Privacy policy

(In force as of 25.05.2018, changed 22.04.2020)

Personal data of visitors and users of EcoRec Company premises (located in Sofia, Bulgaria) and the web site “” is being processed for the purposes of advertisement and purchase of spent catalysts and electronic scrap as well as for affiliated purposes.

Controller (“the Controller”) of your personal data processed by the EcoRec company premises and the web site “” “Ecorec” Ltd, company reg. No.: 130501897 , with headquarters and registered address: 4 Pavlina Unufrieva Str., 1510 Sofia, Bulgaria.

The Data Protection Officer of the Controller will answer all your questions regarding the processing and protection of your personal data and will make the process of exercising your data subject rights easier and more understandable. You will be able to directly contact him / her via email at

Personal data that we process on the basis of a contract, for compliance with legal obligations in accordance with the local and EU legislature or legitimate interest:

I. We process the following categories of data

1.Data contained in using our enquiry form at the “” web site that is created for you after entering into an informal contractual obligation with the Controller by accepting the Privacy policy on the website “”:
● First and last name;
● E-mail address;

2.Data contained in your contract for selling spent catalytic converters and and electronic scrap:
● First and last name;
● E-mail address;
● Name of a legal entity and/or name of another incorporated or unincorporated entity / organization;
● Delivery address – country, city, postcode, address;
● Phone number;
● Invoice data – names, phone, city, country, postcode, address;
● Type of delivery;
● Method of payment;
● Order number;
● Payment amount;
● Status and payment history;

3. Data contained in your profile at the EcoRec customer database:

●      First and last name;
●      Name of a legal entity and/or name of another incorporated or unincorporated entity / organization;

Purposes of the processing of personal data

1.Filling the required documents according local law

2.Answering questions and making offers

3. The data stemming from video surveillance at the EcoRec facilities is being processed for the purposes of:
● Tracking of incidents and violations;
● Crime prevention and reporting;

Third parties with access to your personal information for the fulfillment of their duties

1. We use the following service providers for real time price information, cloud services, hosting, reverse proxy, CDN, servers / clusters and collocation:
●”NS 1″ Ltd. , with UIC: 175018740 – provides hosting for the web site, by using the services of the subcontractor “TELEPOINT” Ltd., with UIC: 175424163. You can read their privacy policy at the following address: https: // www.
●”Kitco Metals Inc.” provides real time prices precious metals such as gold, silver, platinum and palladium. Their privacy policy is located here:
● Cloudflare, Inc. , Headquartered in San Francisco, California, USA – provides reverse proxy, DNS and CDN (content delivery network). Cloudflare, Inc. participates in the Privacy Shield program and has a valid compliance certificate, which can be viewed at . Their privacy policy is available at

2. Consultants and suppliers in different spheres for the purposes of protecting our legitimate interests in maintaining and improving the quality of the services we provide to you, to meet legal requirements, to protect legal rights and interests in judicial, pre-trial and administrative proceedings. We use the following entities on regular basis:
● “Demetra Soft” Ltd. , with UIC: 175374760 – provides licensed specialized software for waste collection. More about them can be found on their website:
● “Tandem Consult” Ltd. , with UIC: 175317574 – provides accounting services;
● “Digital Format” Ltd. , with UIC: 131388712 – provides consultancy services concerning information, advices and technical support for our website, IT network and equipment;

3. Delivery companies we partner with for supplying foods and products: Econt, Speedy, Rapido, Aramex, DHL and TNT;

4. State authorities and institutions in connection with inquiries carried out by them in accordance with legal requirements and restrictions;

In regards to the usage of private entities, we require and enforce these third parties to apply all adequate technical and organizational measures in order to protect your data.

Your personal data is processed for the following time periods

1. Data on the collection and verification of accounting data and accounting compliance – accounting records and financial statements, including tax audit, audit and subsequent financial inspection documents, shall be kept for 10 years from 1st of January of the reporting period following the reporting period to which they refer; all other holders of accounting information – three years from 1st of January of the reporting period following the reporting period to which they refer;

2. Data stemming from video surveillance at the EcoRec facilities – the video footage is being stored within 30 days. Once this deadline has expired, the data is deleted and cannot be recovered or used anymore. The data shall not be deleted but will continue to be processed only for the purpose of protecting our legitimate rights and legitimate interests or in the fulfillment of our legal obligations, if at the date of expiration of that period, there is a pending legal, administrative and pre-trial proceedings or a misconduct, admitted or brought to our knowledge, complaints and potential violations – until their completion.

Your rights in relation to your personal data

1.Right of access, including the right to copy the data under processing:

● You have the right to request information about the personal data we hold on you at any time. You may contact us and, based on a written request and authentication of your identity, the data will be provided to you ;

2. Right to rectification:

● You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed. You can do so through your account/profile or by writing to us, after duly authenticating your identity;

3. Right to erasure (“Right to be forgotten”) in the following cases:

● the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
● Withdrawal of consent when processing is based on consent;
● Illegal data processing;
● Legal obligation to delete;
The right to be forgotten is not an absolute right and may not be granted in the cases provided for by the law or due to a lack of proper authentication of your identity.

4. Right to restriction when:

● you object to a processing based on Controller’s legitimate interest, the Controller shall restrict all processing of such data pending the verification of the legitimate interest.; or
● you have claim that your personal data is incorrect, the Controller must restrict all processing of such data pending the verification of the accuracy of the personal data.; or
● the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead; or
● if the Controller no longer needs the personal data but it is required by you to defend legal claims.
In the case of rectification, erasure or restriction of processing, we will inform any recipient to whom personal data have been disclosed, unless this is impossible or involves a disproportionate effort.

5. The portability of machine-readable data , according to which we will:

● provide the data directly to you; or
● If requested by you and technical possibility, the data is provided to another controller of your choice;

6. Right to object to processing based on a legitimate interest:

● You may object to the processing of your personal data based on the legitimate interest of the Controller or a third party. The Controller will not continue to process your personal data unless it is proven that there are compelling legal bases that have priority over your interests and rights or due to litigation and other procedural and extra-procedural actions.

7. Right to object to direct marketing:

● You have the right to object to the receipt of marketing communications, including profiling and analysis for direct marketing purposes.

8. Right to complain with a supervisory authority in the Member State of habitual residence, place of work or place:

● of suspected violation if you consider that the processing of your personal data is in breach of the provisions of Regulation (EC) 2016/679. On the territory of the Republic of Bulgaria, where the Controller’s headquarter is located, the supervisory authority is the Personal Data Protection Commission. The aforementioned rights shall be exercised by written request in the form determined by the Administrator, which you can get at the seat of the Controller or electronically upon request to the Data Protection Officer of the Controller and filling the received in response electronic form by applying the necessary documents.

Methods used for automated making of individual solutions, including profiling

We do not use automated algorithms and / or profiling.

On “Cookie” usage

Regarding the data contained in the coockies used on the web site , you can read about in our Cookie Policy .