SHOP NOW

Privacy Policy

‌Effective Date: October 27, 2026‌

1. Introduction

Welcome to the privacy policy of ЧЕФО 83 ЕООД (hereafter referred to as “we”, “us”, or “our”). This policy applies to all personal data processing activities carried out through our official website www.chefeo83.com, an e-commerce platform dedicated to providing customers with lightweight, low-waste outdoor tabletop gear including outdoor tableware, non-slip outdoor-ready placemats, outdoor tablecloths, and a full line of durable, gently stylish outdoor tabletop pieces designed for campsites, lakeside spots, backyard patios and all open-air dining scenarios.

We are fully committed to protecting the privacy rights of all our users and visitors, and ensuring that all personal data we collect, process, store and transmit complies with the General Data Protection Regulation (GDPR) – the leading data privacy legal framework across the European Union, as well as all applicable regional data protection regulations. This policy clearly outlines what personal data we collect, why we collect it, how we use and safeguard it, and what rights you hold in relation to your personal information. If you have any questions regarding this privacy policy or our data processing practices, you can contact us at any time via email at [email protected], by phone at +32 57204555, or via post at ул. Христо Ботев 92, 7275 Blagoevo.

2. Data Controller Information

The data controller responsible for your personal data is:

  • ‌Company Name‌: ЧЕФО 83 ЕООД
  • ‌Official Website‌: www.chefeo83.com
  • ‌Contact Email‌: [email protected]
  • ‌Contact Phone‌: +32 57204555
  • ‌Registered Address‌: ул. Христо Ботев 92, 7275 Blagoevo

As an e-commerce retailer focused on outdoor tabletop products, we process your personal data in full compliance with all applicable EU and national data protection laws, with full transparency and accountability for all processing activities.

3. Personal Data We Collect and Process

We only collect personal data that is directly relevant to delivering our services and improving your shopping experience, in line with the principle of data minimization required by GDPR. The categories of personal data we may collect include:

  • ‌Basic Account and Order Data‌: When you create an account on our website, place an order, or complete a checkout process, we collect your full name, billing and shipping address, email address, contact phone number, and payment related details to the extent necessary to process your transaction.
  • ‌Browsing and Usage Data‌: We collect standard information related to your interaction with our website, including your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, pages you visit on our site, time spent on those pages, page access times, and other anonymous browsing statistics. This data helps us understand how users navigate our platform and improve our website functionality.
  • ‌Marketing Communication Preference Data‌: If you opt in to receive our marketing newsletters, product updates, and information about new outdoor tableware collections, we will store your email address and your explicit consent record for these communication activities.
  • ‌Cookie and Consent Data‌: We collect records of your choices when you interact with our cookie consent banner, including timestamped consent logs for different categories of cookies, your acceptance or rejection of non-essential cookies, and any subsequent adjustments you make to your consent preferences.
  • ‌Voluntarily Provided Data‌: If you submit customer service inquiries, product feedback, contest entries, or other voluntary communications to us, we will store the content of those messages and the personal identifying information you include in them to respond to you appropriately.

We do not collect any sensitive personal data as defined by data protection regulations, including information related to racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation, health status, biometric data or criminal records, unless you explicitly and voluntarily provide such information, and we will never process such data without explicit legal justification.

4. Lawful Bases for Data Processing

In full compliance with GDPR requirements, every personal data processing activity we conduct is supported by a clear, valid legal basis. The primary lawful bases we rely on for our e-commerce operations are as follows:

  1. ‌Contractual Necessity‌: The processing of your name, shipping address, email, payment details and order information is necessary for the performance of the sales contract we enter into with you when you purchase products from our store. This processing allows us to fulfill your order, arrange delivery, process payment, provide order confirmations and after-sales support services, all of which are essential to completing your transaction.
  2. ‌Explicit User Consent‌: For processing activities that are not strictly necessary for order fulfillment, including sending marketing newsletters, using non-essential analytics cookies, and sending personalized retargeting advertisements, we will obtain your clear, freely given, specific and unambiguous explicit consent before processing your personal data. You have the full right to withdraw this consent at any time, via the unsubscribe link in our marketing emails, or by adjusting your cookie preferences on our website consent banner.
  3. ‌Legitimate Interests‌: Where appropriate, we may process your personal data based on our documented legitimate interests, but only after completing a formal balancing test to confirm that our business interests do not override your fundamental data privacy rights and freedoms. For example, we may process limited user data for fraud prevention purposes, to protect our e-commerce platform and other customers from unauthorized transactions, and ensure the security of our checkout system. We will never rely on legitimate interests as a general catch-all legal basis for non-essential processing activities, and all such processing is subject to regular regulatory scrutiny and internal audit.

5. How We Use Your Personal Data

We only use your personal data for the explicit, clearly communicated purposes that you have been informed of at the time of collection, and will never repurpose your data for uses incompatible with these original purposes. The primary use cases for your personal data include:

  • Processing, fulfilling and delivering your orders for outdoor tableware, placemats, tablecloths and other products purchased from [www.chefeo83.com], including arranging logistics, updating you on shipment status, and handling returns, exchanges or after-sales support requests.
  • Managing your user account on our website, including verifying your identity, processing your account settings updates, and maintaining your purchase history for your future reference.
  • Sending you service-related notifications, including order confirmation emails, payment alerts, product recall notices, and critical website maintenance updates that are necessary for the normal operation of your shopping experience.
  • With your explicit separate consent, sending you marketing communications about new product launches, exclusive promotions, outdoor dining tips and upcoming collections of lightweight outdoor tabletop gear that align with your demonstrated product preferences.
  • Conducting website performance analysis and user experience optimization, to understand how customers interact with our product pages, improve site navigation, fix technical bugs, and ensure that all visitors can easily find and purchase the outdoor tableware products they need.
  • Preventing fraud, unauthorized transactions, and other malicious activities on our e-commerce platform, to protect the security of our payment system, our customers’ financial information, and our overall business operations.
  • Complying with our legal obligations under applicable laws, including tax record keeping, consumer protection requirements, and responding to valid, lawful requests from competent public authorities.

6. Cookie Policy and Consent Management

Our website uses cookies and similar tracking technologies to enhance your browsing experience, in full compliance with GDPR requirements for non-essential cookie consent. Our compliant cookie management system follows all mandatory regulatory standards:

  • The cookie consent banner appears on your first visit to our website, before any non-essential cookies are set on your device.
  • The banner displays clear, equally visible “Accept All” and “Reject All” options, alongside granular control settings that allow you to customize your consent for individual cookie categories, including functional cookies, analytics cookies, and marketing cookies.
  • We store a complete, timestamped record of all your consent choices, which is retained for audit and compliance purposes.
  • You have the right to modify, adjust or fully withdraw your cookie consent preferences at any time, as easily as you initially provided your consent, via the cookie settings page accessible at the footer of every page on our website.

Strictly necessary cookies that are required for the operation of our checkout system and core website functionality do not require your prior consent, as they are essential to provide you with the e-commerce services you request. These cookies cannot be disabled via our consent banner, and will only be stored on your device for the minimum period required to complete your current session.

7. Data Sharing and Third-Party Disclosures

We will never sell, rent or lease your personal data to unrelated third parties for their own marketing purposes, at any time. We only share your personal data with carefully selected third party service providers where it is strictly necessary to deliver our e-commerce services, and all such third parties are contractually bound to uphold the same level of data protection as required by GDPR regulations. The categories of third parties we may share your data with include:

  • ‌Logistics and Delivery Partners‌: We share your name, shipping address and contact phone number with our authorized courier service providers, for the exclusive purpose of delivering your purchased outdoor tableware products to the address you specified in your order.
  • ‌Payment Processing Providers‌: We share necessary payment transaction data with our PCI DSS compliant payment service providers, to process your credit card, digital wallet or other payment methods securely. We do not store full credit card details on our own servers.
  • ‌Website Service Providers‌: We work with trusted e-commerce platform providers, cloud hosting services, and website analytics tools that help us operate [www.chefeo83.com] smoothly. All these providers are located in jurisdictions that are recognized by the European Commission as offering an adequate level of data protection, or we have signed standard contractual clauses approved by the European Commission with them to ensure full compliance for data transfers.
  • ‌Regulatory Authorities‌: We may disclose your personal data if we are required to do so by law, court order, or valid formal request from a competent public authority, to the extent strictly required by applicable legal provisions.

8. Data Retention Period

We will only retain your personal data for as long as it is strictly necessary to fulfill the specific purposes for which we originally collected it, in line with GDPR requirements for data storage limitation. Different categories of personal data are retained for different appropriate periods:

  • Order related data including purchase records, billing and shipping information is retained for the full duration of our commercial relationship with you, plus an additional 5 year period after your last transaction, to comply with tax laws, consumer protection regulations, and warranty obligations for our outdoor tableware products.
  • Marketing consent records are retained for as long as you remain subscribed to our newsletter, plus a 3 year period after you unsubscribe, to document that we obtained valid consent before sending marketing communications.
  • Website browsing and analytics data is anonymized or deleted within 12 months of collection, once it has been used for user experience analysis.
  • If you submit a customer service inquiry, we will retain the related communication records for 3 years after we have fully resolved your request, for internal quality control and reference purposes.

When your personal data is no longer required for the purposes we collected it for, we will securely delete, anonymize or destroy it, in line with our internal data retention and erasure policies.

9. Your Rights as a Data Subject

Under GDPR and applicable European data protection laws, you hold a comprehensive set of enforceable rights in relation to your personal data. You can exercise any of these rights at any time, free of charge, by submitting a request to us via email at [email protected], or by post to our registered address. Your rights include:

  1. ‌Right of Access‌: You have the right to request a full copy of all the personal data we hold about you, as well as clear information about how we process your data, the categories of data recipients we have shared it with, and the planned retention period for your data.
  2. ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete or outdated (such as your shipping address or contact phone number), you have the right to request that we correct and update that data without undue delay.
  3. ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request that we erase your personal data, in circumstances where the data is no longer necessary for the original purposes we collected it for, you have withdrawn your consent to the processing, or you object to the processing and there are no overriding legitimate grounds for us to continue processing your data.
  4. ‌Right to Restriction of Processing‌: You have the right to request that we limit the processing of your personal data, for example when you contest the accuracy of your data, when the processing is unlawful and you oppose erasure, or when we no longer need the data but you require it for the establishment, exercise or defense of legal claims.
  5. ‌Right to Data Portability‌: For personal data you have provided to us based on your consent or for the performance of a contract, you have the right to receive that data in a structured, commonly used, machine-readable format, and to request that we transmit that data directly to another data controller of your choice, where technically feasible.
  6. ‌Right to Object‌: You have the right to object at any time to processing of your personal data that is based on our legitimate interests, including for direct marketing purposes. If you object to direct marketing processing, we will immediately cease all marketing communications to you without further delay.
  7. ‌Right to Withdraw Consent‌: You may withdraw any consent you previously provided to us for data processing activities, at any time. The withdrawal of consent will not affect the lawfulness of any processing that we carried out before you withdrew your consent.

We will respond to all valid data subject requests within one month of receipt, as required by GDPR. If your request is particularly complex or you submit a large volume of requests simultaneously, we may extend our response period by up to two more months, and we will notify you of this extension within one month of receiving your request. We will never charge you a fee for exercising your rights, unless your request is clearly manifestly excessive, repetitive or unfounded, in which case we may charge a reasonable administrative fee.

10. Data Security Measures

We implement a comprehensive set of technical and organizational security measures, to ensure that all personal data we process is protected against unauthorized access, accidental loss, destruction, alteration, or unlawful disclosure. These security measures include:

  • End-to-end 256-bit AES encryption for all personal data stored on our servers, and TLS 1.3 encryption for all data transmitted between your browser and our website, to protect your information during online checkout and browsing activities.
  • Role-based access control systems, where only a limited number of authorized staff who require access to your personal data to fulfill their job duties (such as order processing and customer service teams) are granted permission to access your information.
  • Regular security audits, vulnerability scanning, and penetration testing of our e-commerce platform, conducted by independent third party cybersecurity experts, to identify and remediate any potential security risks in a timely manner.
  • Staff training programs for all our team members who handle personal data, to ensure every employee is fully aware of their data protection obligations and follows strict data handling protocols.

In the extremely unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms as a data subject, we will notify you and the relevant competent supervisory authority within 72 hours of becoming aware of the breach, in full compliance with GDPR data breach notification requirements.

11. Children’s Privacy

Our e-commerce platform [www.chefeo83.com] is designed and intended for use by adults aged 18 years or older. We do not knowingly collect personal data from children under the age of 16, without the explicit verified consent of a parent or legal guardian. If we become aware that we have inadvertently collected personal data from a child under the relevant age threshold without proper parental consent, we will immediately take steps to erase that data securely from all our systems.

12. International Data Transfers

As a company operating within the European Union, all our core data processing activities are hosted on servers located within the European Economic Area (EEA). In the rare event that we need to transfer your personal data to a third country outside of the EEA, we will ensure that the transfer is fully compliant with GDPR requirements. This will be done either by transferring the data to a jurisdiction that the European Commission has confirmed provides an adequate level of data protection, or by implementing appropriate safeguards such as signing the standard contractual clauses for data transfers that are formally approved by the European Commission. You can contact us at any time to request a copy of these appropriate safeguard documents.

13. Changes to This Privacy Policy

We may occasionally update and revise this privacy policy to reflect changes in our business operations, new regulatory requirements, or updates to our website features. When we make material changes to this policy, we will update the effective date at the top of this document, and publish a clear prominent notice on the homepage of [www.chefeo83.com] to alert you to the changes. We encourage you to review this policy periodically to stay informed about how we protect your personal data. Your continued use of our website and purchase of our outdoor tableware products after the revised policy comes into effect will constitute your acknowledgement and acceptance of the updated privacy policy terms.

14. Contact Information and Complaints

If you have any questions, concerns, or complaints about our data processing practices, or you wish to exercise any of your data subject rights outlined in this policy, you can get in touch with us at any time:

  • By Email: [email protected]
  • By Phone: +32 57204555
  • By Post: ул. Христо Ботев 92, 7275 Blagoevo

If you are not satisfied with our response to your inquiry or complaint regarding your data privacy rights, you also have the right to submit a formal complaint to the relevant national data protection supervisory authority in your country of residence, as permitted under GDPR regulations.

This privacy policy was last updated and formally came into effect on October 27, 2026, and governs all data processing activities conducted by ЧЕФО 83 ЕООД through our website [www.chefeo83.com] from this date forward.