Privacy Policy
“Chem Pharm Contract” Ltd. strictly complies with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Personal Data Protection Act (PDPA) and has appointed data protection officers within the company.
All our employees have signed declarations committing to comply with regulatory requirements and internal rules for the protection, security, and confidentiality of personal data.
First Edition – 03.2026
Table of Contents
Controller Details
“Chem Pharm Contract” Ltd., UIC: 208749155, is a company engaged in import, export, wholesale and retail trade, including e-commerce, of charging stations for electric vehicles and related equipment in Bulgaria and the EU.
Contact Details:
- Registered Office: 1000, Sofia, Gen. E.I. Totleben Blvd, fl.2, Bulgaria
- Email address: info@yuexi.eu
- Phone: +359(89) 249 5180
Data Protection Officer:
You can contact our Data Protection Officer by email at: info@yuexi.eu
Personal Data we Collect and Process
We may collect and process the following categories of personal data:
Website inquiry and business communication data
When you contact us through the website, by email, telephone, or other communication channels, we may process:
- Full name
- Company name
- Job title or position
- Email address
- Telephone number
- Country and business address
- Information contained in your inquiry or correspondence
- Technical data such as IP address, browser type, device information, and cookies (in accordance with our Cookie Policy)
This data is processed for the purposes of:
- responding to inquiries;
- preparing quotations and commercial offers;
- conducting pre-contractual and contractual communication;
- maintaining business relationships;
- complying with legal obligations.
Business partners, suppliers, and customer representatives
In connection with our B2B activities, we may process personal data of representatives, employees, or contact persons of our customers, suppliers, logistics providers, and other business partners, including:
- Names
- Company affiliation
- Business email address
- Business telephone number
- Position/job title
- Business correspondence and contractual communication
Job applicants and employees
Where applicable, we may process personal data related to recruitment and employment, including:
- Identification data (names, date of birth, address, contact details);
- Education, qualifications, professional experience, and skills;
- Employment-related information required under applicable law.
In limited cases and only where legally required, we may process special categories of personal data, such as health-related information connected with employment, occupational health, or legal compliance obligations.
Source of Personal Data
Personal data is collected directly from the data subject through:
- website inquiry forms;
- email correspondence;
- telephone communication;
- business meetings and negotiations;
- contractual and pre-contractual communication;
- publicly available business information provided by companies or their representatives.
Purposes of Processing
We process personal data solely for legitimate business purposes related to our activities as a supplier and distributor of empty capsules and related products, including:
Business inquiries and communication
- responding to inquiries submitted through the website or by email;
- providing product information, quotations, technical documentation, and commercial offers;
- maintaining communication with customers, suppliers, and business partners;
- organizing meetings, consultations, and follow-up correspondence.
Pre-contractual and contractual relations
- preparing and administering contracts, orders, and related business documentation;
- conducting negotiations regarding potential or existing business relationships;
- maintaining records of commercial communication and transactions.
Logistics and delivery coordination
Where applicable, personal data may be processed for:
- arranging transport and logistics;
- preparing shipping and accompanying documentation;
- coordinating deliveries and related business operations.
Legal and regulatory compliance
- fulfilling obligations under applicable Bulgarian and European legislation;
- accounting, tax, and financial reporting;
- responding to requests from competent authorities, institutions, or regulatory bodies;
- protecting the legitimate interests of the Company and ensuring legal compliance.
Recruitment and employment
For employees, workers, and job applicants, personal data may be processed for:
- human resources administration;
- payroll and employment management;
- compliance with employment, tax, social security, and occupational health obligations under applicable law.
Legal Basis for Processing Personal Data
Chem Pharm Contract Ltd. processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.
Depending on the nature of the relationship with you, personal data may be processed on one or more of the following legal grounds:
Performance of a contract or pre-contractual steps
Processing may be necessary for:
- responding to business inquiries;
- preparing quotations, offers, and commercial documentation;
- negotiating and concluding contracts;
- administering business relationships with customers, suppliers, and partners;
- organizing deliveries, logistics, and related business operations.
Compliance with legal obligations
Processing may be required in order to comply with applicable legal and regulatory obligations, including obligations under:
- accounting and tax legislation;
- commercial and civil legislation;
- employment and social security legislation;
- health and safety requirements;
- anti-fraud and compliance obligations;
- requests from competent public authorities and institutions.
Legitimate interests
We may process personal data where necessary for the legitimate business interests of Chem Pharm Contract Ltd., including:
- maintaining business communication and correspondence;
- ensuring network and information security;
- protecting company property, systems, and confidential information;
- preventing fraud, misuse, or unlawful activities;
- establishing, exercising, or defending legal claims;
- improving our services, website functionality, and business operations.
Consent
Where required by applicable law, personal data may be processed based on your freely given, specific, informed, and unambiguous consent, including for:
- the use of certain website cookies and technologies;
- responding to specific requests submitted by you;
- receiving marketing or informational communications, where applicable.
You may withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.
Access to Personal Data
Personal data may be disclosed, where necessary and in compliance with applicable law, to the following categories of recipients:
Service providers and business partners
We may share personal data with trusted third-party service providers supporting our business operations, including:
- logistics and transport companies;
- courier and shipping providers;
- IT service providers and website hosting providers;
- accounting, legal, tax, and compliance consultants;
- payment, banking, and financial institutions where required for business transactions.
Public authorities and institutions
Personal data may be disclosed to competent public authorities, regulators, courts, or other institutions where required by applicable law, legal proceedings, or official requests.
Data processors
Certain third parties may process personal data on behalf of Chem Pharm Contract Ltd. as data processors under written agreements ensuring compliance with GDPR and appropriate technical and organizational security measures.
All third parties receiving personal data are required to:
- process the data only for specified and legitimate purposes;
- maintain appropriate confidentiality and security measures;
- comply with applicable data protection legislation;
- delete or return the personal data once the processing services are completed, unless retention is required by law.
We do not sell personal data to third parties.
Consent
Where the processing of personal data is based on consent, such consent will be freely given, specific, informed, and unambiguous in accordance with applicable data protection legislation.
Chem Pharm Contract Ltd. may request consent in specific situations, including:
- the use of certain cookies and tracking technologies;
- receiving marketing or informational communications;
- responding to particular requests submitted through the website;
- other processing activities where consent is required by law.
Where special categories of personal data are exceptionally processed, explicit consent will be obtained where required by applicable legislation, unless another lawful basis applies.
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Requests related to withdrawal of consent or exercise of data protection rights may be submitted through the contact details provided in this Privacy Policy.
Data Retention Period
Chem Pharm Contract Ltd. retains personal data only for as long as necessary for the purposes for which it was collected and processed, including for the fulfillment of contractual, legal, accounting, tax, and regulatory obligations.
The retention period may vary depending on:
- the nature of the business relationship;
- applicable contractual obligations;
- statutory limitation periods;
- accounting and tax retention requirements;
- legitimate business needs;
- ongoing disputes, claims, or legal proceedings.
Personal data related to business inquiries and correspondence may be retained for a reasonable period necessary to maintain communication records and business documentation.
Where processing is based on consent, personal data will be retained until the consent is withdrawn, unless another legal basis for continued processing exists.
After the applicable retention period expires, personal data will be securely deleted, destroyed, or anonymized in accordance with applicable legal requirements and the internal data retention and protection procedures of the Company.
Your Rights as a Data Subject
Under applicable data protection legislation, including Regulation (EU) 2016/679 (GDPR), you have the following rights regarding your personal data processed by Chem Pharm Contract Ltd.:
Right of access
You have the right to request confirmation as to whether we process your personal data and to obtain access to such data, including a copy of the information we hold about you.
Right to rectification
You have the right to request correction of inaccurate, incomplete, or outdated personal data without undue delay.
Right to erasure (“right to be forgotten”)
You may request deletion of your personal data where:
- the data is no longer necessary for the purposes for which it was collected;
- you withdraw consent where processing is based on consent;
- you object to the processing and there are no overriding legitimate grounds for continued processing;
- the processing is unlawful;
- deletion is required to comply with a legal obligation.
This right is subject to applicable legal and regulatory retention obligations.
Right to restriction of processing
You may request restriction of the processing of your personal data in certain circumstances provided by law.
Right to data portability
Where applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request transfer of such data to another controller where technically feasible.
Right to object
You have the right to object to the processing of your personal data where processing is based on legitimate interests, including objections related to direct marketing communications.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Rights related to automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, where such processing produces legal or similarly significant effects concerning you.
At present, Chem Pharm Contract Ltd. does not use fully automated decision-making or profiling processes for business inquiries submitted through the website.
Right to lodge a complaint
You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.
For Bulgaria, the competent supervisory authority is:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Website: Commission for Personal Data Protection
Refusal of Erasure
In certain circumstances, Chem Pharm Contract Ltd. may refuse a request for deletion of personal data where the processing is necessary:
- for compliance with a legal obligation under applicable European Union or Bulgarian legislation;
- for the establishment, exercise, or defense of legal claims;
- for accounting, tax, regulatory, or record-keeping purposes required by law;
- for reasons of public interest where applicable;
- for the exercise of the right to freedom of expression and information.
Where a request for erasure cannot be fulfilled due to legal or regulatory obligations, the personal data will be retained only for the period and purposes required by applicable law.
Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully or in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.
For the Republic of Bulgaria, the competent supervisory authority is:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Website: Commission for Personal Data Protection
Before submitting a complaint to the supervisory authority, we encourage you to contact Chem Pharm Contract Ltd. directly so that we may attempt to resolve the matter promptly and in good faith.
Data Security
Chem Pharm Contract Ltd. implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, unlawful processing, accidental loss, destruction, or damage.
Access to personal data is limited only to authorized persons and service providers who require such access for legitimate business and legal purposes and who are subject to confidentiality obligations.
We continuously review and update our security practices in accordance with applicable legal, technical, and organizational requirements.
Additional Information
Where required by applicable law, we may update this Privacy Policy from time to time in order to reflect changes in legislation, business operations, website functionality, or data processing practices.
The latest version of this Privacy Policy will always be available on our website.
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the contact details provided on the website.
Access to Personal Data
Any data subject may request information regarding the personal data processed by Chem Pharm Contract Ltd., including access to their personal data, correction, restriction, deletion, or other rights provided under applicable data protection legislation.
Requests may be submitted using the contact details provided on the website.
In order to protect personal data and prevent unauthorized disclosure, we may request additional information or proof of identity before processing a request related to personal data rights.
Requests will be reviewed and processed within the time limits established under applicable GDPR and data protection legislation.