Privacy notice

The controller of the personal data described here is Doro Caffe, Ulica 101, 1200 Tetovo, North Macedonia.

Company registration and tax details are not published here. We will provide them, and any other documentation a buyer reasonably needs for due diligence, on request — write to sales@dorospremium.com.

We are established in North Macedonia, which is outside the European Union. Because this site offers goods and services to businesses and people in the Union, the General Data Protection Regulation applies to us all the same, and we have written this notice accordingly.

For anything in this notice — including a request to see, correct or delete what we hold — write to sales@dorospremium.com. A person reads that address; it is the same one enquiries arrive at.

This site has no account, no login, no newsletter and no basket. There is one form, at the foot of the home page. It asks for your name, your email address, the country or market you are writing from, optionally a product, and your message.

Nothing on the form is collected as you type. It is sent when you press Send enquiry, and not before.

The form also carries a hidden field that people never see and automated submissions usually fill in. If it arrives filled in, the submission is discarded and nothing is sent or stored. It collects no information about you.

We use what you send to answer you: to reply to a distribution, wholesale, private-label or product question, and to carry on that conversation if it continues.

The legal basis is Article 6(1)(b) of the GDPR — steps taken at your request before entering into a contract — or, where an enquiry is not heading towards a contract, our legitimate interest under Article 6(1)(f) in responding to people who write to us. We do not rely on consent for this, so there is no consent for you to give and none for you to withdraw. If you would rather we did not hold your enquiry, ask us to delete it and we will.

We do not profile you, we do not make automated decisions about you, and we do not sell, rent or share your details with anyone for their own purposes.

Delivering the form. This site has no server of its own, so the form is delivered by EmailJS — EmailJS Pte. Ltd., a Singapore company whose servers are operated by Amazon Web Services in the United States. Your enquiry passes through their systems on the way to our inbox, and a copy of the request is held in our EmailJS account for 30 days as a delivery log, after which they delete it. EmailJS act only on our instructions under a data processing agreement, and they rely on the European Commission's Standard Contractual Clauses for the transfer to the United States. Their own sub-processors — Amazon Web Services, Cloudflare, Redis, Sentry, Coralogix and Zendesk — are listed in their privacy policy.

Hosting. The site is hosted by cyon GmbH in Switzerland. Its web servers record the technical details needed to deliver and protect the site: your IP address, the date and time, the requested address, the response status, the referring page when supplied, the amount of data transferred, and browser identification. Cyon deletes raw access logs daily by default, so the underlying entries are at most 24 hours old. It also derives aggregated website statistics from those logs; we do not use either source to identify individual visitors.

If delivery fails. If EmailJS cannot be reached — you are offline, or something is misconfigured at our end — the form does not silently lose your message. It opens your own email program with everything you typed already filled in, so you can send it yourself. In that case nothing passes through EmailJS at all, and the message travels through your own email provider exactly as any email you write does.

We keep an enquiry, and the correspondence that follows it, for 24 months after we last hear from you. Export conversations are slow and a distributor who goes quiet for a season is often back; that is the whole of the reason for the period.

EmailJS's own copy is deleted by them after 30 days, independently of anything we do.

If you ask us to delete your enquiry sooner, we will, subject to anything we are separately required to keep — for instance where a commercial transaction has taken place and tax or accounting law requires the record.

Three technical details, all first-party and none used to identify or track you.

Whether you have dismissed the imagery notice, kept for the length of the browsing session so that the same disclosure does not cover the page again after you have read it. It is discarded when you close the tab.

Whether you have seen the opening animation, kept for the length of the browsing session so that moving between pages does not replay it. It is discarded when you close the tab.

How many processor cores your device reports, read once and not stored anywhere. It is used to decide how much animation the page can afford to run, so that a modest phone is not asked to do desktop work.

None of these are advertising or profiling storage, and there is nothing here for a preferences panel to manage.

The WhatsApp button and the social links in the footer open other companies' services. Nothing is shared with them while you are here — a link is only a link — but once you follow one you are on their site, under their privacy policy, and what they collect is between you and them.

This site loads no third-party scripts, advertising tags, tracking pixels, embedded chat widgets or social buttons. The typefaces are served from this site's own domain rather than fetched from a font service, so no request goes anywhere else when a page loads.

Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict what we do with it, object to our processing where we rely on legitimate interests, and ask for it in a portable form. There is no charge, and we will answer within one month.

Write to sales@dorospremium.com. We may need to ask a question or two to be sure we are giving your data to you and not to somebody else.

If you think we have handled your data badly, please tell us first — it is usually a misunderstanding and always faster. You also have the right to complain to the data protection authority in the EU country where you live or work, and that right does not depend on asking us first.

This notice was last updated on 10 August 2026. If what we do with personal data changes, this page and that date change with it. We do not make changes quietly and backdate them.