Privacy Policy

THIS POLICY is an integral part of the terms of use of the website and the sale and delivery of goods and services by the Company through the online store "XXXXXXXXX", located at XXXXXXXXX.

Contact information for questions related to personal data protection or the Data Protection Officer of the Company: Phone: XXXXXXXXX; e-mail: XXXXXXXXX

The privacy and security of our customers' personal data is of paramount importance to us. In this regard, we have created this Privacy Policy, which regulates the way we collect, use, store, disclose, and delete, or generally process your data.

Your data provided when creating an account will be stored in the Company's database, and in this regard, providing consent to the Privacy Policy is considered consent that the data provided in your account or otherwise provided on our site will be processed according to the rules set out below.

It is important for you to know that:

- By registering on our website, you agree to this Policy and expressly confirm that you accept it. You may be asked for personal information every time you contact us regarding the provision of our products and services.

- Only in compliance with this Privacy Policy and all applicable legal regulations can the Administrator and its partners share this information with each other and use it.

- Your personal data is processed solely on the territory of the Republic of Bulgaria and only for the period and purposes for which it was provided.

- If you do not wish us to process your Personal Data in the manner described in the Policy, please do not provide it to us. The provision of Personal Data is voluntary, with a view to using or accessing the services of our site. Your possible refusal to provide the necessary Personal Data to use the site's services would only mean a refusal to use the respective services, without any adverse consequences for you.

- In some cases, we process your personal data only after your prior written consent. Consent is a separate basis for processing your personal data for the purpose of processing specified therein.

- Provided consents can be withdrawn at any time. The withdrawal of consent does not affect the performance of current contractual obligations. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

- In certain cases, your explicit consent to the processing of Personal Data may not be required if there is another legal basis, for example: compliance with the legal obligations of the Administrator; for the performance of contractual obligations, etc.

- You are not obligated, and we do not require you to register or provide personally identifiable (personal) information in order to browse our Website or access most of its content.

- When you purchase goods as a guest (without a registered account), the data you provide is processed only for the purpose of fulfilling the specific order.

- The supervisory authority regarding the protection of Personal Data is: Commission for Personal Data Protection (CPDP) at the address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., information and contact phone +359 2 91-53-518; email: kzld@cpdp.bg; Website: www.cpdp.bg.

Information we collect:

If you have chosen to register on our Website and/or use the services and contact forms provided through it, you are required to provide certain personal data, including but not limited to names, phone number, email, address, preferred method of communication, etc.

In cases where the issuance of certain documents is required, such as an invoice, you may be asked for additional data according to the requirements of the legislation.

Data of minors:

The services provided by the site are intended for persons over 18 years of age.

For registration and/or the provision of the site's services, including the sale of goods to persons under 18 years of age, it is required and necessary to provide explicit consent, respectively confirmation from the holder of parental responsibility (parent or guardian) for the child. If you nevertheless use our site without such permission or consent, you are concealing important information from us and misleading us. In this case, the Administrator is not responsible for any circumstances or events arising as a consequence of this misleading on your part.

If we determine that we have collected personal information from a child under the age of 18, we will take steps to delete the information as soon as possible.

How and why we use your personal data:

- We process your personal data based on your explicit consent, or

- We process your personal data to fulfill our obligations as a party to a contract for the sale of goods or services. We may periodically use them to send important messages such as notifications regarding your inquiries related to specific orders, changes in the General Terms and Conditions and/or other rules and circumstances.

- We process your personal data to fulfill our legal obligations; for the legitimate interests of the administrator or a third party, when these override the interests or fundamental rights and freedoms of the data subject.

- If you have given consent, we process your data to inform you about current promotions and advertising activities, and you may withdraw this at any time.

When and why we share personal data with third parties:

We provide your personal data to third parties, as our main goal is to offer you high-quality, fast, and comprehensive service for the products and services we offer. We do not provide your personal data to third parties before ensuring that all technical and organizational measures have been taken to protect this data, striving to exercise strict control to achieve this goal.

We provide personal data to the following categories of recipients (administrators and/or personal data processors):

1. Persons processing data on behalf of the Company:

- postal and courier operators, with a view to sending shipments containing goods, contracts, additional agreements, and other documents, and the need to verify identity upon their delivery;

- sales representatives, distributors, and subcontractors of the Company acting as representatives of the company in offering and selling products and services;

- persons hired under a civil contract by the Company, assisting the processes of sale, delivery, etc.; to a personal data processor (a natural or legal person who processes personal data on behalf of the administrator and under their instructions or assignment) - auditors; IT company maintaining the information system; lawyers and law firms, and others;

- to business partners - for the purposes of direct marketing, joint promotions, products, and services, when you have given explicit consent for your data to be used for such purposes.

2. Persons processing data on their own behalf:

- authorities, institutions, and persons to whom we are obliged to provide personal data by virtue of applicable legislation.

How do we protect your personal data?

To ensure adequate protection of the data of the Company and its customers, we apply the necessary organizational and technical measures provided for in the Personal Data Protection Act, Regulation (EU) 2016/679 of April 27, 2016 (GDPR), etc.;

The Company has established rules and structures to prevent abuse and breaches of the security and protection of your data.

Your rights (Rights of the personal data subject):

If we process your Personal Data, you have the following rights:

a) The right to obtain confirmation from us as to whether your personal data is being processed, and if so, to access your personal data;

b) The right to verify the completeness and accuracy of your personal data, as well as to correct it by logging into your account;

c) The right to refuse the processing of your personal data for direct marketing purposes;

d) The right to data portability to another Data Administrator;

e) The right to lodge a complaint with the Commission for Personal Data Protection and with the court.

NOTE: If you wish to withdraw your consent to the processing of personal data, request a correction, object to their processing, or request that your data be deleted ("the right to be forgotten"), you should send a request to this effect via email to the contact email address provided above for questions related to personal data protection. To avoid possible abuse, the above requests will be considered only if they are sent from the email used to register the account, and we reserve the right to request additional data to establish the identity of the requester and the data subject to whom the data relates.

Requests regarding personal data will be answered within one month, and in case it is necessary to extend this period, you will be informed of the extension and the reasons for the delay. We may refuse to process requests that are unreasonably repetitive or threaten the privacy of other users.