Privacy Policy

Privacy Policy

Data controller: KONIG TRADE EOOD, a company registered in Bulgaria under UIC 208316881, trading as AM Global Trading.

Registered office: 157 Georgi S. Rakovski Blvd., Floor 3, Apt. 8, Sredets, 1000 Sofia, Bulgaria
Privacy contact: support@globaltradingam.com
Website: https://globaltradingam.com

This notice explains how we process personal data when you use our website, request a quotation, place an order, communicate with us or use our customer-support services. It also covers individuals acting as contact persons for business customers.

1. Personal data and its sources

Depending on your interaction with us, we process:

• Contact and identification information: name, email address, telephone number, language and country.
• Delivery and billing information: delivery and billing addresses, recipient details and information required for invoicing.
• Business information: company name, business contact details and VAT number where relevant.
• Quotation and order information: products, quantities, quotation requests, offers, correspondence and order status.
• Payment information: payment status, transaction references and information needed to reconcile payments and refunds.
• Delivery information: shipment status, tracking references and delivery updates.
• After-sales information: cancellations, withdrawal statements, returns, complaints, supporting documents and related correspondence.
• Security information: technical and access logs used to operate and protect our services.
• Marketing preferences: subscription choices, consent records and unsubscribe or objection records.

We obtain information directly from you when you complete forms, place an order or contact us. We may also receive information from a person placing an order on your behalf, your organisation, payment providers, carriers and fulfilment partners in connection with the relevant transaction.

Card details are entered through a secure Stripe-powered payment form or payment page. We do not receive complete card details.

Please provide only information relevant to your request. Avoid including unnecessary sensitive information in messages or attachments.

2. Why we process data and our legal bases

Orders and pre-contractual requests

We process information necessary to respond to your quotation requests, prepare and manage your order, arrange payment and delivery, and provide contractual customer support.

Where you are personally a party to the transaction, the legal basis is performance of a contract or taking steps at your request before entering into a contract, under Article 6(1)(b) GDPR.

Business contact persons

When you act on behalf of a business customer, we process your business contact details and correspondence to communicate with that organisation and manage the commercial relationship.

The legal basis is our legitimate interest in conducting and administering business relationships, under Article 6(1)(f) GDPR, subject to your rights and interests.

Legal obligations

We process and retain information necessary to meet applicable accounting, tax, consumer-protection and other legal obligations, including handling statutory customer rights and maintaining required records.

The legal basis is compliance with a legal obligation, under Article 6(1)(c) GDPR.

Security, administration and legal claims

We process information where necessary to protect our services, prevent fraud and misuse, investigate problems, manage correspondence and establish, exercise or defend legal claims.

Where no more specific legal basis applies, we rely on our legitimate interests under Article 6(1)(f) GDPR. We assess the necessity of the processing and balance those interests against your rights and freedoms.

Marketing

We send marketing emails only where you have actively subscribed.

The legal basis is consent under Article 6(1)(a) GDPR. Marketing consent is separate from an order or quotation request and is not a condition of purchasing from us.

We do not automatically subscribe customers or quotation applicants to marketing.

3. Information needed to use our services

Certain information is necessary to prepare a requested quotation, process an order, arrange delivery or meet invoicing requirements. If the necessary information is not provided, we may be unable to complete the relevant request or transaction.

We request contact information according to the needs of the transaction, such as communicating about delivery or resolving an order issue.

Optional information and marketing choices are separate from information required for the transaction. Refusing or withdrawing marketing consent does not prevent you from placing an order.

4. Recipients and service providers

We disclose personal data only where necessary for the purposes described in this notice.

Recipients include:

• Payment providers: Stripe, for payments, payment security, refunds and related transaction services.
• Hosting and database providers: Vercel and Supabase, for operating and maintaining our website and systems.
• Email providers: Resend and our mailbox hosting provider, for sending and receiving communications.
• Accountants and professional advisers: where needed for accounting, compliance, advice or legal claims.
• Carriers, suppliers and fulfilment partners: where needed to prepare, dispatch, deliver or handle the return of an order.
• Public authorities and other authorised recipients: where disclosure is required by law or necessary for lawful proceedings.

Delivery and fulfilment partners receive only the information needed for their role. Depending on the shipment, this may include the recipient’s name, delivery address, relevant contact details, products and quantities.

Depending on the service and purpose, a recipient may act as a processor on our instructions or as an independent controller with its own legal responsibilities. Where a provider acts as our processor, the processing is governed by the required data-processing arrangements.

We do not sell personal data to advertisers.

5. Transfers outside the European Economic Area

Some providers may process personal data outside the European Economic Area, including through their service infrastructure or support operations.

Where such a transfer takes place, it must be covered by a mechanism permitted under Chapter V GDPR. Depending on the recipient and transfer, this may be an applicable European Commission adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses, together with supplementary measures where required.

Where an adequacy framework requires the recipient to participate or be certified, it can be relied on only where that participation and its scope cover the relevant transfer.

You may contact support@globaltradingam.com to request details of transfers relevant to your data and information about, or a copy of, the applicable safeguards. Copies may be redacted where necessary to protect confidential information or other people’s rights.

6. Retention

We retain personal data only for as long as necessary for the relevant purpose and applicable legal obligations.

Retention is determined by the category of information:

• Orders, invoices and accounting records: retained for the periods required by applicable accounting and tax law and, where necessary, to address contractual rights or legal claims.
• Quotation requests that do not result in an order: retained while the request and reasonable related follow-up remain active, and thereafter only where a specific legal or evidential need justifies retention.
• Customer support, returns and complaints: retained while the matter is being handled and for any further period necessary to meet legal obligations or establish, exercise or defend claims.
• Security and access logs: retained for the period necessary to detect and investigate incidents, protect the service and meet any applicable legal requirements. Records relevant to an incident may need to be kept longer than routine logs.
• Marketing records: used for marketing while your consent remains valid. Following withdrawal or objection, we may retain a minimal suppression record to prevent further marketing and necessary evidence of your consent and its withdrawal.

A continuing customer relationship does not justify keeping every item of personal data indefinitely.

When information is no longer needed, we delete it or anonymise it. Where retention remains legally required or necessary for a specific claim, we limit further use to that purpose and other legally permitted purposes.

7. Your rights

Subject to the conditions and exceptions in the GDPR, you may request:

• Access to your personal data and a copy of it.
• Correction of inaccurate or incomplete data.
• Erasure of data.
• Restriction of processing.
• Portability of eligible data processed by automated means on the basis of consent or a contract.
• An objection to processing based on legitimate interests, on grounds relating to your particular situation.

You may object to direct marketing at any time, free of charge. We will then stop processing your data for that purpose.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, email support@globaltradingam.com. You do not need a customer account.

If we have reasonable doubts about your identity, we may request additional information necessary to verify it. We will not request more information than is appropriate for that purpose.

We respond without undue delay and normally within one month of receiving your request. Where legally permitted because of the complexity or number of requests, this may be extended by up to two further months. We will inform you within the initial month of any extension and the reasons for it.

Requests are normally handled free of charge. Any refusal or charge will be limited to circumstances permitted by law and explained to you.

Some rights are subject to exceptions. For example, we may need to retain information required by law or necessary for legal claims. Where we cannot fulfil a request, we will explain the reason and the available complaint options.

8. Marketing and service emails

Marketing subscriptions use a separate, optional checkbox that is not pre-selected, for example at checkout or on a quotation form. We record your consent.

Every marketing email contains an unsubscribe link. Unsubscribing does not require manual approval. You can also withdraw consent or object by contacting support@globaltradingam.com.

Unsubscribing from marketing does not prevent necessary service communications, such as order updates, invoices, delivery notices, security messages or replies to requests you have made.

Our marketing emails do not use open or click tracking.

9. Website tracking, cookies and order review

We do not use Google Analytics, Meta Pixel or advertising or behavioural tracking on our website.

This does not mean that no technical data is processed. Security logs and technologies necessary to operate the website, authenticate access or complete transactions may still be used. Our Cookie Policy explains the relevant technologies and choices.

Our order-acceptance process includes an administrative review before we issue Order Confirmed. Automated operational steps, such as sending notifications or updating payment status, are distinct from that acceptance review.

If we introduce processing based solely on automated decisions that produce legal or similarly significant effects, we will provide the information and safeguards required by applicable law before that processing takes place.

If our tracking practices change, we will update the relevant notices and obtain consent before using technologies for which consent is required.

10. Complaints

You may contact us at support@globaltradingam.com about any privacy concern.

You also have the right to lodge a complaint with a competent supervisory authority, particularly in the country where you habitually live, work or where you consider an infringement has occurred. You do not have to complain to us first.

In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).

Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria.
Official contact information: CPDP contacts.
Complaint procedures: Lodging complaints and alerts.

Please follow the authority’s published submission requirements when lodging a complaint.

11. Changes to this notice

We may update this notice to reflect changes in our services, processing activities or legal obligations.

We will publish the updated notice and provide additional notification where required by law. If we intend to use personal data for a new purpose, we will provide the required information before that further processing and obtain consent where necessary.

Publishing an updated notice does not itself constitute your consent to new processing.