1. General information
This Privacy Policy explains how Зипер ООД / Zipper OOD collects, uses, stores and protects the personal data of visitors to this website, as well as individuals who contact us through a contact form, email, phone or another communication channel.
We respect your privacy and process your personal data in accordance with applicable data protection law, including Regulation (EU) 2016/679, known as the GDPR.
2. Data controller
The data controller is:
Зипер ООД / Zipper OOD
Company ID: 205756199
Address: Sofia, Zona B-18, build.4
Email: sales@menuza.bg
Phone: +359 876 880 799
3. What personal data we collect
Depending on how you use the website, we may collect the following personal data:
- first and last name;
- email address;
- phone number;
- name of a restaurant, bar, café or other business;
- information submitted through a contact form or inquiry;
- information related to communication between you and us;
- technical information such as IP address, browser, device, operating system, date and time of visit;
- information related to the use of cookies, where cookies are used.
We do not require or intentionally collect sensitive personal data through this website.
4. Purposes of processing
We use personal data for the following purposes:
- to respond to your inquiries;
- to prepare offers for online menu services;
- to communicate with potential and existing clients;
- to provide, maintain and improve our services;
- to administer and protect the website;
- to analyse website traffic and improve user experience, where analytics tools are used;
- to comply with legal obligations, where applicable.
5. Legal basis for processing
We process personal data on the following legal bases:
- taking steps prior to entering into a contract, when you send us a service inquiry;
- performance of a contract, when you are our client;
- legitimate interest in maintaining, securing and improving our website and services;
- consent, where optional cookies, marketing communication or analytics tools are used;
- legal obligation, where we are required to retain certain information for accounting, tax or other legal reasons.
6. Data submitted through contact forms
When you submit an inquiry through a contact form, we use the data you provide only to respond to your inquiry, prepare an offer or continue communication regarding our services.
Submitting a contact form does not create a contract and does not oblige you to use our services.
7. Online menus and client projects
When we create or maintain online menus for restaurants, bars, cafés and other businesses, we process information provided by the client only for the purpose of delivering the service.
Information such as product names, prices, categories, descriptions, product images and allergens generally does not constitute personal data. If a client provides us with personal data, we process it only to the extent necessary to provide and maintain the service.
8. Sharing of personal data
We do not sell personal data to third parties.
We may share personal data with:
- hosting providers;
- email service providers;
- technical support providers;
- accountants, lawyers or other professional advisers;
- analytics providers, where such tools are used;
- public authorities, where required by law.
When we use external service providers, we require them to apply appropriate measures for the protection of personal data.
9. Retention period
We retain personal data only for as long as necessary for the purposes for which it was collected.
Data from contact forms and inquiries is retained for up to 12 months, unless the communication leads to a contractual relationship.
Data related to clients, contracts, invoices and payments may be retained for the periods required by applicable accounting and tax legislation.
Technical logs and security data are retained for a limited period necessary for website protection and maintenance.
10. Your rights
Under applicable law, you have the right to:
- receive information about whether we process your personal data;
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data where legal grounds exist;
- request restriction of processing;
- object to processing;
- withdraw consent at any time;
- request data portability, where applicable;
- lodge a complaint with the Commission for Personal Data Protection.
To exercise your rights, you can contact us at: sales@menuza.bg
11. Complaint to a supervisory authority
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with:
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: cpdp.bg
12. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction.
However, no method of transmitting information over the internet is completely secure and we cannot guarantee absolute security.
13. Links to other websites
Our website may contain links to other websites, including websites of our clients or partners. We are not responsible for the content, privacy policies or practices of those external websites.
14. Changes to this policy
We may update this Privacy Policy when there are changes to our services, website or applicable law. The current version will always be published on this page.
Last updated: 04.07.2026