At "Zaharna Prachitsa” EOOD, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, process, and protect your personal information in accordance with the Personal Data Protection Act of Bulgaria and the European Union's General Data Protection Regulation (GDPR). By using our Site and Online Store, you consent to the practices described in this policy.
1. Data Controller:
The data controller responsible for your personal data is:
"Zaharna Prachitsa” EOOD
Registered office and management address: Burgas, bl. 79, entrance D, 3rd floor
EIC: 205117511
Phone: +359893666379
Email: plastiri123@abv.bg
2. Personal Data We Collect:
We may collect the following types of personal data from you:
a. Information you provide directly: This includes your name, email address, phone number, shipping address, billing address, payment information (credit/debit card details are processed securely by our payment gateway and not stored by us), account username and password (if you register an account), order history, and any other information you voluntarily provide to us through forms on our Site or when communicating with us.
b. Information collected automatically: When you use our Site, we may automatically collect certain information, such as your IP address, browser type, operating system, referring website, pages you visit on our Site, and the dates and times of your visits. We may use cookies and similar tracking technologies to collect this information. Please refer to our separate **Cookie Policy** [**Insert link to your Cookie Policy here, if you have one**] for more details.
3. How We Use Your Personal Data:
We may use your personal data for the following purposes:
a. To process and fulfill your orders, including order confirmation, shipping, and payment processing.
b. To manage your account on our Site (if you register).
c. To communicate with you regarding your orders, inquiries, and customer support requests.
d. To personalize your experience on our Site and provide you with relevant content and product recommendations.
e. To send you marketing communications (such as newsletters and promotional offers) if you have provided your consent to receive them. You have the right to withdraw your consent at any time.
f. To improve our Site, products, and services based on user feedback and usage patterns.
g. To detect and prevent fraudulent activities and ensure the security of our Site and transactions.
h. To comply with applicable legal obligations.
4. Legal Basis for Processing Your Personal Data:
We will only process your personal data when we have a lawful basis to do so, which may include:
a. Consent: Where you have given us explicit consent to process your personal data for a specific purpose (e.g., for marketing communications).
b. Contractual Necessity: Where processing is necessary for the performance of a contract with you (e.g., to process your order and deliver the products).
c. Legal Obligation: Where processing is necessary for us to comply with a legal obligation.
d. Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests (e.g., for improving our services and preventing fraud).
5. Sharing Your Personal Data:
We may share your personal data with the following categories of recipients:
a. Service Providers: We may share your information with third-party service providers who assist us in operating our Site, processing payments, fulfilling orders, delivering products, sending communications, analyzing data, and providing other services on our behalf. These providers are contractually obligated to protect your personal data and process it only in accordance with our instructions.
b. Payment Processors: Your payment information is securely transmitted to and processed by our chosen payment gateway provider "Stripe" for the purpose of processing your payments.
c. Courier Services: We share your shipping address and contact details with courier companies DPD and other to facilitate the delivery of your orders.
d. Legal Authorities: We may disclose your personal data to legal authorities or other governmental bodies if required by law or legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
6. Security of Your Personal Data:
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption, secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal data.
7. Your Rights Regarding Your Personal Data:
Under the GDPR and applicable Bulgarian law, you have certain rights regarding your personal data, including:
a. The right to access: You have the right to request access to the personal data we hold about you.
b. The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
c. The right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that we erase your personal data.
d. The right to restriction of processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data.
e. The right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
f. The right to object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
g. Rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless there is a legal basis for such processing.
h. The right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.
8. Data Retention:
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period may vary depending on the type of data and the specific processing purpose. For example, we will typically retain order information for as long as required by tax and accounting laws.
9. Links to Other Websites:
Our Site may contain links to other websites that are not operated by us. We are not responsible for the privacy practices of these third-party websites. We encourage you to review the privacy policies of any website you visit.
10. Updates to This Privacy Policy:
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post any changes on this page and, if the changes are significant, we may provide a more prominent notice. We encourage you to review this Privacy Policy periodically for any updates.
11. Contact Us:
If you have any questions or concerns about our Privacy Policy or our processing of your personal data, please do not hesitate to contact us using the contact details provided in Section 1. You also have the right to lodge a complaint with the relevant data protection supervisory authority in European Union.
By using our Site and Online Store, you acknowledge that you have read and understood this Privacy Policy.
