Legal

Privacy Policy

Last updated: 10 July 2026

1. Who we are

This website, vividwalls.eu (the “Website”), is operated by VIVID TRADE EOOD, a limited liability company registered in the Bulgarian Commercial Register under UIC (ЕИК) 202878550, with registered address at Iujen Park (South Park), bl. 90, 1407 Sofia, Bulgaria (“VividWalls”, “we”, “us”).

VIVID TRADE EOOD is the data controller for the personal data processed through this Website within the meaning of Regulation (EU) 2016/679 (the “GDPR”).

Data protection contact: hello@vividwalls.eu, tel. +359 88 333 5778. We have not appointed a formal Data Protection Officer, as we are not required to do so; all privacy inquiries are handled through the contact above.

2. What personal data we collect

Inquiry and contact data — when you use our contact, quote or order forms: name, email address, phone number, company name (optional), country/city, delivery address (for orders), and the content of your message.
Order and production data — product specifications (dimensions, material, frame), links to artwork files you share with us, order history, and billing information needed for invoicing.
B2B partner application data — when you apply for a trade account: business type, website, expected volumes and related details you submit in the application form.
Technical and usage data — IP address, browser and device information, pages visited and interactions on the Website, collected via cookies and similar technologies (see Section 4 and our Cookie Policy).

We do not knowingly collect special categories of personal data (e.g. health data) and ask that you do not include such information in messages or artwork.

3. Purposes and legal bases

Responding to inquiries and preparing quotes — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).
Manufacturing and delivering your order, invoicing, and customer support — Art. 6(1)(b) GDPR (performance of a contract).
Accounting and tax compliance — Art. 6(1)(c) GDPR (legal obligations under Bulgarian accounting and tax law).
Website analytics — Art. 6(1)(a) GDPR (your consent), where analytics cookies are used.
Security, fraud prevention and defence of legal claims — Art. 6(1)(f) GDPR (legitimate interest).

4. Website analytics (Google Analytics 4)

We use Google Analytics 4 (measurement ID G-SK4VHK0R0P), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar identifiers to help us understand how visitors use the Website (pages viewed, approximate location at city level, device type, traffic sources).

IP addresses are not logged or stored by Google Analytics 4; location is derived from IP data and the IP itself is discarded. Data collected may be transferred to Google LLC in the United States; such transfers are safeguarded by Google’s certification under the EU–U.S. Data Privacy Framework and by EU Standard Contractual Clauses.

You can prevent Google Analytics from running by declining analytics cookies, adjusting your browser settings, or installing the Google Analytics opt-out browser add-on.

5. Who we share data with

IT and hosting providers that operate our Website and email infrastructure;
Google (analytics, as described above);
shipping and courier companies, to deliver your order;
accountants, auditors and legal advisers, where necessary;
public authorities, where we are legally obliged to do so.

These recipients act either as independent controllers or as our processors bound by data processing agreements under Art. 28 GDPR. We do not sell personal data.

6. How long we keep your data

Inquiries that do not lead to an order: up to 24 months from our last contact.
Order, contract and invoicing records: up to 10 years, as required by the Bulgarian Accountancy Act and tax legislation.
Analytics data: up to 14 months (Google Analytics 4 retention setting).
Artwork files: for the time needed to produce your order and handle any complaint, unless you ask us to keep them for reorders.

7. Your rights

Under the GDPR you have the right to:

access your personal data (Art. 15);
rectify inaccurate data (Art. 16);
erasure (“right to be forgotten”, Art. 17);
restriction of processing (Art. 18);
data portability (Art. 20);
object to processing based on legitimate interest (Art. 21);
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).

To exercise any of these rights, email hello@vividwalls.eu. We respond within one month, as required by Art. 12 GDPR.

You also have the right to lodge a complaint with a supervisory authority, in particular the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg, or with the supervisory authority of your EU member state of residence.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (TLS/HTTPS), access controls, and limiting access to personal data to staff who need it to perform their duties.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

10. Children

The Website is intended for adults and business users. We do not knowingly collect personal data from children under 16.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its “last updated” date, is always published on this page.