I. WHO ARE WE
Brandex Bulgaria Ltd. /we, us/, VAT BG130371959 with registered office and management address 1 Kukush Street, Sofia 1309, Bulgaria is the controller of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation /GDPR/).
As a personal data controller, we are committed to processing and protecting your personal data as an individual in accordance with the requirements of the GDPR and this privacy policy. Please read it carefully and familiarize yourself with your rights.
II. PROVISION OF DATA
You provide us with your data:
1. when visiting our website
When you visit our website, by means of cookies, certain data from the device you are using is automatically sent to our website server, such as your Internet Protocol address (“IP address”), the type and language of the browser you are using and the date and time of your visit to our website, which makes it easier for us to improve the operation and efficiency of our website without enabling us to directly identify you or make other inferences about you and your identity.
2. when you contact us
When you contact us via email or the contact form on our website, we use the email and other data you provide us, as well as any additional information you have voluntarily decided to provide us with in your inquiry, only to respond to your query.
3. when you subscribe to our newsletter
When you subscribe to our newsletter, you voluntarily give your consent for us to use your email for the sole purpose of sending you our newsletter with our latest offers.
4. for the purpose of providing services on our part
When you enter into a contractual relationship with us, incl. when you register as a user in our online store and order products, you voluntarily provide us with your personal data and consent to their use in order for us to be able to provide you with our services, as well as for the purpose of fulfilling legal requirements that are imputed to us in obligation.
III. WHAT PERSONAL DATA ABOUT YOU WE PROCESS
In order to be able to provide you with our services, as well as to fulfill our legal obligations, when we contact you, we may collect and process the following categories of personal data about you:
1. personal information about you such as your name, address and others.
2. your contact details such as address, email, phone number and others.
3. other data about your identification for the purpose of fulfilling our legal obligations, without which we would not be able to enter into contractual relations with you and provide you with our services.
4. information collected during the use of our website, such as your Internet Protocol address (“IP address”), the type and language of the browser you use and the date and time of your visit to our website, and others.
5. any other information that you have provided us voluntarily during and in connection with the provision of services by us.
IV. ON WHAT BASIS WE PROCESS YOUR PERSONAL DATA
We process your personal data on one of the following legal grounds:
1. Based on your consent, including sending you our newsletter / Art. 6, paragraph 1, letter a) of the GDPR/.
2. For the performance of a contract we have concluded with you, incl. as a user in our online store, or to take actions at your request before concluding a contract with you / art. 6, paragraph 1, letter b) of the GDPR/.
3. For the fulfillment of our legal obligations / Art. 6, paragraph 1, letter c) of the GDPR/.
4. When the processing is necessary for the protection of our legitimate interests and the exercise or defense of legal claims, including for the purpose of preparation, exercise and defense in administrative and judicial cases and proceedings, as well as in enforcement proceedings and when there is no reason to assume that the right not to provide and disclose your personal data to third parties takes precedence over our legitimate interests / Art. 6, paragraph 1, letter f) of the GDPR/.
V. FOR WHAT PURPOSES DO WE USE THE INFORMATION YOU PROVIDE US
We collect, process and use the information you provide to us to:
1. To be able to provide you with the services for which you have engaged us, incl. to communicate with you and inform you of the progress of your order or enquiry. If you refuse to provide us with the information necessary to fulfill your order/enquiry, we will not be able to provide you with our services.
2. To fulfill our legal obligations, incl. accounting, tax, in the field of labor and social law and other legal obligations that are attributed to us by law.
3. To protect our legitimate interests, including for the purpose of preparation, exercise and defense in administrative and judicial cases and proceedings, as well as in executive proceedings and when there is no reason to assume that the right not to provide and disclose your personal data to third parties individuals takes precedence over our legitimate interests.
4. To send you our newsletter based on your consent. You can withdraw your consent at any time by contacting us at [email protected].
5. To maintain and improve our website and to optimize its use in order to make it convenient and useful for you.
In this regard, we inform you that our website uses cookies.
Cookies are small text files, in most cases letters and numbers, which are placed and stored in the browser or the hard drive of your device when you visit a website, incl. ours.
As mentioned in section II, 1., we use our cookies to make our website work more efficiently and to be more convenient and useful for you, including to ensure its security and protection against malicious attacks.
The cookies we use in connection with our online store have the sole purpose of recognizing you (your Internet Protocol address (“IP address”) and your browser) when you visit our website again in order to save the products in your cart, placed from you during your previous visit, and we would like to inform you that in this regard we do not use cookies to profile visitors to our website and online store.
Cookies placed by us on your device do not enable us to directly identify you or make other inferences about you and your identity or to profile you and do not cause any harm to your device, in particular they do not contain viruses, Trojan horses or other malicious software.
Third party cookies:
Our website allows third parties who analyze traffic or provide content to our website to place their own cookies on your device and access them.
Our website also uses the Google Analytics service for the purpose of evaluating the traffic to our website and its use, and in this connection we inform you that Google Analytics does not provide any personally identifiable information about you, incl. access to IP addresses. Google Analytics provides information in an anonymous form to Google, which uses it to evaluate how our website is used and to report to us about the activities carried out on our website in accordance with the terms of use of Google Analytics.
You can find out more about the use of cookies by Google here.
You can prevent the use of cookies by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on. The application connects to Google Analytics JavaScript specifying that information about the visit to the website should not be sent to Google Analytics.
We would like to emphasize that the use of cookies by third parties is subject to their own privacy policies and we do not have access to the information stored by these third parties about you. This also applies to our profiles on social networks and sharing platforms to which our site links.
Although most browsers are set by default to accept cookies automatically, in conclusion we would like to inform you that you can control, incl. block and/or delete cookies whenever you wish through your browser settings.
By using our website without changing your browser settings, you consent to our website’s use of cookies.
Please note that if you choose to delete or block cookies, many sites, including ours, will not function optimally or may stop functioning, so we do not recommend that you delete or block cookies when using our website.
VI. WHO WE PROVIDE YOUR PERSONAL DATA TO
We may disclose your personal data to external personal data processors engaged by us to process them at our direction and on our behalf, in the performance of our activity and our legal obligations, in order to achieve the purposes of the processing, such as an engaged Accountant/s from us. In order to protect your data, our contractors, subcontractors and service providers, incl. of IT services, are carefully selected by us.
Your personal data will not be provided by us to third parties, except:
1. Based on your consent / Art. 6, paragraph 1, letter a) of the GDPR/.
2. For the performance of a contract that we have concluded with you, or for taking actions at your request before concluding a contract with you / art. 6, paragraph 1, letter b) of the GDPR/.
3. For the fulfillment of our legal obligations / Art. 6, paragraph 1, letter c) of the GDPR/.
4. When the processing is necessary to protect our legitimate interests, including for the purpose of preparation, exercise and defense in administrative and judicial cases and proceedings, as well as in enforcement proceedings and when there is no reason to assume that the right to have your personal data not provided and disclosed to third parties takes precedence over our legitimate interests / Art. 6, paragraph 1, letter f) of the GDPR/.
On the basis of item 2 and for the purpose of providing our services, we may disclose your personal data to distributors, contractors, subcontractors, suppliers or our colleagues, without this list being exhaustive.
VII. HOW LONG WE PROCESS YOUR PERSONAL DATA
We process and store your personal data only to the extent necessary to achieve the purposes for which we collected it and you provided it to us – the provision of our services, unless we are required by law to store it for a longer period, after the outflow of which we destroy them.
For the purpose of sending our newsletter, we will use your email until you opt out of receiving our newsletter as explained above in section V., item 4.
VIII. WHAT ARE YOUR RIGHTS
According to the GDPR, you have the following rights:
1. Right of access / art. 15 of the GDPR/
You have the right to receive from us information whether we are processing your personal data and, if so, to receive from us information about: the purposes of the processing; relevant categories of personal data; the recipients to whom the personal data is or will be disclosed; the period for which the personal data will be stored, and if this is impossible, the criteria used to determine this period; the existence of the right to request from us the correction or deletion of the personal data or the restriction of their processing, or to object to such processing; the right to appeal to a supervisory authority; any available information about their source when the personal data is not collected from the data subject; the existence of automated decision-making, including profiling, as well as the meaning and intended consequences of this processing for the data subject, without this right adversely affecting the rights and freedoms of others.
2. Right to rectification / Art. 16 of the GDPR/
You have the right to ask us to correct inaccurate personal data.
3. Right to deletion (“right to be forgotten”) / Art. 17 of the GDPR/
You have the right to request that your personal data be deleted by us, unless its storage is necessary for:
a) to exercise the right to freedom of expression and the right to information;
b) to comply with a legal obligation that requires processing provided for in Union or Member State law that applies to us or for the performance of a task in the public interest or in the exercise of official powers that have been conferred on us;
c) for reasons of public interest in the field of public health;
d) for the purposes of archiving in the public interest; or
e) for the establishment, exercise or defense of legal claims.
4. Right to restriction of processing / Art. 18 of the GDPR/
You have the right to request from us the restriction of processing where one of the following grounds is present:
a) the accuracy of your personal data is disputed by you, for a period that allows us to verify its accuracy;
b) the processing is unlawful, but you do not want your personal data to be deleted, but instead request the restriction of its use;
c) we no longer need your personal data, but you require it for the establishment, exercise or defense of legal claims;
d) you have objected to the processing in accordance with Article 21, paragraph 1 of the GDPR.
5. Right to data portability / Art. 20 of the GDPR/
You have the right to receive from us your personal data in a structured, widely used and machine-readable format and you have the right to transfer this data to another controller to whom your personal data has been provided to us with your consent or on the basis of a contract concluded with you and the processing is done in an automated way.
6. Right to object / art. 21 et seq. of GDPR/
You have the right to object to processing of your personal data based on Article 6(1)(e) or (f) of the GDPR, including profiling. We will stop processing personal data unless we demonstrate that there are compelling legal grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
7. Right to withdraw your consent / Art. 7, paragraph 3 of the GDPR/
You can always withdraw your consent to the processing of your personal data by us by contacting us at [email protected] or at the address: 1 Kukush Street, Sofia 1309, Bulgaria.
Withdrawing your consent does not affect the lawfulness of the processing based on the consent given before its withdrawal.
8. Right to submit a complaint to a supervisory authority / Art. 77 of GDPR/
For Bulgaria, the supervisory authority is the Commission for Personal Data Protection, you can find more information about it here.
In order to exercise your rights, you can contact us at eu or at the address 1 Kukush Street, Sofia 1309, Bulgaria.
We will endeavor to provide you with information based on your requests within 30 days of receiving your written request, endeavoring to respond free of charge to your requests in relation to the above rights, but if your requests are manifestly unfounded or excessive, especially due to their recurring nature, we may then charge a reasonable fee to cover the administrative costs of processing them and providing you with information.
IX. HOW WE PROTECT YOUR PERSONAL DATA
To ensure that your personal data is processed in accordance with the GDPR, we have implemented sufficient technical and organizational measures to ensure the protection of your personal data from accidental or unlawful destruction and from unauthorized modification, disclosure or access.
X. LINKS TO THIRD PARTY WEBSITES
Our website and the information and messages we send you by email may sometimes contain links to third party websites or our profiles on social networks and sharing platforms. The personal data you provide through your visit to these websites, social networks and sharing platforms is not subject to this privacy policy and the processing of your personal data by these websites, social networks and sharing platforms is not our responsibility.
If you follow the link to other websites, social networks and sharing platforms, please be aware that these websites and sharing platforms have their own privacy policies that determine how your information is collected and processed when you visit those websites, social networks and sharing platforms.
XI. CHANGES TO OUR PRIVACY POLICY
Any changes we make to our privacy policy will be posted on our website and thus made available to you.
Last update: 15.08.2023