Privacy Policy

1. Controller

The data controller for personal data processed through the HoReCa COFFEE portal is REMA Holding. You can reach our data protection contact at office@remaholding.com.

2. What we collect

We process business contact data you provide on registration (name, work e-mail, phone, company name, VAT or tax ID, billing and delivery addresses), order history, payment status and technical data (IP address, browser, language preference, session cookies) required to operate the portal securely.

3. Purposes and legal bases

We process personal data to (a) provide the portal and fulfil B2B contracts (Art. 6(1)(b) GDPR), (b) comply with accounting, tax and traceability obligations (Art. 6(1)(c) GDPR), and (c) for the legitimate interests of operating, securing and improving the service and preventing fraud (Art. 6(1)(f) GDPR).

4. Sharing

We share data only with processors needed to run the service: cloud hosting, authentication, e-mail delivery, payment processing and shipping carriers. Processors act under written agreements and process data only on our instructions. We do not sell personal data and do not transfer it outside the EU/EEA without appropriate safeguards.

5. Retention

Account data is kept while the account is active and for up to 12 months after closure. Order and invoice records are retained for the periods required by Bulgarian and EU accounting law (typically 10 years).

6. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact us at the address above. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg).

7. Security

Access to the portal is protected by authentication and row-level authorization; data in transit is encrypted with TLS and sensitive credentials are stored hashed or in managed secret stores.

8. Cookies

The portal uses strictly necessary cookies for authentication, language preference and security. We do not use advertising or third-party tracking cookies.