Privacy Policy
Privacy Policy
of "FLORA FOOD" EOOD
WE CARE ABOUT THE PROTECTION OF YOUR PERSONAL DATA!
In this Privacy Policy, we have summarized the key points regarding the protection of your personal data and the ways we process it. If you require more information about specific processes, you can contact us using the details provided below.
Who are we?
"FLORA FOOD" EOOD carries out deliveries of food and beverages from the menu of the restaurant chain under the brand LA FLOR BAR & GRILL and other commercial brands (referred to for brevity in this privacy policy as "the Restaurants").
As an established home food delivery provider and representative of the largest food community in Bulgaria, LA FLOR BAR & GRILL values and takes care to protect the privacy of everyone in our community. This means we will protect the personal information of all visitors who access our websites or services through any mobile application, platform, or device.
"FLORA FOOD" EOOD (hereinafter referred to as LA FLOR BAR & GRILL) is a commercial company with UIC: 205645619, with its registered office and management address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, and correspondence address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, tel.: (+359) 893888388, e-mail: laflorburgas@abv.bg, which provides the services subject to these General Terms and Conditions through the site it administers: http://laflor.bg.
"FLORA FOOD" EOOD is a commercial company registered in the Commercial Register at the Registry Agency with UIC 205645619, with its registered office and management address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, tel.: (+359) 893888388 and e-mail: laflorburgas@abv.bg, and is a personal data controller in accordance with the provisions of the Personal Data Protection Act.
How to contact us?
Correspondence address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, tel.: (+359) 893888388, e-mail: laflorburgas@abv.bg
How to contact our Data Protection Officer?
Address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7
E-mail: laflorburgas@abv.bg
Data protection and information security are part of our corporate culture and policy.
What information can I find in this Privacy Policy?
This Privacy Policy will provide you with comprehensive information in clear and accessible language regarding the actions performed with the personal data you provide to "FLORA FOOD" EOOD (hereinafter referred to as LA FLOR BAR & GRILL), including:
What personal data do we collect about you? Are you obliged to provide us with your personal data? Can you use our services without providing your personal data?
What is the purpose of collecting it?
For what period do we store the provided personal data?
With whom do we share your personal data?
Do we use automated solutions and artificial intelligence?
How do we notify you of changes to our Privacy Policy?
What types of "cookies" do we use to make your stay on our website better?
What are your rights regarding the provided personal data?
With this Privacy Policy, "FLORA FOOD" EOOD declares that it applies all technical and organizational measures for the protection of personal data of individuals as prescribed by law or other normative acts at the national and European level.
What is personal data?
Personal data is any information through which an individual can be identified – directly or indirectly. This includes, for example:
Name, PIN (EGN), PNF (LNCH), or another unique identifier;
Contact data – email, phone number, address;
Online identifiers – username, IP address, etc.
Some data may not identify you on its own (e.g., a phone number), but in combination with others – such as a name or username – could allow for your identity to be established. Direct identification occurs when you provide a unique identifier such as a PIN (EGN) or PNF (LNCH).
What personal data does LA FLOR BAR & GRILL collect about you and for what purposes (why)?
To provide you with effective access to our services, LA FLOR BAR & GRILL collects information and personal data about you. Below are the types of personal data we collect and the reasons (purposes) for processing them:
Information you provide voluntarily upon registration:
The information you fill in during registration when creating a profile on the LA FLOR BAR & GRILL website – https://laflor.bg/ – is as follows: first and last name, mobile phone, email address, and a password freely chosen by you. LA FLOR BAR & GRILL collects this information so that we can:
Create your profile so you can place orders in accordance with our Terms;
Identify you when you log into your profile;
Contact you for the execution of the services we offer; and
Notify you of changes or updates to our Terms and Privacy Policy.
Information necessary for accepting an order:
The minimum necessary information we must collect for you to place an order via the call center includes first and last name, mobile phone, city, delivery address, and the items you are ordering. Considering that all conversations are recorded, voice data of the conversation participants, including you, is contained and processed in the audio recordings.
For orders made via the Website laflor.bg or through the La Flor Delivery mobile app, the data collected includes first and last name, mobile phone, email address, city, delivery address, and the items you are ordering. In this case, an audio recording is not made during the order itself, but it is possible to process voice data again if the delivery person needs to contact you to find the address or clarify order details (the conversation will again be recorded).
Transaction information when you place an order from a restaurant, for the following purposes:
To process your order and prepare a bill/charge you (note: LA FLOR BAR & GRILL never stores credit/debit card information in our systems);
To communicate your order to the restaurant;
To send you updates on the status of your order;
To respond to your requests and questions about orders and resolve any issues;
To perform analysis and research to improve our Services; and
To protect you and the Services we provide by seeking to detect and prevent fraud or other actions in violation of our Terms or rules relating to LA FLOR BAR & GRILL Services.
This information includes date and time of payment, card issuer, corresponding bank, transaction reference number, amount paid, payer's first and last name, and merchant name.
Order history information and feedback:
We use information about your order history to:
Send you personalized marketing and advertising messages related to our delivery services, including food, beverages, and restaurant services offered at the restaurants that may be of interest to you.
We use information from feedback provided by you to:
Respond to your questions or inquiries;
Publish your reviews of our services, only with your consent for such publication;
Perform analysis and research to improve and develop our services.
You provide this information after logging into your user profile on the laflor.bg Website or in the La Flor Delivery Mobile App; in your profile, you can change preferences and manage consents provided for marketing and other purposes.
Information about your activities and actions in using our services, so that we can:
Ensure a better experience when using our services;
Give you access to history and details of past orders;
Provide other services at your request.
This information is limited to data about your personal preferences and consumer behavior on the LA FLOR BAR & GRILL Website and our mobile application.
Information from "cookies" and similar technologies, so that we can:
Measure and analyze the use and effectiveness of our services;
Personalize and optimize the targeting of advertisements for our services on other websites and platforms; and
Provide services related to your location if you choose to share your geographic location.
We will collect this information according to your choice of which cookies should be active.
Information we receive from other sources - third parties:
Analytical reports from the analysis and research of our marketing activities to measure the effectiveness of marketing campaigns for our services; and
To better understand your preferences so we can personalize our marketing campaigns and Services according to your wishes.
Types and categories of personal data we process
From the category of commonly used personal data, we process the following types:
First name, last name, phone, email, date of birth, settlement, address, when filling out various forms on our website for initial registration, subscribing to our newsletter/marketing messages, and filling out the inquiry form;
When paying by bank card – transaction status data (successful/unsuccessful);
Information about your orders;
Technical data automatically sent to us when you use our services via our website or mobile applications – IP address, information about the device you use;
Technical data automatically sent to us when you use our mobile device applications – mobile device information, IMSI number of the device, GPS coordinates;
Cookie data – to identify your browser or device.
Sensitive personal information
We do not proactively collect sensitive personal information, such as data related to your health. However, our platform provides free-text fields where you can share food-related preferences – for example, allergies or dietary restrictions. Please note that information you choose to enter there may reveal details defined by current legislation as special categories of personal data, so-called "sensitive" data.
If such data becomes available to us, we will not use it for marketing purposes or personalized advertising.
Furthermore, some functionalities of our platform may request access to your precise location (geolocation) through your device or browser settings. Such access is carried out only with explicit permission (i.e., consent) from you.
The processing of sensitive personal data that you voluntarily provide is carried out based on your consent, which you can withdraw at any time by contacting us using the details provided at the top of this policy.
What does processing of personal data mean?
The processing of personal data includes collection, storage, destruction, transmission, correction, updating, deletion, and all other actions performed with your personal data.
Why (on what grounds) does LA FLOR BAR & GRILL process personal data for you?
The legal basis for collecting and using your personal data as described above will depend on the specific context in which we collect it.
The main reason and purpose for collecting and using your personal data is to perform our contract with you (i.e., to ensure you receive the order at the address you specified in the volume you specified).
We will also use your personal data when it is in the pursuit of our legitimate business interests, but only when your interests regarding the protection of your personal data or your other rights and freedoms do not override those interests.
In some cases, we may have a legal obligation – a statutory basis to collect personal data from you (for example, to comply with legislation regulating the restaurant industry) or we may need to process it or share it with others to "protect your vital interests" or those of another person.
If we ask you to provide personal data to comply with a legal requirement or to enter into a contract with you, we will inform you of the circumstances at the relevant time and advise you whether the provision of personal data is mandatory or not (and also explain the possible consequences of refusing to provide personal data).
Also, if we collect and use your personal data by relying on our legitimate interests (or those of a third party), we will inform you at the relevant time what those legitimate interests are.
If you have questions or need additional information regarding the legal basis on which we collect and use your personal data, please contact us using the contact details provided in "How to contact us?" above.
LA FLOR BAR & GRILL also collects personal data after receiving explicit, clear, free, and unambiguous consent from you for processing purposes.
For example, in the case of expressed consent from you, LA FLOR BAR & GRILL may use data provided by you for marketing purposes so that you receive the latest promotions, as well as any other marketing and advertising messages, news, information, upcoming campaigns, promo codes, promotions, and special offers for our delivery services, including food, beverages, and restaurant services offered in the Restaurants that may be of interest to you. We explicitly clarify that your consent to this privacy policy will not be considered consent for marketing purposes. For your data to be used for marketing purposes, it is necessary to provide separate explicit consent by checking a checkbox specifically designed for this purpose on our website, application, or in another appropriate way.
Consent for processing your personal data is provided upon registration on our website or when filling out various forms on our website (for inquiries and for subscribing to an advertising/information newsletter).
The consent you provide can be withdrawn at any time by sending an email to laflorburgas@abv.bg or a written application to the correspondence address of LA FLOR BAR & GRILL in Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7.
Withdrawal of consent may apply to one or more purposes for which they are processed. For example, if you withdraw your consent for receiving marketing messages, your contact data will continue to be used to maintain your profile on the website and carry out your orders. In this case, contact data will be processed on a contractual basis.
If you want us to delete data without which it is impossible to maintain your profile on the website, it will be deleted, and for subsequent use of our services, it will be necessary to provide your data again.
How do we receive your personal data? In what way do we process your personal data?
To provide products and services, LA FLOR BAR & GRILL processes (collects) the personal data provided by you regarding your physical and economic identity in the following ways:
By you filling out forms provided on the LA FLOR BAR & GRILL website. The forms are filled in on our website in the relevant places left with free positions for your personal data;
By visiting the Website laflor.bg to use the services of our website;
When updating data at your request and filling out an update form on paper or in an electronic environment;
By using our mobile applications – La Flor Delivery;
By using online identifiers to collect information about IP addresses, data from cookies, operating system, and browser type;
By subscribing to an email newsletter.
Email / Newsletter
When you subscribe to our email newsletter, you will be asked to enter your email address. To administer and manage the distribution of the newsletter to users who have given consent, we maintain a register of your IP address, the emails you open, and the links you click in those emails, so we can more accurately recommend content, occasional third-party offers, and products you may find valuable. Any personal information you provide to us, including email address, will not be provided or sold to third parties. However, if you participate in a raffle, your email address may be provided to the relevant provider for registration/activation and ongoing support. Under no circumstances will we ask for credit card data for marketing purposes and receiving an email newsletter; if you receive such a request, it is likely a fraud attempt by third parties, so we advise you not to open or comply with it.
Mobile Applications
LA FLOR DELIVERY
No personal data provided to us in LA FLOR DELIVERY will be shared with third parties.
LA FLOR DELIVERY will use your public IP address to identify your location and present you with the locations of the nearest restaurants or the current menu for the area (and settlement) where you are located, as well as to provide information regarding the availability or lack of delivery for that area. Your IP address or location will not be used for any other purposes.
Artificial Intelligence (AI)
To stay up to date and provide our services in line with modern trends, we may use technologies based on artificial intelligence (AI).
Currently, we do not use such technologies, but we plan to add intelligent solutions soon – ready-made or developed specifically for us – that will make your experience on our Website and Application even more convenient and pleasant.
The use of these AI tools/functionalities will, in any case, be carried out in accordance with applicable personal data protection legislation, including the General Data Protection Regulation (GDPR). We apply appropriate technical and organizational measures to protect your information and ensure transparency in processing.
You have the right to object to your profiling if our AI tools perform such or to exercise other rights related to the protection of your personal data at any time, according to our Privacy Policy and applicable law, as stated below.
Audio Recording
When placing an order by phone, we collect data about you – names, contact phone, and delivery address, voice (voice alone may not be sufficient to identify you).
All conversations are recorded and stored by LA FLOR BAR & GRILL for a period of up to 6 months from the call for the purpose of executing your order and ensuring the accurate and timely provision of our services.
Telephone conversations with LA FLOR BAR & GRILL delivery drivers, for example, to clarify an address or notify that they have arrived at the specified location, are also recorded and stored as per the above procedure.
If you do not want to be recorded, please terminate the calls or do not accept them, in which case, however, your order may not be fulfilled.
Your phone numbers are not visible to our delivery drivers, as we have taken modern and up-to-date measures to protect the information, identity, and privacy of our customers, in accordance with the principle of privacy by default.
How long do we store and process your data before destroying it?
LA FLOR BAR & GRILL will keep your personal information for no longer than necessary to fulfill the purposes described in this Privacy Policy. Depending on the basis on which we process your personal data, the storage period differs.
Your personal data is stored by us for a period of 5 years from the termination of our contractual basis if we process the personal data for the performance of contractual obligations to you, or until the termination of the basis if the only one is for the protection of our legitimate interests, and/or for the periods specified in legislation if the basis for processing is for the fulfillment of legal obligations. After the expiration of this period and if no legal basis exists for the continued storage of your personal data, the information about you is destroyed. Your personal information is deleted from our system.
When providing your data for the purpose of creating your user profile on a website, mobile application, etc., we will consider that you have an interest in us storing this data until you undertake its deletion/deactivation.
We may also retain certain elements of your personal information for a period after you delete or deactivate your user profile for our legitimate operations, such as record-keeping and compliance with our legal obligations. Whenever we retain your information, we will do so in accordance with applicable legislation.
With your consent for your data to be used for receiving marketing/advertising messages, the period for processing them for this purpose is until you withdraw your consent. To ensure your consent remains current and voluntarily given, every 5 years we will remind you and require active confirmation if you wish to renew it.
To whom can we transfer the provided personal data?
LA FLOR BAR & GRILL DOES NOT provide your personal data for purposes other than the performance of contractual rights and obligations of third parties without your explicit consent and does not sell its databases.
LA FLOR BAR & GRILL uses software solutions and contractors in the performance of its services who support parts of the service, and we may share part of your personal data with them for the purpose of performing our contractual rights and obligations; for example, platforms for mapping and optimizing delivery routes to an address are used, where only the address you specified is entered.
LA FLOR BAR & GRILL may share your personal information with the following recipients (in each individual case, we will ensure we have appropriate protective and contractual safeguards to protect it):
Partner companies managing the Restaurants to which your orders have been submitted for execution;
LA FLOR BAR & GRILL companies in our group;
Third parties who support our services (e.g., marketing or promotion partners in the food, beverage, and entertainment sectors based on your preferences, to the extent there is a legal basis and your rights are not overridingly affected compared to those of LA FLOR BAR & GRILL, courier services, web hosting companies);
Any law enforcement or regulatory body, government agency, court, or other third party where disclosure is necessary under applicable laws or regulations;
New owners or reorganized entities in the event of restructuring, sale, purchase, or joint venture affecting our business.
Any other person, provided you give your consent. Under no circumstances will we sell, distribute, or otherwise share your personal information unless we have your explicit permission.
Are there other cases in which we can share your personal data?
Your personal data is provided to third parties also in the following cases:
At the request of the individual who provided the data, the subject of personal data protection (i.e., you, if you send us a request);
At the request of competent authorities according to the current legislation of the Republic of Bulgaria and the European Union.
In all the above cases, the persons to whom we provide your personal data have declared that they provide an adequate level of protection for your personal data, including foreign companies positioned within the EU and EEA. Regarding companies positioned outside the EU and EEA, for each specific case, the relevant company guarantees that it provides an adequate level of protection for personal data, complying with the requirements of European legislation.
Use of "cookies"
General Provisions
"Cookies" are small text files that are saved on your computer when visiting our website. To learn more, see our Cookie Policy.
What are your rights regarding the provided personal data?
If you are a registered user of LA FLOR BAR & GRILL, you have access to your profile at any time to review and update your personal information, i.e., your personal data. You can also contact us to request that we update or delete your personal data, as well as restrict its processing.
Furthermore, you have the right to unsubscribe from the marketing messages we send you by using the unsubscribe function from any marketing communication you receive from us, or by sending an email to laflorburgas@abv.bg.
In addition, according to Bulgarian and European legislation, including the GDPR - Regulation (EU) 2016/679 of the EU and of the Council (General Data Protection Regulation) regarding personal data protection, you can exercise the following rights:
The right of access to the personal data that LA FLOR BAR & GRILL processes for you and to receive a copy of it;
The right to request correction from LA FLOR BAR & GRILL in case you find inaccuracies or a need to update your personal data by sending an email to laflorburgas@abv.bg;
The right to request blocking of your personal data or restriction of the processing of personal data in cases specified by law and the Regulation;
The right to request erasure, i.e., deletion of your personal data from LA FLOR BAR & GRILL, if the conditions for this are present;
The right to object to the processing of your personal data. You can also object to the processing of your personal data specifically for direct marketing purposes by using the "unsubscribe" link included in every email containing promotional information about our products sent to you;
The right to withdraw your consent at any time for your personal data to be processed for marketing or other purposes for which you have given consent. You can withdraw your consent by sending an email to: laflorburgas@abv.bg;
The right to object and not be subject to a decision based solely on automated processing, including profiling, which produces legal effects for you or similarly significantly affects you;
The right to object to the provision of your personal data to third parties by logging into your personal profile on our website and unchecking the box regarding the provision of personal data to third parties;
The right to request data portability of your personal data in a structured, machine-readable format that is commonly used;
The right to lodge a complaint against the processing of your personal data with us or with the supervisory authority - the Commission for Personal Data Protection, if the prerequisites for this are present.
You can exercise all rights at any time during the processing of your personal data.
Do you have an obligation to provide us with your personal data?
To be able to provide our products and services, we must process your personal data. We also process it with a view to fulfilling legal obligations.
In case of refusal and unwillingness to provide your personal data, LA FLOR BAR & GRILL will not be in a position to provide its products and services; for example, you will not be able to receive delivery of your chosen food and other items.
Changes to the Privacy Policies
In the future, it is likely that we will need to update this Privacy Policy from time to time in response to changing legal, technical, or business processes.
We recommend that you periodically review this page to stay informed of the latest version of our Privacy Policy. The date of the last update and changes to the Privacy Policy is indicated at the bottom of this document, and in case of significant changes, such as new purposes for processing personal data, a need for your explicit consent, or others, we will send you an email to the electronic address you provided.
These privacy policies were adopted by "FLORA FOOD" EOOD and are in effect from 07.01.2026. The last update was made on 07.01.2026.
of "FLORA FOOD" EOOD
WE CARE ABOUT THE PROTECTION OF YOUR PERSONAL DATA!
In this Privacy Policy, we have summarized the key points regarding the protection of your personal data and the ways we process it. If you require more information about specific processes, you can contact us using the details provided below.
Who are we?
"FLORA FOOD" EOOD carries out deliveries of food and beverages from the menu of the restaurant chain under the brand LA FLOR BAR & GRILL and other commercial brands (referred to for brevity in this privacy policy as "the Restaurants").
As an established home food delivery provider and representative of the largest food community in Bulgaria, LA FLOR BAR & GRILL values and takes care to protect the privacy of everyone in our community. This means we will protect the personal information of all visitors who access our websites or services through any mobile application, platform, or device.
"FLORA FOOD" EOOD (hereinafter referred to as LA FLOR BAR & GRILL) is a commercial company with UIC: 205645619, with its registered office and management address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, and correspondence address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, tel.: (+359) 893888388, e-mail: laflorburgas@abv.bg, which provides the services subject to these General Terms and Conditions through the site it administers: http://laflor.bg.
"FLORA FOOD" EOOD is a commercial company registered in the Commercial Register at the Registry Agency with UIC 205645619, with its registered office and management address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, tel.: (+359) 893888388 and e-mail: laflorburgas@abv.bg, and is a personal data controller in accordance with the provisions of the Personal Data Protection Act.
How to contact us?
Correspondence address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7, tel.: (+359) 893888388, e-mail: laflorburgas@abv.bg
How to contact our Data Protection Officer?
Address: Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7
E-mail: laflorburgas@abv.bg
Data protection and information security are part of our corporate culture and policy.
What information can I find in this Privacy Policy?
This Privacy Policy will provide you with comprehensive information in clear and accessible language regarding the actions performed with the personal data you provide to "FLORA FOOD" EOOD (hereinafter referred to as LA FLOR BAR & GRILL), including:
What personal data do we collect about you? Are you obliged to provide us with your personal data? Can you use our services without providing your personal data?
What is the purpose of collecting it?
For what period do we store the provided personal data?
With whom do we share your personal data?
Do we use automated solutions and artificial intelligence?
How do we notify you of changes to our Privacy Policy?
What types of "cookies" do we use to make your stay on our website better?
What are your rights regarding the provided personal data?
With this Privacy Policy, "FLORA FOOD" EOOD declares that it applies all technical and organizational measures for the protection of personal data of individuals as prescribed by law or other normative acts at the national and European level.
What is personal data?
Personal data is any information through which an individual can be identified – directly or indirectly. This includes, for example:
Name, PIN (EGN), PNF (LNCH), or another unique identifier;
Contact data – email, phone number, address;
Online identifiers – username, IP address, etc.
Some data may not identify you on its own (e.g., a phone number), but in combination with others – such as a name or username – could allow for your identity to be established. Direct identification occurs when you provide a unique identifier such as a PIN (EGN) or PNF (LNCH).
What personal data does LA FLOR BAR & GRILL collect about you and for what purposes (why)?
To provide you with effective access to our services, LA FLOR BAR & GRILL collects information and personal data about you. Below are the types of personal data we collect and the reasons (purposes) for processing them:
Information you provide voluntarily upon registration:
The information you fill in during registration when creating a profile on the LA FLOR BAR & GRILL website – https://laflor.bg/ – is as follows: first and last name, mobile phone, email address, and a password freely chosen by you. LA FLOR BAR & GRILL collects this information so that we can:
Create your profile so you can place orders in accordance with our Terms;
Identify you when you log into your profile;
Contact you for the execution of the services we offer; and
Notify you of changes or updates to our Terms and Privacy Policy.
Information necessary for accepting an order:
The minimum necessary information we must collect for you to place an order via the call center includes first and last name, mobile phone, city, delivery address, and the items you are ordering. Considering that all conversations are recorded, voice data of the conversation participants, including you, is contained and processed in the audio recordings.
For orders made via the Website laflor.bg or through the La Flor Delivery mobile app, the data collected includes first and last name, mobile phone, email address, city, delivery address, and the items you are ordering. In this case, an audio recording is not made during the order itself, but it is possible to process voice data again if the delivery person needs to contact you to find the address or clarify order details (the conversation will again be recorded).
Transaction information when you place an order from a restaurant, for the following purposes:
To process your order and prepare a bill/charge you (note: LA FLOR BAR & GRILL never stores credit/debit card information in our systems);
To communicate your order to the restaurant;
To send you updates on the status of your order;
To respond to your requests and questions about orders and resolve any issues;
To perform analysis and research to improve our Services; and
To protect you and the Services we provide by seeking to detect and prevent fraud or other actions in violation of our Terms or rules relating to LA FLOR BAR & GRILL Services.
This information includes date and time of payment, card issuer, corresponding bank, transaction reference number, amount paid, payer's first and last name, and merchant name.
Order history information and feedback:
We use information about your order history to:
Send you personalized marketing and advertising messages related to our delivery services, including food, beverages, and restaurant services offered at the restaurants that may be of interest to you.
We use information from feedback provided by you to:
Respond to your questions or inquiries;
Publish your reviews of our services, only with your consent for such publication;
Perform analysis and research to improve and develop our services.
You provide this information after logging into your user profile on the laflor.bg Website or in the La Flor Delivery Mobile App; in your profile, you can change preferences and manage consents provided for marketing and other purposes.
Information about your activities and actions in using our services, so that we can:
Ensure a better experience when using our services;
Give you access to history and details of past orders;
Provide other services at your request.
This information is limited to data about your personal preferences and consumer behavior on the LA FLOR BAR & GRILL Website and our mobile application.
Information from "cookies" and similar technologies, so that we can:
Measure and analyze the use and effectiveness of our services;
Personalize and optimize the targeting of advertisements for our services on other websites and platforms; and
Provide services related to your location if you choose to share your geographic location.
We will collect this information according to your choice of which cookies should be active.
Information we receive from other sources - third parties:
Analytical reports from the analysis and research of our marketing activities to measure the effectiveness of marketing campaigns for our services; and
To better understand your preferences so we can personalize our marketing campaigns and Services according to your wishes.
Types and categories of personal data we process
From the category of commonly used personal data, we process the following types:
First name, last name, phone, email, date of birth, settlement, address, when filling out various forms on our website for initial registration, subscribing to our newsletter/marketing messages, and filling out the inquiry form;
When paying by bank card – transaction status data (successful/unsuccessful);
Information about your orders;
Technical data automatically sent to us when you use our services via our website or mobile applications – IP address, information about the device you use;
Technical data automatically sent to us when you use our mobile device applications – mobile device information, IMSI number of the device, GPS coordinates;
Cookie data – to identify your browser or device.
Sensitive personal information
We do not proactively collect sensitive personal information, such as data related to your health. However, our platform provides free-text fields where you can share food-related preferences – for example, allergies or dietary restrictions. Please note that information you choose to enter there may reveal details defined by current legislation as special categories of personal data, so-called "sensitive" data.
If such data becomes available to us, we will not use it for marketing purposes or personalized advertising.
Furthermore, some functionalities of our platform may request access to your precise location (geolocation) through your device or browser settings. Such access is carried out only with explicit permission (i.e., consent) from you.
The processing of sensitive personal data that you voluntarily provide is carried out based on your consent, which you can withdraw at any time by contacting us using the details provided at the top of this policy.
What does processing of personal data mean?
The processing of personal data includes collection, storage, destruction, transmission, correction, updating, deletion, and all other actions performed with your personal data.
Why (on what grounds) does LA FLOR BAR & GRILL process personal data for you?
The legal basis for collecting and using your personal data as described above will depend on the specific context in which we collect it.
The main reason and purpose for collecting and using your personal data is to perform our contract with you (i.e., to ensure you receive the order at the address you specified in the volume you specified).
We will also use your personal data when it is in the pursuit of our legitimate business interests, but only when your interests regarding the protection of your personal data or your other rights and freedoms do not override those interests.
In some cases, we may have a legal obligation – a statutory basis to collect personal data from you (for example, to comply with legislation regulating the restaurant industry) or we may need to process it or share it with others to "protect your vital interests" or those of another person.
If we ask you to provide personal data to comply with a legal requirement or to enter into a contract with you, we will inform you of the circumstances at the relevant time and advise you whether the provision of personal data is mandatory or not (and also explain the possible consequences of refusing to provide personal data).
Also, if we collect and use your personal data by relying on our legitimate interests (or those of a third party), we will inform you at the relevant time what those legitimate interests are.
If you have questions or need additional information regarding the legal basis on which we collect and use your personal data, please contact us using the contact details provided in "How to contact us?" above.
LA FLOR BAR & GRILL also collects personal data after receiving explicit, clear, free, and unambiguous consent from you for processing purposes.
For example, in the case of expressed consent from you, LA FLOR BAR & GRILL may use data provided by you for marketing purposes so that you receive the latest promotions, as well as any other marketing and advertising messages, news, information, upcoming campaigns, promo codes, promotions, and special offers for our delivery services, including food, beverages, and restaurant services offered in the Restaurants that may be of interest to you. We explicitly clarify that your consent to this privacy policy will not be considered consent for marketing purposes. For your data to be used for marketing purposes, it is necessary to provide separate explicit consent by checking a checkbox specifically designed for this purpose on our website, application, or in another appropriate way.
Consent for processing your personal data is provided upon registration on our website or when filling out various forms on our website (for inquiries and for subscribing to an advertising/information newsletter).
The consent you provide can be withdrawn at any time by sending an email to laflorburgas@abv.bg or a written application to the correspondence address of LA FLOR BAR & GRILL in Kazanlak, "Iztok" Residential District, bl. 72, ent. A, floor 3, apt. 7.
Withdrawal of consent may apply to one or more purposes for which they are processed. For example, if you withdraw your consent for receiving marketing messages, your contact data will continue to be used to maintain your profile on the website and carry out your orders. In this case, contact data will be processed on a contractual basis.
If you want us to delete data without which it is impossible to maintain your profile on the website, it will be deleted, and for subsequent use of our services, it will be necessary to provide your data again.
How do we receive your personal data? In what way do we process your personal data?
To provide products and services, LA FLOR BAR & GRILL processes (collects) the personal data provided by you regarding your physical and economic identity in the following ways:
By you filling out forms provided on the LA FLOR BAR & GRILL website. The forms are filled in on our website in the relevant places left with free positions for your personal data;
By visiting the Website laflor.bg to use the services of our website;
When updating data at your request and filling out an update form on paper or in an electronic environment;
By using our mobile applications – La Flor Delivery;
By using online identifiers to collect information about IP addresses, data from cookies, operating system, and browser type;
By subscribing to an email newsletter.
Email / Newsletter
When you subscribe to our email newsletter, you will be asked to enter your email address. To administer and manage the distribution of the newsletter to users who have given consent, we maintain a register of your IP address, the emails you open, and the links you click in those emails, so we can more accurately recommend content, occasional third-party offers, and products you may find valuable. Any personal information you provide to us, including email address, will not be provided or sold to third parties. However, if you participate in a raffle, your email address may be provided to the relevant provider for registration/activation and ongoing support. Under no circumstances will we ask for credit card data for marketing purposes and receiving an email newsletter; if you receive such a request, it is likely a fraud attempt by third parties, so we advise you not to open or comply with it.
Mobile Applications
LA FLOR DELIVERY
No personal data provided to us in LA FLOR DELIVERY will be shared with third parties.
LA FLOR DELIVERY will use your public IP address to identify your location and present you with the locations of the nearest restaurants or the current menu for the area (and settlement) where you are located, as well as to provide information regarding the availability or lack of delivery for that area. Your IP address or location will not be used for any other purposes.
Artificial Intelligence (AI)
To stay up to date and provide our services in line with modern trends, we may use technologies based on artificial intelligence (AI).
Currently, we do not use such technologies, but we plan to add intelligent solutions soon – ready-made or developed specifically for us – that will make your experience on our Website and Application even more convenient and pleasant.
The use of these AI tools/functionalities will, in any case, be carried out in accordance with applicable personal data protection legislation, including the General Data Protection Regulation (GDPR). We apply appropriate technical and organizational measures to protect your information and ensure transparency in processing.
You have the right to object to your profiling if our AI tools perform such or to exercise other rights related to the protection of your personal data at any time, according to our Privacy Policy and applicable law, as stated below.
Audio Recording
When placing an order by phone, we collect data about you – names, contact phone, and delivery address, voice (voice alone may not be sufficient to identify you).
All conversations are recorded and stored by LA FLOR BAR & GRILL for a period of up to 6 months from the call for the purpose of executing your order and ensuring the accurate and timely provision of our services.
Telephone conversations with LA FLOR BAR & GRILL delivery drivers, for example, to clarify an address or notify that they have arrived at the specified location, are also recorded and stored as per the above procedure.
If you do not want to be recorded, please terminate the calls or do not accept them, in which case, however, your order may not be fulfilled.
Your phone numbers are not visible to our delivery drivers, as we have taken modern and up-to-date measures to protect the information, identity, and privacy of our customers, in accordance with the principle of privacy by default.
How long do we store and process your data before destroying it?
LA FLOR BAR & GRILL will keep your personal information for no longer than necessary to fulfill the purposes described in this Privacy Policy. Depending on the basis on which we process your personal data, the storage period differs.
Your personal data is stored by us for a period of 5 years from the termination of our contractual basis if we process the personal data for the performance of contractual obligations to you, or until the termination of the basis if the only one is for the protection of our legitimate interests, and/or for the periods specified in legislation if the basis for processing is for the fulfillment of legal obligations. After the expiration of this period and if no legal basis exists for the continued storage of your personal data, the information about you is destroyed. Your personal information is deleted from our system.
When providing your data for the purpose of creating your user profile on a website, mobile application, etc., we will consider that you have an interest in us storing this data until you undertake its deletion/deactivation.
We may also retain certain elements of your personal information for a period after you delete or deactivate your user profile for our legitimate operations, such as record-keeping and compliance with our legal obligations. Whenever we retain your information, we will do so in accordance with applicable legislation.
With your consent for your data to be used for receiving marketing/advertising messages, the period for processing them for this purpose is until you withdraw your consent. To ensure your consent remains current and voluntarily given, every 5 years we will remind you and require active confirmation if you wish to renew it.
To whom can we transfer the provided personal data?
LA FLOR BAR & GRILL DOES NOT provide your personal data for purposes other than the performance of contractual rights and obligations of third parties without your explicit consent and does not sell its databases.
LA FLOR BAR & GRILL uses software solutions and contractors in the performance of its services who support parts of the service, and we may share part of your personal data with them for the purpose of performing our contractual rights and obligations; for example, platforms for mapping and optimizing delivery routes to an address are used, where only the address you specified is entered.
LA FLOR BAR & GRILL may share your personal information with the following recipients (in each individual case, we will ensure we have appropriate protective and contractual safeguards to protect it):
Partner companies managing the Restaurants to which your orders have been submitted for execution;
LA FLOR BAR & GRILL companies in our group;
Third parties who support our services (e.g., marketing or promotion partners in the food, beverage, and entertainment sectors based on your preferences, to the extent there is a legal basis and your rights are not overridingly affected compared to those of LA FLOR BAR & GRILL, courier services, web hosting companies);
Any law enforcement or regulatory body, government agency, court, or other third party where disclosure is necessary under applicable laws or regulations;
New owners or reorganized entities in the event of restructuring, sale, purchase, or joint venture affecting our business.
Any other person, provided you give your consent. Under no circumstances will we sell, distribute, or otherwise share your personal information unless we have your explicit permission.
Are there other cases in which we can share your personal data?
Your personal data is provided to third parties also in the following cases:
At the request of the individual who provided the data, the subject of personal data protection (i.e., you, if you send us a request);
At the request of competent authorities according to the current legislation of the Republic of Bulgaria and the European Union.
In all the above cases, the persons to whom we provide your personal data have declared that they provide an adequate level of protection for your personal data, including foreign companies positioned within the EU and EEA. Regarding companies positioned outside the EU and EEA, for each specific case, the relevant company guarantees that it provides an adequate level of protection for personal data, complying with the requirements of European legislation.
Use of "cookies"
General Provisions
"Cookies" are small text files that are saved on your computer when visiting our website. To learn more, see our Cookie Policy.
What are your rights regarding the provided personal data?
If you are a registered user of LA FLOR BAR & GRILL, you have access to your profile at any time to review and update your personal information, i.e., your personal data. You can also contact us to request that we update or delete your personal data, as well as restrict its processing.
Furthermore, you have the right to unsubscribe from the marketing messages we send you by using the unsubscribe function from any marketing communication you receive from us, or by sending an email to laflorburgas@abv.bg.
In addition, according to Bulgarian and European legislation, including the GDPR - Regulation (EU) 2016/679 of the EU and of the Council (General Data Protection Regulation) regarding personal data protection, you can exercise the following rights:
The right of access to the personal data that LA FLOR BAR & GRILL processes for you and to receive a copy of it;
The right to request correction from LA FLOR BAR & GRILL in case you find inaccuracies or a need to update your personal data by sending an email to laflorburgas@abv.bg;
The right to request blocking of your personal data or restriction of the processing of personal data in cases specified by law and the Regulation;
The right to request erasure, i.e., deletion of your personal data from LA FLOR BAR & GRILL, if the conditions for this are present;
The right to object to the processing of your personal data. You can also object to the processing of your personal data specifically for direct marketing purposes by using the "unsubscribe" link included in every email containing promotional information about our products sent to you;
The right to withdraw your consent at any time for your personal data to be processed for marketing or other purposes for which you have given consent. You can withdraw your consent by sending an email to: laflorburgas@abv.bg;
The right to object and not be subject to a decision based solely on automated processing, including profiling, which produces legal effects for you or similarly significantly affects you;
The right to object to the provision of your personal data to third parties by logging into your personal profile on our website and unchecking the box regarding the provision of personal data to third parties;
The right to request data portability of your personal data in a structured, machine-readable format that is commonly used;
The right to lodge a complaint against the processing of your personal data with us or with the supervisory authority - the Commission for Personal Data Protection, if the prerequisites for this are present.
You can exercise all rights at any time during the processing of your personal data.
Do you have an obligation to provide us with your personal data?
To be able to provide our products and services, we must process your personal data. We also process it with a view to fulfilling legal obligations.
In case of refusal and unwillingness to provide your personal data, LA FLOR BAR & GRILL will not be in a position to provide its products and services; for example, you will not be able to receive delivery of your chosen food and other items.
Changes to the Privacy Policies
In the future, it is likely that we will need to update this Privacy Policy from time to time in response to changing legal, technical, or business processes.
We recommend that you periodically review this page to stay informed of the latest version of our Privacy Policy. The date of the last update and changes to the Privacy Policy is indicated at the bottom of this document, and in case of significant changes, such as new purposes for processing personal data, a need for your explicit consent, or others, we will send you an email to the electronic address you provided.
These privacy policies were adopted by "FLORA FOOD" EOOD and are in effect from 07.01.2026. The last update was made on 07.01.2026.