Privacy Policy

1. Introduction

Odd Minds Foundation (‘the Foundation’, ‘we’, ‘us’) is committed to protecting the personal data of our donors, volunteers, partners and visitors to our website. This privacy policy describes how we collect, use, store and protect your personal information in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act of the Republic of Bulgaria.

2. Data Controller

Odd Minds Foundation
Address: 12 Varovita Street, Lozen
Telephone: +359 896 670 346
Email: orders@lafetki.com
Company Registration Number: 208453360

3. What personal data do we collect

3.1 Data from donors: First name and surname, email address, telephone number, postal address, payment details (processed via secure payment systems), donation history.

3.2 Data from volunteers: First name and surname, contact details (email, telephone), professional experience and skills, other data provided in volunteer applications.

3.3 Data from website visitors: IP address, browser and device type, cookie data, pages you visit.

3.4 Data from newsletter subscribers: First name and email address.

3.5 Data from shop customers:
First name and surname, email, telephone number, address or collection point/parcel locker, invoicing details (if requested), order contents and payment history. Your card details (number, expiry date, CVC) are entered directly on the bank’s secure page — we never see them and do not store them.
If you write a product review: name, email address (not published) and the text of the review.

4. How we use personal data

Processing donations, communication, managing volunteers, issuing tax documents, improving services, fulfilling legal obligations.

Fulfilling and delivering orders, including pre-orders; sending order confirmations and notifications; processing returns and complaints; issuing accounting documents.

5. Legal basis for processing

Consent, performance of a contract, legal obligation, legitimate interest. We process order data to fulfil the purchase contract (Article 6(1)(b) of the GDPR), and we retain accounting documents in accordance with the law (Article 6(1)(c)).

6. Sharing data with third parties

Payment systems, accounting services, email providers, government bodies. We do not sell or rent out your personal data to third parties for marketing purposes. For orders from the shop: courier companies Speedy and BoxNow (name, telephone number, address/office/parcel locker — solely for the purpose of delivering the parcel); DSK Bank (card payment processing); [accountant/accountancy firm] (accounting documents); [hosting provider] (the website’s servers, located in the EU).

7. Retention period

  • Donation data: 10 years
  • Subscriber data: until consent is withdrawn
  • Website data: up to 2 years
  • Order data and accounting documents: 10 years, in accordance with the Accounting
    Act Product reviews: whilst the review is published or until you request its deletion

8. Your rights

Right of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. To exercise your rights: orders@lafetki.com

9. Data security

We use encryption for sensitive data, restricted access, regular backups and secure servers.

10. Cookies

Our website uses cookies to ensure the site functions properly and (only with your explicit consent) for anonymous statistics. You can find detailed information about all the cookies used, their duration and how to manage your preferences in our Cookie Policy.

11. Changes to the policy

We reserve the right to update this policy. In the event of significant changes, we will notify you by email or via a notice on the website.

12. Contact and complaints

Email: orders@lafetki.com
Telephone: +359 896 670 346

Personal Data
Protection Commission, Sofia 1592, 2
Prof. Tsvetan Lazarov Boulevard www.cpdp.bg

Stay in the loop

Receive news and stories directly to your inbox.

We use cookies to keep the site working and (with your consent) for anonymous analytics. Learn more