Privacy Policy

Last updated: 29.09.2026

At Tempo.bg, we respect your privacy and process your personal data only where this is necessary for the operation of the online store, the fulfilment of your orders, the provision of selected services, compliance with legal obligations, or where another applicable legal basis exists.

Data Controller

WEBMATE LTD.
UIC: 202244546
Registered office and management address: 2 Nikolay Haytov St., Sofia, Bulgaria
Correspondence address: 1 Universitetski Park St., Office 112, Sofia, Bulgaria
Email: office@tempo.bg
Email for personal data enquiries: privacy@tempo.bg
Phone: +359 878 995 164

What data we process

Depending on how you use Tempo.bg, we may process:

first name, last name, phone number and email address;
delivery address or selected office/locker;
information about orders, products, prices and payment method;
billing information;
data related to your customer account;
payment and transaction information;
information provided when requesting a return, exchange or claim;
IBAN when refunding an order paid by cash on delivery;
correspondence with us;
IP address, browser and device information, technical logs and cookie-related information.

Payments

For online payments by bank card, the payment transaction is processed through a secure payment solution integrated via Paypercut and the relevant licensed payment service providers.

Tempo.bg receives the information necessary to identify and administer the payment, such as the transaction status and identifier. Full bank card details are not intended to be stored by Tempo.bg.

Purchase in instalments

If you choose to purchase in instalments through TBI Bank or another available lender, certain order data may be provided to the relevant financial institution.

The lender independently processes the data required for identification, creditworthiness assessment and conclusion of the credit agreement. Tempo.bg does not decide whether an applicant will be approved.

Returns and claims

When using the return and claim form, we may process your order number, product information, description of the issue, photos, contact details and other information necessary to review the case.

How we use your data

accepting and fulfilling orders;
organising and tracking deliveries;
processing payments and refunds;
handling returns, exchanges, claims and warranty cases;
issuing invoices;
managing customer accounts;
customer service;
fraud prevention and system security;
compliance with legal obligations;
marketing communications where you have provided the necessary consent;
analysis and improvement of the website where permitted.

Legal bases for processing

Depending on the specific purpose, we process personal data on one or more of the following legal bases:

performance of a contract – for example when processing an order and delivery;
legal obligation – for example obligations under accounting and tax legislation;
legitimate interest – for example website security and fraud prevention;
consent – for example for certain marketing, analytics or advertising activities.

Newsletter and marketing

Registering a customer account does not automatically subscribe you to marketing communications.

When you explicitly subscribe, we may send you information about new products, promotions, special offers, useful sports content and other marketing communications.

You can unsubscribe at any time. Unsubscribing from marketing does not stop necessary transactional communications regarding orders, payments, deliveries, returns or claims.

Who we may share your data with

Where necessary to provide a specific service, personal data may be shared with:

Speedy;
BOX NOW;
Paypercut and the relevant payment partners;
TBI Bank and other lenders selected by the customer;
hosting and technical service providers;
CRM and email marketing service providers;
analytics and advertising service providers where an applicable legal basis exists;
accountants, lawyers, auditors and other professional advisers;
competent public authorities or courts where required by law.

International data transfers

Where a service provider processes personal data outside the European Economic Area, we apply an appropriate transfer mechanism in accordance with Regulation (EU) 2016/679.

Data retention

We retain personal data only for as long as necessary for the relevant purpose, unless the law requires a longer retention period.

Order data and accounting documents are retained for the applicable statutory periods. Data relating to claims is retained for the period necessary to handle the case and protect legal claims. Marketing data is used until consent is withdrawn or the applicable legal basis no longer exists.

Your rights

Under the applicable legislation, you have the right:

to access your personal data;
to request correction of inaccurate or incomplete data;
to request deletion where the legal requirements are met;
to request restriction of processing;
to object to certain processing;
to data portability where this right applies;
to withdraw consent at any time;
to lodge a complaint with the competent supervisory authority.

To exercise your rights, you can contact us at privacy@tempo.bg.

Commission for Personal Data Protection

Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Information phone: +359 2 9153 519
Fax: +359 2 9153 525
Email: kzld@cpdp.bg
Website: www.cpdp.bg

Security

We apply appropriate technical and organisational measures to protect the information we process against unauthorised access, loss, unlawful alteration or disclosure.

Changes to this policy

We may update this policy from time to time where our services, service providers or applicable legal requirements change. The current version is always published on Tempo.bg.