PERSONAL DATA POLITICS
Introduction
The security and proper use of personal data is of utmost importance to us. This Personal Data Policy is an integral part of the General Conditions located at: https://www.energysport-bg.eu/general-conditions. It does not regulate rights and obligations, but aims to explain to users what personal data we process in connection with the provision of goods and services, why and how we process them, including when it is necessary to disclose personal data to third parties. It also provides information on the rights that users have in relation to the processing of personal data by "SAKSENT" EOOD.
For the purpose of greater clarity and for the convenience of users, in many places in this Personal Data Policy, examples are given that illustrate why and/or how "SAKSENT" EOOD processes users' personal data. These examples are not part of this Privacy Policy and are not exhaustive.
Basic principles in processing personal data
We process personal data lawfully, in good faith and in a transparent manner; We process personal data collected for specific, explicitly stated and legitimate purposes and are not further processed in a manner incompatible with those purposes; The personal data processed are appropriate, related to and limited to what is necessary in relation to the purposes for which they are processed ("data minimization");
The personal data processed may be kept up-to-date at all times by us taking all reasonable measures to ensure the timely deletion or correction of inaccurate personal data, taking into account the purposes for which it is processed ("accuracy"). The personal data processed by us are stored in a form that allows the identification of the data subject for a period no longer than is necessary for the purposes for which the personal data are processed ("storage limitation");
Personal data processed by us is stored in a way that ensures an appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical or organizational measures ("integrity and confidentiality" );
Personal data administrator
The administrator of personal data is "SAKCENT" EOOD, with EIK 175131573, headquarters and management address in the city of Sofia 1000, 2 "Ivan Turgenev" St. If you have questions about privacy at "SAKTCENT" EOOD or want to contact us in connection with a matter related to the protection of personal data, you can contact our personal data protection officer at the following e-mail: energysport@abv.bg
This Privacy Policy may be amended in accordance with national and European legislation. Any change is effective from the moment of publication on this page. We advise you to check our website frequently to see the latest changes. Our privacy policy will not be changed in a way that allows for less protection of the personal data of our customers and users without their written consent.
What personal data we process
We collect your personal data to enable us to provide our goods and services and to continuously improve them. Here are the types of information we collect:
Information you provide us: we receive and store any information you provide in connection with the services of "SAKSENT" EOOD. For example: information related to searches on the platform, orders placed by you, your customer profile, e-mail, telephone, address, inquiries, requests for access to personal information, etc.
Automatic information: We automatically receive and store certain types of information when you use the "SAKCENT" EOOD website, such as: information about the use of the site, including your interaction with the content and services available through the site.
Like many websites, we use cookies and other unique identifiers and receive certain types of information when your web browser or device accesses the site.
For example: the Internet Protocol (IP) address used to connect your computer or other device to the Internet; e-mail and password; computer, device, and connection information, such as device type and application version or browser type, browser plug-in types and versions, operating system, or time zone setting; the location of your device or computer; content interaction information, such as content downloads, streams and playback details, including duration and number of simultaneous streams and downloads, and streaming and download quality network data, including information about
Your Internet Service Provider; connectivity data and any error or failure events; Site metrics (for example, technical errors, your interactions with service features and content, settings preferences and backup information, etc.
We may also use device identifiers, cookies, and other technologies on devices, applications, and web pages to collect browsing, usage, or other technical information for fraud prevention purposes.
Information from other sources: we may receive information about you from other sources such as: information about the delivery of goods purchased through the site, information about the number of page views.
What are cookies? In order to provide our services and successfully deliver each of the products offered on the site to you, we use cookies. For more information about cookies and how we use them, please read our Cookie Policy.
On what basis do we collect and process your personal data?
We collect and process your personal data in accordance with the law and in accordance with this Policy and the General Terms and Conditions. We process data when you have given your express consent to the processing of personal data, or the processing is necessary for the performance of a contract to which you are a party, or for taking steps on your initiative before the conclusion of a contract (which step is considered the simple use of the site without having to have made a purchase request). Data processing is also necessary for the purposes of our legitimate interest, namely: when without processing a certain type of data we would not be able to provide our services and conclude a contract for the purchase and sale of each of the goods on the site, to improve the site and serving our customers and bringing value to our users.
For example, the collection of information about site searches, its use and the analysis of this data is our legitimate interest because it is a primary method of determining the quality of our services and goods. Due to the existence of the above grounds for collecting and processing personal data, in the event that you consider that you do not wish to provide "SAKCENT" EOOD with the personal data necessary to conclude a Purchase and Sale Agreement, "SAKCENT" EOOD will be in a factual impossibility to provide you with its goods.
Purposes of personal data processing
We process your personal data in order to provide and improve the goods and services of the site. These goals include:
Purchase and delivery of products and services. We use your personal information to take and process orders, deliver products and services, make payments and communicate with you about orders, products, services and promotional offers.
Providing, troubleshooting and improving the services of "SAKSENT" EOOD. We use your personal data to provide functionality, analyze performance, correct errors, and improve the usability and performance of the site.
Referrals and Personalization. We use your personal data to recommend features, products and services that may be of interest to you, to identify your preferences and to personalize your site experience.
Fulfillment of statutory obligations. In some cases, we have a legal obligation to collect and process your personal data. For example, We process personal data to fulfill obligations arising from accounting and tax law.
To carry out communication. We use your personal data to communicate with you about the goods and services we provide through various channels (e.g. phone, email, chat).
Prevention of fraud and credit risks. We process personal information to prevent and detect fraud and abuse in order to protect the security of our customers.
Purposes for which we seek your consent. We may also ask for your consent to process your personal data for a specific purpose that we communicate to you. Where you consent to us processing your personal information for a specific purpose, you can withdraw your consent at any time and we will stop processing it. However, the same does not apply if the processing is necessary for another lawful purpose.
Categories of persons to whom we disclose users' personal data
Information about our customers is an important part of our business and we do not sell it to third parties. "SAKSENT" EOOD may share the personal information of its customers (or part of it) only as described below and with third parties who follow practices that are at least as protective as those described in this Privacy Policy.
SAKCENT" EOOD may share personal information of its customers with third parties who process personal data. The processors of personal data are persons who process personal data on behalf of and on behalf of "SAKSENT" EOOD based on a written agreement. They do not have the right to process the personal data provided to them for purposes other than the performance of the work assigned to them by "SAKCENT" EOOD. Processors are obliged to comply with all instructions of "SAKSENT" EOOD
"SAKCENT" EOOD takes the necessary measures to ensure that the involved processors strictly comply with the legislation on the protection of personal data and the instructions of "SAKCENT" EOOD, as well as that they have taken appropriate technical and organizational measures to protect personal data.
Examples of personal data processors are:
Courier service providers;
Providers of information systems implementation and/or maintenance services that sometimes need to access personal data that is processed in the respective systems for the purposes of providing the services;
Hosting service providers
"SAKCENT" EOOD can share personal information of clients and law firms, accounting firms or other providers of consulting services when the same is necessary for the implementation of the activity of "SAKCENT" EOOD, in the event of a dispute or for the purpose of optimization; "SAKSENT" EOOD may share personal information of its customers with banks and payment institutions. In connection with the service of payments to users, made via bank or through a payment institution, it is necessary to exchange data between "SAKCENT" EOOD and the relevant bank or payment institution.
Third parties in connection with a transformation (eg merger or acquisition) or transfer of an enterprise. In case of transformation of "SAKCENT" EOOD, as well as in case of transfer of assets in accordance with the applicable legislation, it is possible that the personal data of the users, administered by "SAKCENT" EOOD, may be provided to a third party - legal successor.
Authorities. The legislation of the Republic of Bulgaria requires "SAKSENT" EOOD to store certain personal data for users for a certain period. In the presence of prerequisites established by law, these personal data, processed by "SAKCENT" EOOD, should be provided to the competent authorities.
What methods do we use to protect your personal information?
We work hard to protect the security of your information during transmission by using a Secure Sockets Layer (SSL) certificate that encrypts the information you enter. Along with the above, we maintain physical, technical and procedural safeguards in relation to the collection, storage and disclosure of your personal data. Our security procedures mean that we may sometimes ask for proof of identity before disclosing personal information to you. Devices on which your personal data are stored offer security features to protect them from unauthorized access and data loss.
It is important to protect yourself against unauthorized access to your password and to your computers and devices. Remember to sign out of your account when you're done using a shared computer.
Колко време съхраняваме личните Ви данни
"SAKSENT" EOOD stores users' personal data for as long as is necessary to achieve the goals specified in this Personal Data Policy or to comply with legal requirements.
For example: in order to fulfill our obligations arising from tax and accounting legislation, data about purchases from a given user is stored for a period of 12 years.
After the expiration of the terms for processing personal data, they are anonymized or deleted/destroyed, unless:
• are necessary for pending judicial, arbitration, administrative or executive proceedings, or in the event of a complaint received from the relevant user, which should be considered by "SAKCENT" EOOD; or
• the respective user has exercised the right to request the restriction of the processing of personal data concerning him/her;
"SAKTCENT" EOOD makes efforts to ensure that the processed personal data for users is updated (and if necessary corrected), and that no data is stored that is not necessary to achieve the goals described above.
Обща информация за правата на физическите лица
"SAKSENT" EOOD takes action at the request of a natural person to exercise a right under this section, only if it is able to identify the relevant person.
Only persons who can be identified by "SAKCENT" EOOD have the opportunity to exercise their rights under this section. If the purposes for which "SAKCENT" EOOD processes personal data do not or no longer require the identification of a given natural person, "SAKCENT" EOOD has no obligation to maintain, obtain or process additional information to identify the individual for the sole purpose of taking action based on that individual's request.
"SAKSENT" EOOD notifies individuals of the actions taken within a period of up to one month from receipt of a request under this section, and in certain cases this period can be extended by up to two months. "SAKSENT" EOOD provides individuals with information regarding the actions taken in connection with their requests to exercise rights under this section without undue delay and in any case within one month of receiving the request.
If necessary, this period can be extended by another two months, taking into account the complexity and number of requests. "SAKSENT" EOOD informs the relevant person of any such extension within one month of receiving the request, indicating the reasons for the delay. If a request is refused, "SAKTCENT" EOOD notifies the relevant individuals of their rights.
If "SAKCENT" EOOD does not take action on the request of a natural person, "SAKCENT" EOOD shall notify him without delay and at the latest within one month of receiving the request of the reasons for not taking action, as well as of the possibility of submitting complaint to the Commission for the Protection of Personal Data and seeking legal protection. In certain cases, "SAKSENT" EOOD may request additional information to confirm the identity of individuals.
In the event that "SAKCENT" EOOD has reasonable concerns regarding the identity of the individual who submits a request under this section, "SAKCENT" EOOD may request the provision of additional information necessary to confirm the identity of the person.
Actions taken by "SAKCENT" EOOD upon and in connection with submitted requests to exercise rights under this section are completely free of charge for individuals, unless their requests are clearly unfounded or excessive. When a person's request is clearly unfounded or excessive (for example, due to its repetition), "SAKSENT" EOOD has the right, at its discretion: (a) to refuse to fulfill the request; or (b) require the payment of a reasonable fee determined based on the administrative costs necessary to provide the requested information or to take the requested action.
Users have the right to:
To access the personal data relating to them
Users have the right to receive from "SAKTCENT" EOOD information on whether personal data related to them is being processed. If so, users have the right to access the relevant data.
Correction of inaccurate or out-of-date personal data
In the event that the personal data processed by "SAKCENT" EOOD are inaccurate or out of date, users have the right to demand from "SAKCENT" EOOD to correct them.
Erasure of my personal data ("Right to be forgotten")
Users have the right to request from "SAKCENT" EOOD the deletion of their personal data in the following cases:
• the personal data are no longer necessary for the purposes for which they were collected or processed;
• the user has withdrawn his consent, on which the processing of personal data is based, and there is no other legal basis for the processing of the same;
• the user has objected to the processing of personal data, which is based on a legitimate interest of "SAKCENT" EOOD, unless there are other legal grounds for the processing that take precedence over the interests, rights and freedoms of the user, or the processing of data is necessary for the establishment, exercise or defense of legal claims;
• the user has objected to the processing of personal data for the purposes of direct marketing and there are no other legal grounds for the processing of this data;
• the personal data relating to the respective user has been unlawfully processed;
• personal data must be deleted by "SAKCENT" EOOD in order to comply with a legal obligation arising from the law of the Republic of Bulgaria or the law of the European Union.
Restricting the processing of my personal data
As of 25.05.2018, users have the right to request from "SAKSENT" EOOD to limit the processing of personal data related to them, in the following cases:
• the accuracy of the personal data is contested by the user, for a period that allows "SAKSENT" EOOD to check the accuracy of the personal data;
• the processing is unlawful, but the user does not wish the personal data to be deleted, but instead requests the restriction of its use;
• "SAKSENT" EOOD no longer needs the personal data for the purposes of processing, but the user requires them to establish, exercise or defend legal claims;
• the user has objected to the processing of personal data, based on a legitimate interest of "SAKCENT" EOOD, pending verification of whether the legal grounds of "SAKCENT" EOOD take precedence over the interests of "SAKCENT" EOOD.
Portability of my personal data
As of 25.05.2018, users have the right to receive from "SAKCENT" EOOD the personal data provided by them in a structured, widely used and machine-readable format, as well as to transfer this data to another administrator without hindrance from "SAKCENT" EOOD, insofar as:
• "SAKSENT" EOOD processes this data for the purposes of concluding or executing a contract with the user, or on the basis of consent given by the latter; and
• the processing of the relevant data is carried out in an automated manner.
Users have the right to request that "SAKSENT" EOOD transfer their personal data directly to another administrator, when this is technically feasible.
Objection to the processing of personal data
Users have the right, at any time and on grounds related to their specific situation, to object to the processing of personal data concerning them, when "SAKSENT" EOOD processes their data for the protection of its legitimate interests.
In certain cases, this right is unconditional and "SAKSENT" EOOD will always stop data processing if an objection is made by users.
For example, these are the cases where "SAKSENT" EOOD processes personal data for the purposes of direct marketing.
In other cases, depending on the nature of the objection and the circumstances presented by the relevant user, "SAKTCENT" EOOD will carry out an internal investigation regarding the objection and will rule on it in accordance with this section, by: (a) notifying the user that it will stop the processing of his/her personal data; or (b) reasonedly refuses to stop the processing of his/her personal data, if there is a legal basis for doing so.
You can exercise the right to access, correct, delete, restrict processing and portability of your personal data through our built-in GDPR module.
Right of appeal to a supervisory authority
Users have the right to submit complaints or reports to the Commission for the Protection of Personal Data (PCPD) if, in their opinion, "SAKSENT" EOOD violates the legislation on the protection of personal data. Instructions for submitting complaints are published on the CPLD website https://www.cpdp.bg
After 25.05.2018, users can also submit complaints to other supervisory authorities on the territory of the European Union, as provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and for the repeal of Directive 95/46/EC (General Data Protection Regulation) or also called "GDPR".