Privacy Policy
Information for Personal Data Administrator:
Bases and purposes for using your personal data
We process your personal data on the following grounds:
• The general terms and conditions for using the website;
• Explicit consent from you – the purpose is specified for each specific case;
• In case of a legal obligation;
In the following paragraphs, you will find detailed information regarding the processing of your personal data depending on the basis on which we process them.
For contract performance
We process your personal data for the purposes of using the website in accordance with the terms and conditions
Purposes of processing (when applicable):
1. Establishing your identity;
2. Providing the functionalities of our website
On this basis, we only process personal data related to the user profile created by you. We delete the data collected on this basis 2 years after the termination of the contractual relationship, regardless of whether it is due to the contract's expiration, termination, or other reasons.
After Your Consent
We process your personal data on this basis only after explicit, unequivocal, and voluntary consent from your side. We will not anticipate any adverse consequences for you if you refuse the processing of personal data.
Consent is a separate basis for processing your personal data, and the purpose of processing is specified in it, and it does not overlap with the purposes listed in this policy. If you give us the relevant consent and until its withdrawal or termination of any contractual relationship with you, we prepare suitable product/service offers for you, conducting detailed analyses of your basic personal data;
Data Processed on this Basis:
On this basis, we may process personal data for the purposes of direct marketing, including website usage data and data from social media profiles.
Providing Data to Third Parties
On this basis, we may provide your data to marketing agencies, Facebook, Google, or similar entities.
Withdrawal of Consent
The provided consents can be withdrawn at any time. Withdrawing consent does not affect the performance of contractual obligations. If you withdraw your consent for the processing of personal data for any or all of the methods described above, we will not use your personal data and information for the specified purposes mentioned above. Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal.
To withdraw your consent, you only need to use our website or contact our data.
When we delete data collected on this basis
We delete data collected on this basis upon your request or 12 months after their initial collection.
How we protect your personal data
To ensure adequate data protection for the company and its clients, we implement all necessary organizational and technical measures as provided by the Personal Data Protection Act.
The company has established rules to prevent abuse and security breaches, which support processes for data protection and security of your data.
To ensure maximum security during data processing, transmission, and storage, we may use additional protection mechanisms such as encryption, pseudonymization, and more.
Consumer Rights
Every user of the website has all rights for personal data protection as per Bulgarian legislation and European Union law.
The user can exercise their rights by sending a message to our email.
Every user has the right to:
• Information (regarding the processing of their personal data by the administrator);
• Access to their own personal data;
• Correction (if the data is inaccurate);
• Deletion of personal data (the right to be forgotten);
• Restriction of processing by the administrator or data processor;
• Portability of personal data between different administrators;
• Object to the processing of their personal data;
• The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them;
• Right to judicial or administrative redress in case the rights of the data subject have been violated.
The user can request the deletion if one of the following conditions is met:
• Personal data is no longer necessary for the purposes for which they were collected or otherwise processed;
• The user withdraws their consent on which the processing of the data is based and there is no other legal basis for processing;
• The user objects to the processing while it is being verified whether the legitimate grounds of the administrator take precedence over those of the user;
• Personal data has been processed unlawfully;
• Personal data must be erased to comply with a legal obligation under Union or Member State law to which the administrator is subject;
• Personal data has been collected in connection with the offer of information society services to children, and consent is given by the holder of parental responsibility for the child.
The user has the right to restrict the processing of their personal data by the administrator when:
• The accuracy of personal data is contested. In this case, the processing is restricted for a period that allows the administrator to verify the accuracy of the personal data;
• Processing is unlawful, but the user does not want their personal data to be erased but instead requests a restriction on their use;
• The administrator no longer needs the personal data for the purposes of processing, but the user needs them to establish, exercise, or defend legal claims;
• The user has objected to processing pending the verification whether the legitimate grounds of the administrator override those of the user.
Right to Data Portability
The data subject has the right to receive the personal data that concern them and that they have provided to the administrator in a structured, widely used, and machine-readable format and has the right to transfer this data to another administrator without hindrance from the administrator to whom the personal data have been provided when processing is based on consent or a contractual obligation and the processing is carried out by automated means. When exercising their right to data portability, the data subject has the right to have their personal data directly transferred from one administrator to another when this is technically feasible.
Right to Object
Users have the right to object to the processing of their personal data by the administrator. The data controller is obliged to cease processing unless they demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. When objecting to the processing of personal data for direct marketing purposes, processing must be terminated immediately.
Complaint to the Supervisory Authority
Every user has the right to file a complaint against the unlawful processing of their personal data with the Commission for Personal Data Protection or with the competent court.