PRIVACY POLICY

 

Personal data administrator: "SIGNAL-Ivelina Hristova" ET, UIC: 201858687, with registered office and address of management: 8732 Stroino, Elhovo municipality, 7 Michurin Str. Phone: +359 889 529896; E-mail: gdpr@stroino.eu The administrator is responsible for processing the personal data of site visitors and customers.

 

Personal data collected and purposes of processing

 

Contact form (request/inquiry): we collect your name, e-mail, telephone and message, which you yourself provide to us in order to respond to your inquiry and offer the relevant service/information.

 

Online reservation/order: we collect your names, PIN, address, e-mail, telephone, information about the ordered products/services, etc., necessary for the execution of the purchase contract, delivery and execution of the order. This data is only used to process and execute your order and to issue an invoice (in accordance with commercial accounting legislation).

 

Cookies: The website uses cookies – small text files that are saved on your computer or mobile device and help the normal functioning of the site, analyzing traffic and improving content. We only use cookies necessary to operate the site (e.g. for sessions, saving language preferences, etc.) and, only with the user's consent, analytical/marketing cookies (to improve the user experience and statistics).

 

Legal basis for processing personal data

The processing of your personal data is carried out in the presence of at least one of the grounds under the GDPR (Art. 6) .We use as the main grounds: (i) performance of a contract (for the processing of the data in connection with the orders); (ii) assigned consent (your voluntary consent to the processing of the data, e.g. when registering on the site or accepting cookies); (iii) legal obligation (e.g. obligation under accounting law to store billing data for 5 years); and (iv) legitimate interest of the controller (such as customer relationship, improvement of services and protection against misuse). Where prior information or consent is required (e.g. for marketing and cookies), we will inform you explicitly. We process data only to the extent necessary to achieve the stated purposes.

 

Deadlines for storage of personal data

Personal data shall be kept for no longer than is necessary for the purposes of processing. In general, this means: order data – a minimum of 5 years (mandatory term under accounting and tax regulations); inquiry data via the contact form – usually up to 1-3 years after the last contact (unless you receive a new service). Where the law requires (for example, commercial accounting documents) or a user has given you consent to alonger storage, we will comply with the relevant time limits. We comply with the principle of "storage limitation" of the GDPR – personal data is stored only for the period necessary for the stated purposes.

 

Rights of data subjects

As a data subject, you have the following rights under the GDPR: the right to access the data that concerns you; the right to correct (correct) or delete ("right to be forgotten") data that is inaccurate or no longer necessary; the right to restrict the processing or object to the processing of your data; the right to portability (to receive your data in a structured format); as well as the right to complain to the Personal Data Protection Commission. To exercise your rights, you can write to us at the specified email or address. We will respond to your request within one month.

 

Use of cookies

Cookies are small text files that are stored on your device when you visit the website. They do not contain personal data and cannot identify you directly.

 

We use the following types of cookies:

Analytics cookies (_ga,_gid, gat) – provided by Google Analytics, they are used to collect information about user behavior in order to analyze traffic and improve content. Their shelf life varies from 1 minute to 2 years.

Mandatory cookies (PHPSESSID) – necessary to maintain an active session of the user during his stay on the site. Delete when closing the browser.

Functional cookies (cookieConsent) – stores the user's choice regarding the consent to the use of cookies. Retained for a period of 6 months.

Any cookies that are optional are only activated with the user's consent.

 

You can control and/or delete cookies through your browser settings. Please note that restricting cookies may affect the functionality of the website.

 

Share with third parties

For the execution of orders, data is provided to third parties, such as courier companies, payment service providers, accountants, etc., who act as "processors" of personal data within the meaning of GDPR. We conclude written contracts with them according to Art. 28 of the GDPR, which ensure that they will process the data only on our assignment, with the necessary technical and organizational measures. We keep a list of all processors with their contacts. Data may also be provided to government authorities under legal requirement (e.g. tax and judicial authorities). We do not sell personal data to third parties and we only share your data for the purposes described, according to the contract or the requirements of the law.

 

Contacts and Authorized Person

For questions about the processing of your personal data or to exercise your rights, you can contact the Data Controller:

 

Address: 8732 Stroino, Elhovo municipality, "Michurin" № 7

E-mail: gdpr@strono.eu

Phone: +359 889 529896

Current authorized person: Ivelina Hristova

 

If you believe that we do not process your personal data lawfully, please contact us to clarify the matter. You have the right to lodge a complaint directly with the Personal Data Protection Commission, and you have the right to a judicial remedy.

 

The address for filing a complaint with the Personal Data Protection Commission is:

 

1592 Sofia, "Prof. Tsvetan Lazarov" № 2

 

e-mail: kzld@cpdp.bg

 

website: www.cpdp.bg