Treido OOD is the controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR) and Bulgarian law.

Registered office: Sofia, Bulgaria. Contact for privacy inquiries: dpo@treido.eu.

We process only the data needed to operate the service and fulfil our contract with you.

• Identification data — name, email, phone number, username.
• Transaction data — orders, payments, shipping addresses, dispute history.
• Content data — listings, photos, reviews, chat messages.
• Technical data — IP address, device type, logs, cookie identifiers, timestamps.
• Business account data — company ID, VAT, KYB verification documents.

• Art. 6(1)(b) — contractual necessity: accounts, orders, payments, delivery.
• Art. 6(1)(c) — legal obligation: accounting, AML, tax reporting.
• Art. 6(1)(f) — legitimate interest: fraud prevention, statistics, service improvement.
• Art. 6(1)(a) — consent: marketing cookies, analytics, newsletters.

We share data with processors who help us deliver the service. They all act on our instructions under Art. 28 GDPR.

• Stripe Payments Europe, Ltd. — payment processing (Ireland).
• Supabase Inc. — database hosting and authentication (EU region).
• Vercel Inc. — application hosting and CDN (EU + Standard Contractual Clauses).
• Sentry (Functional Software, Inc.) — error monitoring (SCCs under Art. 46 GDPR).
• Delivery carriers — only for shipped orders.

Where data leaves the EEA, transfers are protected by EU Standard Contractual Clauses approved by the European Commission.

• Right of access (Art. 15) — a copy of your data.
• Right to rectification (Art. 16) — correct inaccurate data.
• Right to erasure / "right to be forgotten" (Art. 17).
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20) — machine-readable export.
• Right to object (Art. 21) to processing based on legitimate interest.
• Right to withdraw consent at any time, without affecting prior processing.

Exercise your rights by emailing dpo@treido.eu. We respond within 30 days (Art. 12 GDPR).

We use AI moderation and automated fraud checks, but no decision with legal effect is made without human review (Art. 22 GDPR).

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (KZLD), 2 Tsvetan Lazarov Blvd., 1592 Sofia, kzld@cpdp.bg, www.cpdp.bg.

For privacy questions or to exercise your rights, email dpo@treido.eu. This policy was last updated on 15 April 2026.