top of page

Privacy Policy

Last updated: August 2026

​

1. Introduction

This Privacy Policy explains how Audio Box Ltd., operating the ECOBOX brand and the website www.ecobox.zone, collects, uses and protects personal data.

Audio Box Ltd. acts as the data controller for personal data processed through this Website and in connection with enquiries and subsequent commercial communication.

Data Controller:
Audio Box Ltd.
VAT No. BG204850382
Registered address: 12 Iliyantsi Blvd., 1220 Sofia, Bulgaria

Contact address:
1 Rujni vodi Str.
1261 Sofia, Mramor
Bulgaria

Email: ecoboxfidelity@gmail.com
Telephone: +359 888 819 307

​

2. Personal Data We May Collect

Depending on how you interact with ECOBOX, we may collect:

  • first and last name;

  • email address;

  • country;

  • company name, where provided;

  • product or service you are interested in;

  • requested quantity;

  • information included in your enquiry or project description;

  • telephone number, if provided through subsequent communication;

  • billing and delivery information where a commercial relationship is established;

  • correspondence relating to enquiries, quotations and orders;

  • technical information relating to use of the Website, such as browser, device, IP address and cookie-related information, where permitted by applicable law and your consent preferences.

We do not intentionally request sensitive categories of personal data through the Website.

​

3. How We Collect Personal Data

We may collect personal data when you:

  • submit an enquiry through the Website;

  • contact ECOBOX by email, telephone or another communication channel;

  • request a quotation;

  • accept a quotation or place an order;

  • communicate with us regarding an existing or potential project;

  • interact with the Website and consent to analytics or marketing technologies.

 

4. Purposes and Legal Bases for Processing

We process personal data only where we have an appropriate legal basis.

Product enquiries and quotations

When you submit an enquiry or request a quotation, we process the information necessary to respond to your request, provide product information and prepare a commercial proposal.

The legal basis is taking steps at your request prior to entering into a contract, under Article 6(1)(b) GDPR.

Orders and contractual relationships

Where an enquiry results in an order, we process personal data necessary to fulfil the contract, arrange production, invoicing, payment, delivery, support and related communication.

The legal basis is performance of a contract under Article 6(1)(b) GDPR.

Legal and accounting obligations

Certain information relating to transactions may be processed and retained where required by applicable tax, accounting, consumer protection or other legal obligations.

The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

Website security and business administration

We may process limited technical or communication information where necessary to operate, secure and improve our Website, prevent misuse and manage legitimate business activities.

Where applicable, the legal basis is our legitimate interest under Article 6(1)(f) GDPR, provided that such interests do not override your fundamental rights and freedoms.

Analytics and marketing technologies

Where analytics, advertising or similar non-essential technologies require consent, they are activated only according to the preferences selected through our cookie consent system.

The legal basis is your consent under Article 6(1)(a) GDPR.

You may withdraw or change that consent at any time through the cookie settings available on the Website.

​

5. Enquiries Are Not Marketing Subscriptions

Submitting a product enquiry does not automatically subscribe you to newsletters or promotional email campaigns.

Information submitted through an enquiry form is primarily used to respond to that enquiry and manage the resulting commercial relationship.

If ECOBOX introduces a newsletter or other direct marketing communication requiring separate consent, that consent will be requested separately where required by law.

​

6. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

As a general principle:

  • enquiries that do not result in a transaction may normally be retained for up to 24 months to enable follow-up and maintain the context of previous communication;

  • information connected with an active customer relationship may be retained for the duration of that relationship;

  • contractual, invoicing and accounting information is retained for the periods required under applicable Bulgarian law;

  • data processed on the basis of consent is retained until the consent is withdrawn or the applicable retention period expires;

  • cookies and similar technologies are retained according to the periods described in our Cookie Policy and cookie consent system.

Information may be retained for a longer period where necessary for the establishment, exercise or defence of legal claims or where required by law.

​

7. Service Providers and Recipients

We may use trusted third-party service providers necessary for operating the Website and our business.

These may include providers of:

  • website hosting and website management;

  • contact forms and customer relationship management;

  • email and communications;

  • analytics;

  • cookie consent management;

  • advertising and conversion measurement;

  • IT and security services;

  • accounting, payment, transport and delivery services where relevant to an order.

The ECOBOX Website is currently operated using Wix infrastructure, and cookie consent management is provided through Usercentrics for Wix.

Where analytics or advertising platforms such as Google or Meta are enabled, their technologies are used according to applicable consent requirements and the preferences selected by the visitor.

We disclose only the information reasonably necessary for the relevant service.

​

8. International Data Transfers

Some service providers used for website, analytics, communication or advertising services may process information outside Bulgaria or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we take reasonable steps to ensure that the transfer is made in accordance with GDPR requirements, including the use of an applicable adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism where required.

​

9. Cookies and Similar Technologies

The Website uses cookies and similar technologies.

Essential technologies may be required for the Website to function correctly.

Analytics, advertising and other non-essential technologies are used in accordance with the visitor's consent choices where consent is required.

Visitors can accept, reject or manage non-essential technologies through the Website's cookie consent banner and can subsequently change their preferences.

For more information, please see our Cookie Policy.

​

10. Your Rights

Subject to the conditions provided by applicable data protection law, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • receive certain personal data in a portable format;

  • withdraw consent at any time where processing is based on consent;

  • lodge a complaint with a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

These rights arise from the GDPR and may be subject to specific statutory conditions and exceptions. EUR-Lex

​

11. Exercising Your Rights

To exercise your data protection rights or ask a question regarding personal data, please contact:

Audio Box Ltd.
Email: ecoboxfidelity@gmail.com

We may need to verify your identity before responding to a request where reasonably necessary to protect personal data from unauthorised disclosure.

​

12. Complaints

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

In Bulgaria, the supervisory authority is:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia
Bulgaria

The CPDP is the Bulgarian supervisory authority responsible for personal-data protection. CPDP

You may also have the right to contact another competent supervisory authority within the European Union depending on your circumstances.

​

13. Data Security

We take reasonable organisational and technical measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

No internet-based system can provide absolute security, but we seek to use appropriate safeguards proportionate to the nature of the information processed.

​

14. Automated Decision-Making

ECOBOX does not currently use personal data submitted through product enquiries to make decisions producing legal or similarly significant effects solely by automated means.

​

15. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect changes in our Website, services, technologies, business activities or legal obligations.

The current version will always be published on this page together with its latest update date.

​

16. Contact

For privacy-related questions:

Audio Box Ltd.
1 Rujni vodi Str.
1261 Sofia, Mramor
Bulgaria

Email: ecoboxfidelity@gmail.com
Tel: +359 888 819 307
Website: www.ecobox.zone

bottom of page