number, banking details or special categories of personal data are collected.
The review form on the “Reel 02” page separately collects a name, an optional email, the text of your review, and the two consent checkboxes — for publishing your words and for news about a next book. The personalised frame is generated entirely in your browser; downloading it sends nothing to the server.
3. What it is used for
The only purpose is handling the request: contacting you for confirmation, preparing the parcel and completing the delivery.
The data is not used for advertising, is not profiled and is not used for automated decision-making.
4. Legal basis
Art. 6(1)(b) GDPR — processing is necessary for steps taken at the data subject’s request prior to entering into a contract, and for performing that contract.
Art. 6(1)(c) GDPR — for data retained under tax legislation.
5. Who it is shared with
Once the request is confirmed, the author personally passes the delivery data (name, phone, office or address) to the courier — Econt or Speedy. The courier is an independent controller for the purposes of the postal service.
The forms do not pass through any external service. Data goes directly into a system run by the author, at a hosting provider. The provider is a data processor and has no access to the content for its own purposes.
Data is not sold, is not provided to advertising platforms and is not transferred outside the European Economic Area.
6. How long it is kept
Data is kept for as long as the reason it was collected still applies.
Data from a request is kept until the correspondence ends and for up to 6 months after that.
Reviews and messages are kept until you ask for them to be deleted. If your review is published on the site, write to the author and it is taken down.
7. Cookies and tracking
No visit statistics are collected and no profile of your behaviour is built. That is also why there is no consent banner — there is nothing to consent to.
8. Your rights
As a data subject you have the right to request:
- access to the data held about you
- rectification of inaccurate data
- erasure (“the right to be forgotten”)
- restriction of processing
- data portability
- objection to processing
Requests go to [email protected] and receive a reply within one month.
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg).
9. Security
Data is stored on a server in Germany, reachable only over an encrypted connection (HTTPS) and protected by a separate administrator account. Only the author has access to the requests.