Policy for the Use and Protection of Personal Data

Policy on the Use and Protection of Personal Data

This Policy on the Use and Protection of Personal Data describes the basic terms of use of the Peptology online store, as well as the way in which the personal data of users is collected, used, stored and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable legislation on electronic commerce and consumer protection.

The Peptology online store is operated by the company ONLAYN SHOP EKSPRES EOOD, a single-member limited liability company registered in the Republic of Bulgaria.

I. Data controller and contact details

• Controller / Website operator: ONLAYN SHOP EKSPRES EOOD
• Trade name: Peptology
• Legal form: single-member limited liability company (EOOD)
• Company identification number (UIC/PIC): 208538633
• VAT number: BG208538633
• Registered seat and management address: Bulgaria, Sofia 1326, Vrabnitsa district, Obelya 2, block 259, entrance B, floor 3, apartment 5
• Contact e-mail: support@peptology.bg

For questions regarding orders, use of the Website, complaints or the exercise of rights in relation to personal data, you can contact us at the details above.

II. General terms of use of the Website

The use of the Website and the placing of an order presuppose the full and unconditional acceptance of the Terms and Conditions, this Policy and any other policy published on the Website. The user declares that they:

• are at least 18 years of age;
• have full legal capacity;
• provide true, accurate and complete information when placing an order;
• use the Website in accordance with the applicable legislation and the published terms.

ONLAYN SHOP EKSPRES EOOD reserves the right to change the content, functions, prices, policies and terms of use of the Website at any time. Changes take effect from the moment of their publication on the Website, unless otherwise stated.

III. Specific information about the Products

The Products available through the Peptology Website are intended exclusively for scientific research purposes and in vitro applications in a laboratory environment. The Products:

• are not medicinal products;
• are not foods or food supplements;
• are not cosmetic products;
• are not medical devices;
• are not intended for consumption, use or administration in humans or animals;
• are not intended for the diagnosis, treatment, prevention or relief of any disease, condition or symptom.

Upon completing the order, the user confirms that they are at least 18 years of age, accept the Terms and Conditions and order the products exclusively for scientific research purposes.

IV. Protection of personal data

ONLAYN SHOP EKSPRES EOOD, as the controller of the Peptology Website, processes users' personal data only to the extent necessary for the operation of the Website, the processing of orders, the provision of support and compliance with legal obligations.

1. Categories of personal data

When using the Website or placing an order, the following data may be collected and processed:

• first name and surname;
• delivery address;
• telephone number;
• e-mail address;
• order data;
• invoicing data, if required;
• payment data, depending on the payment method;
• technical data, such as IP address, device type, browser and cookies.

2. Purposes of processing

Personal data is processed for the following purposes:

• creating and managing orders;
• shipping and delivering products;
• contacting the user regarding the order;
• issuing invoices and keeping accounting records;
• handling complaints, returns and support requests;
• improving the operation and security of the Website;
• sending informational or marketing messages, only where there is corresponding consent;
• compliance with legal obligations.

3. Legal basis of processing

Personal data is processed on the basis of the following legal bases:

• Article 6(1)(b) GDPR — processing necessary for the performance of a contract or for taking steps prior to entering into a contract;
• Article 6(1)(c) GDPR — compliance with legal obligations, such as accounting and tax obligations;
• Article 6(1)(a) GDPR — the user's consent, in particular for informational data, marketing communication and non-essential cookies;
• Article 6(1)(f) GDPR — legitimate interest, such as protection against fraud, the security of the Website and the management of legal claims.

4. Principles of processing

The processing of personal data is carried out in accordance with the basic principles of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy and up-to-dateness; storage limitation; integrity and confidentiality; accountability of the controller.

5. Retention period

Personal data is kept only for as long as is necessary for the purposes for which it was collected. By way of example:

• order data is kept for as long as necessary to fulfil the order and support the customer;
• accounting and tax data is kept for the period required by the applicable legislation;
• marketing data is kept until the withdrawal of consent by the user;
• technical data and cookies are kept in accordance with the Cookie Policy and the applicable rules.

6. Disclosure of data to third parties

Personal data may be shared only where necessary to fulfil an order, operate the Website or comply with legal obligations. The data may be shared with:

• courier companies and transport services;
• payment service providers;
• accountants and tax advisors;
• hosting, technical support and software providers;
• competent public authorities, when required by law.

ONLAYN SHOP EKSPRES EOOD does not sell personal data to third parties.

V. Rights of users

Under the GDPR, the user has the following rights:

• the right of access to their personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure („right to be forgotten“), where applicable;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw consent at any time, where processing is based on consent;
• the right to lodge a complaint with the competent supervisory authority.

To exercise your rights, you can contact us at: support@peptology.bg.

VI. Supervisory authority

On matters relating to the protection of personal data, the user has the right to contact the competent supervisory authority.

As the controller is established in Bulgaria, the competent authority is:

• Commission for Personal Data Protection (KZLD)
• Address: Sofia 1592, Bulgaria, „Prof. Tsvetan Lazarov“ Blvd. 2
• Website: www.cpdp.bg

Users residing in the European Union may also lodge a complaint with the national data protection authority of their country of residence. A list of the EU supervisory authorities is available on the website of the European Data Protection Board (www.edpb.europa.eu).

VII. Cookie Policy

The Website uses cookies and similar technologies for its proper operation, improving the user experience, analysing traffic and, where consent is given, for marketing purposes. Cookies may be strictly necessary, functional, analytical/statistical and advertising/marketing. Non-essential cookies are used only if the user has given their consent through the relevant consent mechanism. For more information, see the Website's Cookie Policy.

VIII. Intellectual property

All trademarks, logos, texts, images, graphics, photographs, product descriptions, design elements and other content of the Website are the intellectual or industrial property of ONLAYN SHOP EKSPRES EOOD or are lawfully used by it. Copying, reproduction, distribution, modification, publication or commercial use of any content without prior written permission is prohibited.

IX. Limitation of liability

ONLAYN SHOP EKSPRES EOOD makes every effort to ensure that the information on the Website is accurate, up to date and available. However, the company does not guarantee that the Website will function uninterrupted or without technical errors, and is not liable for temporary interruptions, technical problems or errors that are not due to negligence or gross negligence. ONLAYN SHOP EKSPRES EOOD is not liable for damages resulting from unauthorised, unlawful or Terms-and-Conditions-incompatible use of the Website or the Products.

X. Links to third-party websites

The Website may contain links to third-party websites or services. ONLAYN SHOP EKSPRES EOOD does not control and is not liable for the content, privacy policies, security or practices of third-party websites. Access to such links is at the user's own responsibility.

XI. Amendments to this Policy

This Policy may be amended or updated at any time. Changes take effect from the moment of their publication on the Website, unless otherwise stated. We recommend that users check this page periodically for any updates.

XII. Contact details for questions and complaints

For any question regarding this Policy, the use of the Website, the processing of personal data or the exercise of your rights, you can contact us:

• ONLAYN SHOP EKSPRES EOOD
• Trade name: Peptology
• UIC/PIC: 208538633
• VAT number: BG208538633
• Registered seat: Bulgaria, Sofia 1326, Vrabnitsa district, Obelya 2, block 259, entrance B, floor 3, apartment 5
• E-mail: support@peptology.bg

Last updated: August 2026