---

In case of discrepancies between versions of this Privacy Policy in different languages, the English version shall prevail and be legally binding.

PRIVACY POLICY

PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 ("GDPR")

Last updated: 27 January 2026

1. General information

This document describes how new web store LTD, with registered office in Bulgaria, Sofia, Filip Kutev 4A, ZIP 1407 (hereinafter, “Company”, “we”, “us”, “our”), processes the personal data of users who visit the website moscarossa.biz (hereinafter, the “Site”) or use the online services offered through the Site.

In this Policy, any person who visits the Site (“Browser”) or registers and uses features that require an account (“Member”) is referred to as “User” or “you”.

The Company acts as data controller within the meaning of Regulation (EU) 2016/679 (the “GDPR”) and applicable national data protection laws.

2. Changes to this Policy

We reserve the right to change this Privacy Policy at any time. Any updates will be published on this page, indicating the date of the latest revision. You are encouraged to review this page periodically to check for changes. Your continued use of the Site after changes are posted constitutes your acceptance of those changes.

3. Types of personal data processed

Depending on how you use the Site, we may process the following categories of personal data:

• Registration data: email address, username, password, and any short public description you decide to provide.
• Public profile data: text, photos and videos that you voluntarily upload to your profile or to your ads.
• Browsing data: IP address, device and browser type, operating system, language settings, pages visited, time spent on pages, clicked links, internal search terms, referrer URLs; such data are collected, among other things, through cookies and similar technologies.
• Communication data: information contained in emails or support requests you send to us.

We do not sell your personal data to third parties.

4. How we collect data

We collect personal data in the following ways:

• Actively, when you provide them to us (registration, creating or editing your profile, publishing ads, contacting support, etc.).
• Passively, through cookies and similar technologies while you browse the Site (technical and usage data as described above).

For more information about the cookies used on the Site, please refer to our separate Cookie Policy.

5. Purposes and legal bases of processing

We use your personal data for the following purposes:

• Provision of the Site’s services: creating and managing your account, publishing and displaying content, managing profile features and any premium options (legal basis: performance of a contract).
• Improvement of the Site and security: statistical analysis, prevention of abuse, technical monitoring of the service, protection against fraudulent or unlawful activities (legal basis: legitimate interest).
• Content personalisation: displaying more relevant content based on how you use the Site, within the limits allowed by law and your cookie preferences (legal basis: consent, where required, or legitimate interest).
• Service communications: sending communications strictly necessary for the functioning of your account (e.g. registration confirmation, password recovery, technical notices, changes to terms/policies) (legal basis: performance of a contract / legal obligations).
• Marketing communications: sending emails about services, news or offers related to the Site, to the extent permitted by law and with the option to opt out at any time (legal basis: consent or legitimate interest, as applicable).
• Compliance with legal obligations and defence of rights: responding to requests from authorities, complying with legal obligations and defending the rights of the Company (legal basis: legal obligation, legitimate interest).

6. Public profile and visible content

The content you choose to make public on your profile or in your ads (text, photos, videos and other information) is visible to other users and, in some cases, to unregistered visitors.

You should not include sensitive personal information (such as health data, login details for other services, ID documents) in public profile fields or ads. You are responsible for the information you decide to make public and for any consequences that may arise from it.

7. Sharing of personal data

We may share your personal data with:

• Technical service providers (hosting, security, analytics, email sending tools, payment services, etc.), acting as data processors on the basis of appropriate contractual arrangements.
• Competent authorities, public bodies or private parties where this is required by law or necessary to protect our rights, the rights of users or third parties (for example, in case of investigations into unlawful activities, fraud prevention, formal requests).

We do not grant third parties access to personal data for their own direct marketing purposes, unless you have given your explicit and informed consent.

8. Transfers outside the EEA

If some of our service providers or infrastructures are located outside the European Economic Area, any transfer of personal data will take place in compliance with the GDPR, for example by adopting Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

9. Data retention

We keep personal data only for as long as strictly necessary to achieve the purposes for which they were collected, without prejudice to any additional retention period required by law or necessary for the protection of our rights.

In general:

• Account and profile data: for the entire duration of the contractual relationship (active account) and for a limited period thereafter, as required for legal obligations or for the establishment, exercise or defence of legal claims.
• Log and browsing data: for limited technical periods, proportionate to the security and statistical purposes for which they are processed.

10. Your rights

Under the GDPR, as a data subject, you have the right to:

• Obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access such data.
• Request the rectification or update of inaccurate or incomplete data.
• Request the erasure of your personal data in the cases provided for by law.
• Obtain restriction of processing in the cases provided for by Article 18 GDPR.
• Object to processing based on legitimate interest, on grounds relating to your particular situation.
• Withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.
• Receive your personal data in a structured, commonly used and machine‑readable format and, where technically feasible, transmit those data to another controller (data portability).

To exercise your rights, you can contact us using the details provided in the “Contact us” section. You also have the right to lodge a complaint with the competent supervisory authority.

11. Data security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access. However, no system is completely secure and we cannot guarantee absolute security of your information.

12. Cookies and similar technologies

The Site uses technical cookies and, subject to your consent, profiling and/or third‑party cookies for analytics and advertising purposes. Detailed information about the categories of cookies used, their purposes and how to manage your preferences is provided in our Cookie Policy.

13. Marketing communications

We may send you emails about service updates, Site features and offers related to our services. Each marketing email includes a link allowing you to unsubscribe. You will continue to receive communications that are strictly necessary to manage your account.

14. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us at: moscarossa or by post at:

new web store LTD, Sofia, Filip Kutev 4A, ZIP 1407, Bulgaria.