Privacy Policy

Last updated: June 8, 2026

1. Data controller

INDASTRA, EIK 208699814, registered at Odrin street 2, Burgas 8000, Bulgaria, operating the brand Equipta at this website. Contact: order@equipta.eu.

2. What data we collect

Quote-request data: name, email, phone, company, country, message, list of requested products.
Technical data: IP address, browser/user-agent, referring page, timestamp.
Cookies: see our Cookie Policy.

3. Lawful basis

We process your data on the basis of:

Performance of a contract (Art. 6(1)(b) GDPR) — to respond to your quote request and fulfil any subsequent order.
Legitimate interest (Art. 6(1)(f) GDPR) — security, fraud prevention, basic site analytics.
Consent (Art. 6(1)(a) GDPR) — for any optional marketing communications and non-essential cookies.

4. How long we keep it

Quote requests: 3 years from submission, then archived or deleted.
Order/invoice records: 10 years (Bulgarian accounting law).
Server logs: 30 days.

5. Sharing & transfers

We share data with: hosting provider (within EEA), email service (transactional emails), payment processor (only at checkout), and the relevant manufacturer/distributor when needed to fulfil your specific quote. We never sell personal data.

6. Your rights

Access — get a copy of data we hold on you.
Rectification — correct inaccurate data.
Erasure — request deletion (subject to legal retention obligations).
Portability, restriction, objection — under GDPR Articles 18, 20, 21.
Withdraw marketing consent — anytime via link in any email or by contacting us.
Lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg).

To exercise any of these rights, email order@equipta.eu.

7. Security

We use HTTPS encryption, restrict employee access to personal data, and maintain appropriate technical and organisational measures under Article 32 GDPR.

8. Changes

We may update this policy. Material changes will be highlighted on this page and notified to active customers by email.