Privacy Policy
Last updated: October 2025
Thank you for visiting sonatatea.com (the “Website”), operated by Sonata 11 Ltd. (“we”, “our”, “us”).
We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable laws.
This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website, and describes your rights and how you can exercise them.
1. Who We Are
Sonata 11 Ltd.
📍 Address: Block 93, No. 1, Kermen, Bulgaria
✉️ Email: [email protected]
We are the data controller responsible for determining the purposes and means of processing your personal data.
2. Information We Collect
When you contact us or use forms on our website, we may collect and process the following information:
- Full name
- Email address
- Phone number
- Company name
- Message or free-text comment
We collect this information only when you voluntarily provide it to us.
We do not collect any special categories of personal data (such as data revealing racial or ethnic origin, political opinions, or health information).
3. How We Use Your Information
We process your data for the following purposes:
- To respond to your inquiries or requests submitted through our contact form
- To provide information about our products, services, or events
- To maintain communication and manage relationships with customers, partners, and suppliers
- To improve our website, communication, and user experience
- To comply with legal obligations and defend our legal rights, if necessary
We will never sell, lease, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing
We process your personal data only when we have a lawful basis under GDPR, such as:
- Consent: when you submit information via our forms
- Legitimate interest: to manage communication, ensure website security, and improve our services
- Legal obligation: to comply with accounting, tax, or regulatory requirements
You may withdraw your consent at any time by contacting us at [email protected].
5. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.
In general:
- Data from contact forms is stored for up to 12 months after our last communication, unless longer retention is required by law.
- Business correspondence or invoices may be retained for up to 10 years under accounting regulations.
After this period, data is securely deleted or anonymized.
6. Sharing of Personal Data
We may share your information only in limited circumstances:
- With service providers who assist us in operating our website (for example, hosting, email, analytics). These providers are GDPR-compliant and process data only on our behalf.
- When required by law, court order, or government authority.
We do not transfer your data outside the European Economic Area (EEA) unless adequate safeguards (such as Standard Contractual Clauses) are in place.
7. Cookies and Tracking Technologies
Our website may use cookies — small text files stored on your device — to improve functionality, analyze traffic, and enhance user experience.
Types of cookies we may use:
- Essential cookies – necessary for website operation.
- Analytics cookies – help us understand how visitors use the website (e.g., via Google Analytics).
- Preference cookies – remember your language or region.
You can manage or delete cookies through your browser settings at any time.
By continuing to use our website, you consent to the use of cookies in accordance with this policy.
8. How We Protect Your Data
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.
This includes secure hosting, SSL encryption, restricted data access, and regular review of our security practices.
However, please note that no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access – to request a copy of your personal data.
- Right to rectification – to correct any inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”).
- Right to restrict processing – to limit how we use your data.
- Right to data portability – to receive your data in a structured, machine-readable format.
- Right to object – to object to processing based on legitimate interest.
- Right to withdraw consent – at any time, where processing is based on consent.
To exercise your rights, please contact us at [email protected].
We will respond within one month, as required by GDPR.
If you believe that we have violated your privacy rights, you also have the right to file a complaint with your local Data Protection Authority in Bulgaria or within your EU country of residence.
10. Children’s Privacy
Our website is not intended for children under the age of 16, and we do not knowingly collect data from minors.
If you believe that a child has provided us with personal data, please contact us immediately so we can remove it.
11. Links to Other Websites
Our website may contain links to third-party websites.
We are not responsible for the content or privacy practices of those websites.
We encourage you to review their privacy policies before submitting any personal information.
12. Updates to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on this page, with the updated date indicated at the top.
We encourage you to review this page periodically to stay informed about how we protect your information.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Sonata 11 Ltd.
📍 Block 93, No. 1, Kermen, Bulgaria
✉️ [email protected]
