Privacy Policy

Last updated: 28 October 2026

This policy explains how personal data is processed when you contact Diroco Agro or use this website. Diroco Agro is a pre-launch agricultural trading project; the EU contracting entity and its VAT number are provided in the commercial offer after verification.

1. Controller and contact

Controller: Diroco Agro project, EU operations in Plovdiv, Bulgaria. Contact: trade@diroco.com. Please use the subject line “Privacy request” for data-protection requests.

2. What data we collect

Business contact data you send us: name, role, company, business email, phone, country, product interest and message.
Technical data needed to serve the site and protect it from abuse: IP address, user agent, requested URL and time, processed by our hosting and CDN provider.

We do not ask for special-category data and we do not buy contact lists. Please do not send personal identity documents, bank details or KYC files through the website forms.

3. Why we process it and on what basis

To answer your B2B enquiry, prepare a quotation, send specifications or arrange samples — Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) GDPR (our legitimate interest in B2B communication).
To perform a contract, including delivery, inspection and payment — Art. 6(1)(b) GDPR.
To keep business records and defend legal claims — Art. 6(1)(c) and (f) GDPR.
To send a commercial follow-up where the law of your country allows it — Art. 6(1)(f) GDPR and the applicable ePrivacy rules; you can object at any time.

4. Recipients and transfers

We use service providers for email (Google Workspace), hosting and CDN (Cloudflare), and the website's CSS framework is loaded from Tailwind CDN. These providers process data on our instructions or as independent controllers under their own terms. Where a provider is outside the EEA/UK, transfers rely on an adequacy decision or Standard Contractual Clauses. We do not sell personal data.

5. Retention

Enquiry data is kept for up to 24 months from the last contact. Contract, invoice and customs records are kept for the period required by Bulgarian tax and customs law (generally up to 10 years). Data needed to prove or defend a claim is kept until the claim is time-barred.

6. Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interest. You may also withdraw consent where processing is based on consent. Write to trade@diroco.com. You have the right to complain to the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia, or to your local supervisory authority.

7. Cookies and local storage

This site does not use advertising or analytics cookies. The hosting/CDN may use strictly necessary security cookies. The language selector may store a preference in your browser. The site loads Tailwind CDN, which may receive your IP address when the page loads.

8. Changes

We may update this policy when the contracting entity, providers or legal requirements change. The date at the top shows the current version.