Effective Date: December 11, 2025
Last Updated: December 11, 2025
Welcome to the Privacy Policy of trudive.eu
This website, together with all its sub-domains and sub-pages (collectively "the Website" or "the Site"), constitutes the official online presence and e-commerce platform for the TruDive brand wetsuits and diving equipment.
www.trudive.eu respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our Site, make a purchase, subscribe to our newsletter, or interact with us in any way.
This policy complies with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the Bulgarian Personal Data Protection Act.
Please read this Privacy Policy carefully. You should be fully aware of how we handle your personal data and what rights you have regarding the information we collect.
Personal Data Controller:
The Data Protection Officer is available to respond to all queries regarding the processing and protection of your personal data. You can contact the DPO at: [email protected]
Data Subjects: This policy applies to individuals (consumers or business representatives) who visit the Website, place orders, subscribe to newsletters, or interact with trudive.eu in any capacity ("you" or "the Customer").
You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of the Republic of Bulgaria, which is the national supervisory authority for data protection matters.
CPDP Contact:
We encourage you to contact us first at [email protected] so that we can address your concerns directly.
Personal data refers to any information that identifies or can identify a natural person. We may collect, use, store, and share various categories of personal data, including the following:
Identity and Contact Data:
Financial Data:
Order Data:
When legally required or requested by you:
To provide administrative and technical support:
When you explicitly consent to receive marketing communications:
For website functionality, security, and improvement:
If you choose to create an account on trudive.eu:
Note: Creating an account is entirely optional. You can place orders as a guest without registering.
When you participate in contests, surveys, or promotions:
We collect personal data through the following methods:
You provide data directly when you:
When you visit our Website, we automatically collect:
See Section 11 for the detailed Cookie Policy.
We may receive data from:
We process your personal data for specific purposes based on lawful grounds under GDPR:
| Purpose | Data Types Used | Legal Basis |
|---|---|---|
| Processing and fulfilling orders – Creating, confirming, and delivering your wetsuit purchases | Identity, Contact, Order, Financial Data | Performance of contract – necessary to fulfill our obligations to you |
| Payment processing and invoicing – Processing payments, issuing invoices, handling refunds | Financial, Accounting Data | Performance of contract & Legal obligation (tax/accounting laws) |
| Delivery coordination – Arranging shipment with courier services | Identity, Contact, Delivery Address | Performance of contract |
| Customer support – Responding to inquiries, resolving issues, processing returns/exchanges | Identity, Contact, Order, Support Data | Legitimate interest – providing quality customer service |
| Account management (if you register) – Maintaining your account, order history, and preferences | Account Data | Consent – account creation is optional |
| Newsletter and marketing communications – Sending promotional emails, new product announcements, special offers | Email, Marketing Data | Consent – you can opt out anytime |
| Website functionality and security – Ensuring the Site works properly, preventing fraud, protecting against cyber threats | Technical Data, IP Address | Legitimate interest – maintaining a secure and functional website |
| Analytics and improvement – Understanding how customers use the Site to improve user experience | Technical, Usage Data (anonymized) | Legitimate interest – improving our services |
| Legal compliance – Fulfilling accounting, tax, and other legal obligations | Accounting, Transaction Data | Legal obligation |
| Marketing performance tracking – Measuring effectiveness of Facebook/Instagram advertising campaigns | Technical Data, Cookie Data | Consent (via cookie consent) & Legitimate interest |
| Contests and promotions – Managing participation and prize delivery | Contest Data | Consent – voluntary participation |
Legitimate interest refers to our business need to operate effectively and provide you with a high-quality and secure experience. We always assess these interests against your rights and freedoms. We do not use your data in ways where your interests outweigh ours, unless you have given consent or the law requires or allows us to do so.
When you place an order, we enter into a contract with you. Processing certain personal data (name, address, payment info) is necessary to fulfill that contract. Without this data, we cannot complete your purchase or deliver your wetsuit.
We may share your personal data with the following categories of third parties, strictly for the purposes outlined above:
Courier and Postal Services:
We share your name, delivery address, and phone number to enable delivery of your order.
Payment Processors:
We share necessary payment data to process transactions and refunds.
Email Service Providers:
We share email addresses and marketing preferences solely to deliver newsletters and promotional campaigns, and only when you have given your consent.
Social Media Platforms:
We share limited data (hashed email, IP address) for advertising targeting and measuring campaign effectiveness (based on cookie consent).
Website Analytics:
We share anonymized/pseudonymized usage data to understand website traffic and user behavior.
Hosting Provider:
Our website is hosted by Contabo. They may technically access data stored on our servers, but they are contractually obligated to protect it.
Consultants and Advisors:
Government Authorities:
In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the new owner. You will be notified of any such change.
All third parties are required to:
We have contracts (Data Processing Agreements) in place with all service providers who process personal data on our behalf.
We NEVER sell your personal data to third parties.
Your personal data is primarily processed within the European Union (EU) and European Economic Area (EEA).
Some of our service providers may be located outside the EEA (e.g., some servers, analytics tools). When we transfer data outside the EEA, we ensure appropriate safeguards are in place:
Shipping destinations: We ship to EU countries and select neighboring countries (Switzerland, Andorra, Luxembourg, Monaco). Personal data related to delivery is shared with couriers operating in these regions.
We retain your personal data only as long as necessary for the purposes collected and to comply with legal obligations:
| Data Category | Retention Period |
|---|---|
| Order and contract data | Duration of contract + limitation periods for legal claims under Bulgarian law (generally 5 years) |
| Accounting and tax records | As required by Bulgarian law (typically 10 years from the end of the fiscal year) |
| Marketing consents and data | Until you withdraw consent (opt-out) or delete your account |
| User account data | Until you delete your account |
| Customer support records | [3 years] after last interaction |
| Website analytics (anonymized) | [26 months] (Google Analytics default) |
| Cookie data | As specified in the Cookie Policy (Section 11) |
After retention periods expire, personal data is securely deleted or anonymized and cannot be restored.
Exception: Data may be retained longer if required for ongoing legal proceedings, investigations, or regulatory requirements – only until the matter is resolved.
You have the following rights regarding your personal data:
You can request a copy of the personal data we hold about you. When you have an account, you can view much of this data in your account dashboard.
You can request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings.
You can request deletion of your personal data in the following cases:
Note: This right is not absolute. We may need to retain certain data for legal obligations (e.g., accounting records) or to establish/defend legal claims.
You can request that we limit processing of your data when:
You can request to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another controller. This applies when:
You can object to processing based on legitimate interest at any time. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, or for legal claims.
Direct Marketing: You have an absolute right to object to direct marketing at any time, including profiling for marketing purposes.
Where processing is based on consent, you can withdraw it at any time:
Withdrawal does not affect the lawfulness of processing before withdrawal.
You can file a complaint with the Commission for Personal Data Protection (CPDP) (see Section 2) or a supervisory authority in your EU country of residence.
To exercise any of the above rights:
Via Email: Send a request to [email protected] with:
Via Account Settings: If you have an account, you can directly:
Response Time: We will respond within 1 month of receiving your request. In complex cases or high volumes, this may be extended by up to 2 months – we will inform you if this occurs.
Fees: Exercising your rights is free of charge, unless the request is manifestly unfounded, excessive, or repetitive – in which case we may charge a reasonable fee or refuse the request.
We use cookies and similar technologies to enhance your experience on trudive.eu.
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and understand how you use it.
| Cookie Type | Purpose | Examples |
|---|---|---|
| Strictly Necessary Cookies | Essential for the Website to function (e.g., shopping cart, security) | Session cookies, authentication cookies |
| Functional Cookies | Remember your preferences (e.g., language, region) | User preference cookies |
| Analytics Cookies | Help us understand how visitors use the site (anonymized data) | Google Analytics |
| Marketing Cookies | Track your activity to show relevant ads on social media | Facebook Pixel, Instagram Pixel, Klaviyo marketing cookies |
Cookie Consent Banner: When you first visit trudive.eu, you'll see a cookie consent banner. You can:
Browser Settings: You can also control cookies through your browser settings:
Note: Blocking strictly necessary cookies may prevent parts of the Website from functioning properly (e.g., you won't be able to complete a purchase).
Third-party services set some cookies we use:
For detailed information, see our full Cookie Policy here.
When you subscribe to our newsletter or opt in during checkout, you consent to receive:
How to Subscribe:
How to Unsubscribe:
Transactional Emails: Even if you unsubscribe from marketing, you'll still receive essential emails about your orders (confirmations, shipping updates, etc.) – these are necessary to fulfill our contract with you.
We implement appropriate technical and organizational measures to protect your personal data against:
Security measures include:
Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the CPDP within 72 hours as required by GDPR.
We do not knowingly target or collect personal data from children. However, we do not verify the age of customers.
If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.
Our Website may contain links to third-party websites, social media pages, or services (e.g., the DSK Bank payment page, courier tracking).
We are not responsible for:
When you leave www.trudive.eu, we encourage you to read the privacy policy of each website you visit. This Privacy Policy applies only to www.trudive.eu.
We do NOT use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Any personalization (e.g., product recommendations, targeted ads) is based on general trends and explicit consent, not automated profiling with legal consequences.
We may update this Privacy Policy from time to time to reflect:
When we make changes:
Your continued use of www.trudive.eu after changes constitutes acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Data Protection Officer (DPO):
General Inquiries:
Commission for Personal Data Protection (CPDP):
Personal Data: Any information relating to an identified or identifiable natural person.
Data Controller: The entity TruDive Europe OOD (TruDive Europe Ltd) that determines the purposes and means of processing personal data.
Data Processor: A third party that processes personal data on behalf of the controller (e.g., courier services, payment providers).
Data Subject: The individual (you) to whom personal data relates.
GDPR: General Data Protection Regulation (EU) 2016/679 – the EU law governing data protection and privacy.
Consent: Freely given, specific, informed, and unambiguous indication of your wishes by a statement or clear affirmative action.
Legitimate Interest: A lawful basis for processing when necessary for the controller's or third party's legitimate interests, balanced against the data subject's rights.
Anonymization: Processing data so that it can no longer identify an individual, even with additional information.
Pseudonymization: Processing data so that it cannot be attributed to a specific individual without additional information kept separately.
Thank you for trusting TruDive with your personal data. We are committed to protecting your privacy and providing you with the best wetsuit shopping experience!
This Privacy Policy is governed by the laws of the Republic of Bulgaria and the GDPR.