Privacy policy
Last updated: 5 October 2026.
Data controller
Хепи Фрутс ООД (Happy Fruits OOD), Bulgarian registration number 202425151, VAT number BG202425151, registered address: 1 Ormana Street, Novo Selo 4221, Plovdiv Province, Bulgaria, represented by Asen Bagashev, is responsible for personal data processing in connection with happyfruits.eu. Privacy contact: happyfruits.eu@gmail.com or the postal address above.
Data processed when you visit
The website has no contact form, newsletter signup, user accounts, online orders or payments. We do not ask you to enter a name, email address, telephone number or payment details through it. Visiting still involves processing technical data.
- Website delivery and security: the hosting infrastructure processes your IP address, requested address, request time and technical browser information. Technical logs may contain this information to investigate errors, attacks and abuse.
- Cookie choice: after you make a choice, your browser stores permission or refusal for analytics, the time of the choice and the consent text version. This cookie contains no name or email address.
- Optional analytics: if Google Analytics 4 is enabled for the website and you allow it, processing includes analytics cookie identifiers, pages visited, interactions, device and browser information and approximate location. We do not send names, email addresses or telephone numbers to Analytics. The page addresses sent for analytics exclude query parameters and URL fragments.
Purposes and legal bases
- Website delivery, maintenance and protection are based on our legitimate interest in a reliable, secure website under GDPR Article 6(1)(f).
- Remembering your choice is necessary to respect your decision and the consent rules. These data are used only to manage your choice, on the basis of applicable data protection obligations.
- Measuring visits and improving the website through Google Analytics are based on your voluntary consent under GDPR Article 6(1)(a). Refusal does not restrict access.
If you send a rights request, we process the information necessary to handle it and meet our legal obligations under GDPR Article 6(1)(c). Email is sent outside the website's forms, through your email service.
Google Analytics and your choice
When analytics is enabled, the Google tag loads only after you explicitly allow it. No analytics requests are sent to Google before permission or following refusal. We do not use this mechanism for advertising cookies, Google Signals or personalised advertising.
You can refuse in the first notice, change your choice through “Cookie settings”, or use “Withdraw consent” at the bottom of the website. Withdrawal stops future analytics and removes analytics cookies accessible to this website. It does not make previous processing unlawful or automatically erase data already processed by Google.
Recipients and international transfers
Authorised personnel, hosting providers and technical support providers may access technical data as needed to operate and protect the website. Email providers process the necessary data when rights requests are sent or received by email. Information is provided to competent authorities where required by law.
When Google Analytics is enabled and allowed, recipients include Google Ireland Limited and related Google providers. Processing may involve transfers outside the European Economic Area, including to the United States. Such transfers use applicable mechanisms under GDPR Chapter V, such as an applicable adequacy decision or standard contractual clauses. See Google's data processing terms and privacy policy. You can ask for information about applicable safeguards and recipients using our privacy contact.
Retention
- Your cookie choice is stored for up to 180 days from the choice, unless you change it or your browser removes it sooner.
- Analytics cookies, when allowed, have a maximum lifetime of 180 days; this lifetime is not automatically renewed on each visit.
- The Google Analytics user and event data retention setting is 2 months, with renewal on new activity disabled. This limit does not apply to Google's standard aggregated reports.
- Technical logs and backups are kept for the period necessary for maintenance, recovery and investigating particular incidents. The criteria are the scope of an incident, recovery needs and applicable legal obligations; data are not kept indefinitely simply because they are available.
- Rights requests are kept for as long as necessary to respond, demonstrate compliance with applicable obligations or handle a particular legal dispute.
Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. You can withdraw consent at any time. Some rights depend on the legal basis and statutory exceptions.
Write to happyfruits.eu@gmail.com or the company's registered address. We normally respond within one month. Complex or numerous requests may require up to two further months; we will explain the extension within the first month. Where there is reasonable doubt about your identity, we may ask for only the additional information necessary to verify it.
You may complain to the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, Bulgaria, email: kzld@cpdp.bg, or to the competent supervisory authority in your habitual residence, place of work or the place of the alleged infringement.
Further information
We do not make automated decisions that produce legal or similarly significant effects on visitors. Contact details are not required to browse. Read our Cookie policy and Legal information.
We update this text and its date when practices change. If the purposes or scope of optional analytics change, we will ask for a new choice before using consent for those changes.