Privacy Policy
PRIVACY POLICY
I. Introduction
Art. 1 This privacy policy is intended to clarify for the users ("Users") of the www.race-roast.com website ("Web Page") what personal data is collected, stored and processed, how this occurs, who has access to the personal data and any other matters relating to the personal data. The Administrator of the personal data is "Krivo Butalo" EOOD, with UIC: 207366803, with its registered office and registered address in Sofia 1729, Mladost 1A, 516 (the "Administrator").
Art. 2 The Administrator collects and subsequently stores and processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
II. Why and how do we process personal data?
Art. 3 The Administrator uses the personal data of Users to provide the services offered on the Web Page, as well as statutory or necessary additional administrative actions. This includes:
- Collecting, storing and processing the personal data provided by the User when creating an order, such as names, email address, telephone number, delivery address, etc;
- At the User's request, collecting, storing and processing email address and/or phone number in order to send promotional materials, offers, newsletter, etc.;
- Collecting, storing and processing of the personal data provided by the User when it is necessary for a representative of the Administrator to contact the User regarding products requested, delivery of such or for any other purpose, within the framework of the legal relationship established between the Administrator and the User;
- Storage and processing of the personal data provided by the User and their provision to a third party, licensed courier or postal operator, when sending the ordered products;
- Collection and processing of other personal data necessary for the smooth operation of the Web Page, order placement, its dispatch to the User and other situations related to the legal relationship arising between the Administrator and the User.
Art. 4 The collection and use of personal data shall be carried out only within the limits set by law and always with the consent of the User.
III. What personal data do we collect and subsequently process?
Art. 5 The Administrator collects and processes only and exclusively the personal data voluntarily provided by the User, necessary for the smooth and facilitated use of the Web Page and the organization of order and delivery. Such data may be the User's name, email address, delivery address, additional instructions for the courier operator, telephone number, content of the order, so-called "cookies" that collect information about the activities carried out on the Web Page, such as the collection of products in the "Shopping Cart", the IP address of the User, clicks on the Web Page, etc.
IV. How do we store and ensure the protection of personal data?
Art. 6 The Data Administrator undertakes to comply with all requirements concerning the protection of personal data provided to it in connection with the legal relationship arising between it and the User. This includes the use of the HTTPS data security protocol and the anonymisation of data where possible, such as the details of the means of payment used when making a payment on the Web Page.
Art. 7 The Administrator encourages Users to make the necessary efforts on their part to prevent their personal data from being leaked from the Web Page. Such efforts include keeping username and password confidential, using home or trusted devices when using the Web Page, etc.
V. Who has access to personal information and to whom is it provided?
Art. 8 Personal data are provided to third parties only and exclusively when this is necessary for the implementation of the actions required by the Administrator for the quality service of the interests of the User in the legal relationship between them. Such third parties could be postal and courier operators on the territory of the Republic of Bulgaria, when such will organize and execute the delivery of products ordered by the User, (XXXXXX) - the third party responsible for organizing the payment of the amount due for an order placed on the Web Page, etc.
VI. What are the rights of Users and how are they exercised?
Art. 9 The rights of the Users of the Website regarding the collection, storage and processing of their personal data are mainly regulated by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. The Administrator undertakes to protect these rights of the Users of the Web Page in relation to the legal relationship between them. These rights include:
- The right to access their personal data;
- The right to information about the personal data stored and processed;
- The right to request the erasure of personal data, where possible;
- The right to object to this Privacy Policy;
- The right to withdraw consent to the collection and processing of personal data;
- Any other right governed by national or international law applicable to Users in the territory of the Republic of Bulgaria.
Art. 10 The rights shall be exercised by contacting the Administrator or, in case of conflict, the Commission for Personal Data Protection.
Art. 11 Any request for access to personal data shall be considered within one month of its receipt. The Administrator shall be obliged to act on all requests made by the User within that period.
VII. Other
Art. 12 The Administrator shall disclose the contact channels for matters related to the privacy policy of the Web Page, and shall keep them active and accessible to Users.
Art. 13 The Administrator reserves the right to modify and amend this Privacy Policy, disclosing to this end the Users whose data are subject to collection, storage and processing.