Source: https://www.shopsector.com/page/privacy-policy
Timestamp: 2019-04-20 15:24:57+00:00

Document:
Бисквитката е малък текстов файл, който се записва на Вашия компютър или мобилно устройство и се изтегля от него при следващи посещения. ShopSector.com използва бисквитки с цел подобряване и улесняване на Вашето посещение. Не използваме бисквитки за съхраняване на лична информация или за разкриване на информация на трети лица.
Seat and registered office: : the city of Sofia 1407, Lozenets District, Kozyak St.
Correspondence address: the city of Sofia 1407, Lozenets District, Kozyak St.
Phone: 0895 12 16 16.
Seat and registered office: city of Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence address: city of Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
guarantees for the implementation of the contract for the provision of services.
integrity and confidentiality of processing and guaranteeing the appropriate level of security of personal data.
to meet its obligations to the National Revenue Agency, the Ministry of the Interior and other public and municipal authorities.
What type of personal data does the Company collect, process and store?
Registration of a customer in the on-line store and implementation of a distance sale contract - the purpose of this operation is to set up an account for use of the on-line store for purchasing goods and the provision of data for contact necessary for the delivery of the purchased goods. The registration and setting an account to use the on-line store is not a mandatory step for the provision of the service and it is accessible to a large extent without the registration of an account by the "Quick Order" option.
Impact assessment findings: Based on the impact assessment, the officer in charge of the protection of personal data is of the opinion that the operation "User registration in the on-line store and Implementation of a distance purchase and sale contract" is admissible and gives sufficient guarantees for the protection of the rights and lawful interests of the data subjects in compliance with the requirements of GDPR.
The conclusion and execution of a commercial transaction with a customer or partner - the purpose of this operation is the conclusion and execution of a contract with a commercial partner or customer and its administration. Given the limited scope of the collected personal data and the fact that part of the data are collected from sources accessible to the general public, the Officer in charge of personal data protection believes that the impact assessment of the operation is not necessary.
Sending newsletters and advertising messages - the purpose of this operation is the administration of the process of sending newsletters to customers, who have stated their wish to receive it. Given the limited scope of the collected personal data, the Officer in charge of personal data protection believes that the impact assessment of the operation is not necessary.
Exercising the right to withdrawal or to complaint - the purpose of this operation is the administration the process of exercising the right to withdrawal or complaint by the customer. Given the limited scope of the collected personal data, the Officer in charge of personal data protection believes that the impact assessment of the operation is not necessary.
Buying goods - the purpose of this operation is to assist the transfer of goods by signing a purchase and sale agreement with a natural person.
Purpose of data collection: 1) Contacting the Customer and sending information intended for him; 2) for user registration in the on-line store, as well as 3) for sending a newsletter.
Grounds for processing your personal data - by accepting the General Terms and Conditions and the registration in the on-line store or by placing an order without registration, or when a written contract is signed between the Controller and you, the established contractual relations serve as grounds for processing your personal data - Art. 6, para. 1, letter (b) of GDPR. Your data for receiving a newsletter shall be processed by virtue of your explicit consent - Art. 6, para. 1, letter (a) of GDPR.
Additional data provided by you - if you wish to add data to your account, you can fill in the data for surname, address, phone number and location.
Purpose for collecting data: Adding additional information about the user and his/her user account.
Grounds for processing data: You have given your explicit consent for the processing of personal data for one or more specific purposes - 6, para. 1, letter (a) of GDPR at the moment of registration into the on-line store.
Shipping delivery data (names, phone, e-mail, address).
Purpose for which the data are collected: Implementation of the obligations by the Controller under the distance purchase and sale contract and delivery of the purchased goods, including in exercising the right to return and replace or reject purchased goods.
Grounds for processing your personal data - by accepting the General Terms and Conditions and the registration in the on-line store or by placing an order without registration, or when a written contract is signed between the Controller and you, the established contractual relation serves as grounds for processing your personal data - Art. 6, para. 1, letter (b) of GDPR.
genetic and biometric data, data about the health status or sexual life or sexual orientation.
(3) The personal data are collected by the Controller from the persons they relate to.
(4) The Company is not engaged in automated decision making with data.
(5) The Company does not collect and process data about persons under 16 years of age, unless with the explicit consent of their parents or legal representatives.
Art. 5. (1) The Controller shall keep your personal data for a term no longer than the existence of your account in the on-line store or the execution of the order via the "Fast Delivery" option. After deleting your account or upon successful completion, the Controller shall put in the necessary effort to erase and destroy all your data without any unnecessary delay or to anonymize them (i.e. to bring them into a form which does not disclose your identity).
(2) The Controller shall store your personal data provided in connection to on-line orders for a term of 5 years for the purpose of protecting the legitimate interests of the Controller in legal and administrative disputes with users of the on-line store, whereas the accounting records shall be stored for the statutory period of time.
(3) The Controller shall notify you if it is necessary to extend the term of data storage in order to meet the statutory obligation or in view of the legitimate interests of the Controller, or otherwise.
Art. 6. The Controller shall store the personal data of the legal representatives of its trade partners for the term of contract implementation, in order to meet the legitimate interests and statutory obligations of the Controller, whereas this term can exceed the term of the concluded contract.
Art. 7. (1) The Controller may at its own discretion transmit part or all of your personal data to Data Processors for the purposes of processing, with which you have agreed, in compliance with the requirements of Regulation (EU) 2016/679 (GDPR).
(2) The Controller notifies you if it intends to transfer part or all your personal data to third countries or international organizations.
Art. 8. (1) If you do not wish all or part of your personal data to be further processed by the Company for a particular or all purposes of processing, you may at any time withdraw your consent for processing by a request in free text format to that effect.
(2) The Controller might require that you prove your identity and the identity of the person to whom the data pertains by requesting from you to enter your e-mail address and password for access to the website at the office of the Company in the presence of our employee.
(3) By withdrawing your consent for the processing of personal data that are mandatory for the registration and maintenance of an account at the on-line store, your account is deactivated. Naturally, you can view the on-line store and the offered products and place orders as a guest or you can make a new registration.
(4) If there is an order placed by you, which is currently processed, you can withdraw your consent for processing after the successful execution of the order at the earliest.
Art. 9. (1) You have the right to request and receive from the Controller a confirmation whether personal data related to you are being processed and if you are a registered user you can check your account at any time and see the personal data that you have provided for processing.
(2) You have right to access the data related to you, as well as to the information concerning the collection, processing and storage of your personal data.
(3) The Controller provides upon request a copy of the processed personal data related to you in electronic form or in any other appropriate form.
(4) Access to data is provided free of charge, yet the Controller reserves its right to charge an administrative fee if the requests are repetitive or excessive.
Art. 10. You can rectify or complete the inaccurate or incomplete personal data related to you directly through your account on the website or by sending a request to the Controller.
The e-mail address used for your registration in the on-line store.
(4) To be able to exercise your right to be forgotten, you need to file a request to this effect and send the request by e-mail to the Controller.
(5) The Controller may request that you verify your identity to the identity of the person the data relate to.
(6) If there is an order placed by you, which is currently processed, you can request to be "forgotten" after the successful completion of the order at the earliest.
(3) Following the erasure of your personal data, your account will be no longer active. Naturally, you can view the on-line store and the offered products and place orders as a guest or you can make a new registration.
(7) The Controller does not erase the data which it is legally required to store, including for protection against claims brought against it in court or in order to prove its rights.
The processing is unlawful, yet you oppose the erasure of your personal data, but request the restriction of their use instead.
You have objected to processing pending the verification whether the legitimate grounds of the Controller override your interests.
Art. 13. (1) You shall have the right to withdraw at any time or receive in a machine-readable format the data that are stored and processed for you concerning the use of the services of the Controller by a request sent by e-mail.
(2) You can request that the Controller transmits directly your personal data to another Controller specified by you, when this is technically feasible.
Art. 14. You may ask the Controller to provide to you information about all recipients to whom the personal data, for which correction, erasure or restriction of processing have been requested, have been disclosed. The Controller may refuse to provide this information, if this is not possible or involves disproportionate effort.
Art. 15. You can object at any time against the processing of personal data by the Controller concerning him, including if the data are processed for the purposes of profiling or direct marketing.
Art. 16. (1) If the Controller ascertains a breach of your personal data security, which might result in high risk for your rights and freedoms, he shall notify you without undue delay of the breach, as well as of the measures that have been taken or are about to be taken.
The notification might involve disproportionate effort.
Art. 17. For the purposes of processing your personal data and the provision of the service to its full functional scope and in view of your interests, the Controller may provide your data to the following data processors - see the list of data processors. The above data processors shall meet all legal and security requirements for processing and storing your personal data.
Art. 18. The Controller shall not transfer your data to third countries.
Art. 20. You can exercise all your rights for protection of your personal data through the standard forms enclosed herein. Naturally, these standard forms are not mandatory and you can file your requests in free text format, as long as it contains a statement of what identifies you as the personal data owner.
Art. 21. If the consent is related to a transfer, the Controller shall describe the possible risks related to the transfer of data to third countries if there is no effective solution of adequate protection and appropriate remedies.
Personal data is any information, which may be used for the identification of a person. It is possible that you are requested to provide personal information every time you contact us or our partners in view in connection to the provision of our products and services. The Controller and its partners can share this information among themselves and use it only in compliance with this Policy for the protection of personal data and all applicable legal provisions. Your personal data are processed only on the territory of the Republic of Bulgaria, only for the term and for the purposes for which they have been provided.
When you register an account, purchase a product, take part in a lottery, etc., we can collect various types of information, including but not limited to a name, post address, phone number, e-mail address, preferred channel of communication, etc.
In the cases when it is necessary to issue certain documents, e.g. an invoice, possibly additional data can be requested in compliance with the requirements of the legal framework.We save the history of orders placed by each account registered on the website.
We process your personal data in order to meet our obligations as a party to the goods and services sale contract. It is possible that we use them regularly to send important messages such as notifications about placed orders, changes in the General Terms and Conditions or other rules.
If you have stated your consent, we process your data in order to bring you news about the latest promotions and advertising activities. Once you have stated your consent, you can withdraw it at any time.
If you have stated consent for participation in certain events (a competition, lottery, game, etc.), we process the data provided by you in order to manage these activities.
The data provided as part of a job application will be used solely for the purposes of selection and evaluation of the fitness of the applicant for the respective position.
On certain occasions, in order to meet our obligations under the contracts concluded with you or any legal obligations that we might have, we will need or will be obliged to disclose your personal data to our partners (e.g., transport, courier, service, information, etc. companies) or to the competent authorities.
The Controller shall take security measures, including administrative, technical and physical measures to protect your personal data against loss, theft and misuse, as well as against unauthorized access, disclosure, alteration or destruction.
When you post on forums, chat rooms or social networks the personal information that you share is visible to other users and can be read, collected or used thereby. On such occasions you are responsible for the personal information that you choose to provide.
We will be storing your personal data as long as it is necessary to implement a particular goal for which the data are processed, and after that they will be erased, unless we need to store them for a longer period under legal regulations.
You can check whether your personal data are accurate, comprehensive and updated, and you can edit them by logging into your account.
If you wish to withdraw your consent for the processing of personal data, to request a correction, to object against their processing or to request that your data be erased ("the right to be forgotten"), you shall send us a request to this effect to e-mail address contact@shopsector.com. In order to avoid misuse, the above requests will be considered only if they are sent to the e-mail address used for account registration, whereas we reserve our right to ask for additional data in order to ascertain the identity of the person who has submitted the request and the data subject for which the request applies.
Any requests relating to personal data will be addressed within a one-month period, or if it is necessary to extend this term, you will be notified of the extended term as well as of the reasons for the delay. We may refuse to process requests that are unreasonably duplicated or threaten the privacy of other users. On all occasions you will have the right to file a complaint at the Commission for Personal Data Protection, kzld@cpdp.bg, Sofiq 1592, 2 Prof. Tsvetan Lazarov Blvd.
The cookies used are both permanent and temporary (session cookies). Permanent cookies are saved as a file on your computer or mobile device for a term no longer than 24 months. We use session cookies when we use the product filter feature in order to verify whether you have logged into the system or have added an item to your Shopping Cart.
You can easily delete cookies on your computer or mobile device by using your browser. Instructions how to use and delete cookies are found in the Help Menu of your browser. You can choose to deactivate the cookies or receive a notification every time when a new cookie is sent to your computer or mobile device. Please, take note that if you decide to deactivate the cookies you will not be able to take full advantage of all features on our website.
We use third-party cookies in order to collect statistical data in concise form through analytics tools such as Google Analytics, GoogleAdwords, Facebook.

References: Art. 6
 Art. 6
 Art. 6

Art. 5

Art. 6

Art. 7

Art. 8

Art. 9

Art. 10

Art. 13

Art. 14

Art. 15

Art. 16

Art. 17

Art. 18

Art. 20

Art. 21