Cookie policy

This policy explains what cookies and similar technologies we use on kittydream.eu, for what purpose, how long we store them, and how you can manage your choice.

It supplements our Privacy notice.

1. Who is responsible for the processing

The controller of the personal data collected through cookies on this website is:

2. What cookies and similar technologies are

Cookies are small text files stored on your terminal device (computer, tablet, mobile phone) when you visit a website, allowing the site to recognise your device on a subsequent visit.

Alongside cookies we use the term “similar technologies”, which covers other means of storing information on your device or gaining access to information stored there, including:

• browser local and session storage (localStorage, sessionStorage);
• tracking pixels and web beacons;
• identifiers embedded in URLs and links;
• third-party software components embedded in the site (SDKs, scripts, embedded content).

The consent rules described below apply equally to all of these technologies, regardless of the technical means of storage or access, and regardless of whether personal data is processed through them. This approach follows EDPB Guidelines 2/2023 on the technical scope of Art. 5(3) of Directive 2002/58/EC, version 2.0, adopted on 7 October 2024.

3. The legal basis on which we use cookies

The use of cookies and similar technologies is governed by:

• чл. 4а of the Bulgarian Electronic Commerce Act, which transposes Art. 5(3) of Directive 2002/58/EC into Bulgarian law;
• Regulation (EU) 2016/679 (GDPR) — as regards the personal data processed through cookies;
• the Personal Data Protection Act.

Accordingly:

Strictly necessary cookies are used without your consent, because without them the service you have expressly requested cannot be provided. The basis for processing personal data through them is performance of a contract under Art. 6(1)(b) GDPR, or our legitimate interest under Art. 6(1)(f) GDPR.

All other cookies — functional, analytics and marketing — would be used only after your prior, freely given, specific, informed and unambiguous consent within the meaning of Art. 4(11) and Art. 7 GDPR. We do not currently use any such cookies. If that changes, we will introduce a consent tool letting you accept or refuse in a single action before the relevant technologies go live, and we will update this policy.

4. What categories of cookies we use

4.1. Strictly necessary cookies

These provide the basic functioning of the site and cannot be switched off. Without them you could not add products to the cart, complete an order or maintain a secure session.

More specifically they serve: maintaining your session and the contents of your cart, the checkout process, signing in to an account, protecting forms against abuse (CSRF), and remembering the language you are browsing in.

4.2. Functional cookies

These allow the site to remember a choice you have made and to provide enhanced features. We do not currently use any functional cookies.

4.3. Analytics (statistical) cookies

These help understand how visitors use the site. We do not currently use any analytics cookies. No web analytics tool is installed on the site.

4.4. Marketing (advertising) cookies

These are used to measure advertising campaigns and to show you advertising tailored to your interests. We do not currently use any marketing cookies. There are no advertising pixels or tags on the site.

5. Full list of cookies used

Name	Type	Purpose	Storage period
kittydream-session	strictly necessary	Maintains your session — the contents of your cart, the checkout process and signing in.	session (expires after 120 minutes of inactivity)
XSRF-TOKEN	strictly necessary	Protects the site’s forms against cross-site request forgery.	session
locale	strictly necessary	Remembers the language you are browsing in, so you do not have to choose it on every visit.	up to 5 years
remember_web_*	strictly necessary	Set only if you create an account, sign in and choose “remember me”.	up to 5 years

This is the complete list as at the date of the last update. If we introduce further technologies, we will update this table before they go live.

6. Third-party cookies and transfers outside the EU/EEA

There are currently no third-party cookies on the site. We do not use Google Analytics, Google Tag Manager, Meta advertising pixels or similar tools. The site’s fonts are served from our own server, not from an external provider.

No personal data is transferred to third countries in connection with cookies.

If in future we introduce analytics or advertising services whose providers process data outside the EU/EEA, we will state here explicitly the Chapter V GDPR basis — a European Commission adequacy decision under Art. 45 and/or appropriate safeguards under Art. 46 in the form of standard contractual clauses adopted by the European Commission. We will do this before those technologies go live, not afterwards.

7. Storage periods

The storage period of each individual cookie is stated in the table in section 5. Session cookies are deleted when you close your browser.

If we introduce optional cookies in future, your choice will be remembered for 12 months, and the record of consent given, changed or withdrawn will be stored for 5 years in order to demonstrate compliance with our obligations under Art. 7(1) GDPR.

8. How to manage cookies

Because we use strictly necessary cookies only, there is no consent banner on the site — there is nothing to allow or refuse.

You can nonetheless manage cookies through your browser settings, including deleting them or blocking them from being set. Please note that blocking strictly necessary cookies will prevent the site from functioning properly, including your ability to place an order. Instructions for the most common browsers are in the “Help” or “Privacy settings” section of the browser concerned.

If we introduce optional cookies, you will be given the option to accept or refuse them in a single action, and to manage your choice at any time.

9. Your rights

In relation to personal data processed through cookies, you have the rights in Art. 15–22 GDPR — access, rectification, erasure, restriction, portability, objection — as well as the right to withdraw consent under Art. 7(3) where processing is based on consent.

Rights are exercised by a request to hello@kittydream.eu. We reply within one month of receiving the request; this period may be extended by two further months where necessary, and we will tell you.

10. Right to complain

If you believe that the processing of your personal data breaches applicable law, you have the right to lodge a complaint with the supervisory authority:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
E-mail: kzld@cpdp.bg · Website: www.cpdp.bg

You also have the right to a judicial remedy.

11. Changes to this policy

We reserve the right to update this policy when the technologies used or the applicable law change. The current version is always available at this address, and the date of the last update is stated at the top.