Privacy Policy

Privacy Policy 
Your personal information
This privacy policy explains how we collect and process your personal data. Personal Data means any information or set of information that identifies or could be used to identify you (together with other information). This includes information you share with us, what we learn from you, and the choices you make about the marketing messages you want us to send to you. This policy explains how we process your personal data, what your rights are and how the law protects you.
We do not knowingly collect data related to children.

Changes in the legal framework for the protection of personal data
The legal framework in relation to the protection of your data changes on 25 May 2018, when the General Data Protection Regulation (GDPR) comes into force in the European Union.
This privacy policy tells you more about most of your rights in relation to the Regulation, but there may be other changes we need to make to this privacy policy after 25 May - we will let you know we will notify each time we make a change to this policy. We may need to ask you to accept the changes or to re-consent to the use of your personal data.                                                                                                                                                           

1.    Who are we and how can you contact us?
We are [Name of your company] OOD, EIK XXXXXXXX, Street XXXXX No
You can contact us at e-mail: [at] your-domain.com
When we refer to our website, we mean https://your-domain.com .

2.    How do we collect your personal data?
We may collect personal information about you in the following ways:
Data that you yourself share with us:
–    Data you give us when you register to use our services;
–    Data you share with us when you talk to us on the phone;
–    Data you send us in emails or letters to us;
–    Data in relation to your participation in our promotions or events;
–    Data you send to us in the form of feedback.

3. The data we collect about you
We may collect, use, store and transfer different types of personal data about you, which we have grouped as follows:
Your identity data – name and date of birth;
Contact details – billing address, email address or phone numbers;
Financial data – bank account and payment card data;
Transaction Data – details of payments you have made and other details of services you have purchased from us; Marketing and Communication Data – Your communications when receiving marketing data from us, as well as your communication preferences.
We do not collect sensitive personal data about you. This includes details of race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political views, trade union membership, information about your health, and genetic and biometric data. We also do not collect information about criminal convictions and crimes committed.

4. For what purpose do we process your personal data?
Your personal data is protected by law.
We have the right to process your personal data only if we have a legal basis for doing so and the processing meets legitimate purposes. The objectives set out in this policy are:
–    Purposes necessary for the use of our services;
–    Purposes for which you have given your express consent;
–    Purposes necessary for the fulfillment of legal obligations of [Your Company Name] City.

5. Who do we share your personal data with?
Sometimes, in order to provide the services you have requested from us, we may share your personal information with external service providers.
We require all service providers with whom we share your data to respect the security of your personal data and treat it in accordance with the law. We do not allow any of our service providers to use your personal data for their own purposes and we only allow them to process your personal data for specified purposes and in accordance with our instructions.

6. Non-disclosure of personal data
In cases where we need to process your personal data in connection with a legal requirement or under the terms of a contract we have with you, and you cannot provide that data upon request, we may not be able to perform the contract we have or are attempting to perform. contract with you (for example to provide you with a service). In this case, we may not be able to provide the service you want from us, but we will let you know if this is the case.

7.    Data protection
We have implemented appropriate security measures to prevent the accidental loss, use or unauthorized access, alteration or disclosure of your personal data. We also limit access to your personal data to those employees, external service providers and other third parties who have a legitimate right to access it. They will process your personal data only on our instructions and they are subject to an obligation of confidentiality.
We have procedures in place to deal with any suspected personal data breach and will notify you and the relevant authorities of a breach when we are legally required to do so.

How long will we store your personal data?   

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying legal, accounting or reporting requirements.
To determine the appropriate period for storing personal data, we consider the volume, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as applicable legal requirements.

Marketing

We may use your personal information to notify you of relevant services and upcoming offers. We may only use your personal data to send you marketing communications if we have your consent or a legitimate interest to do so. You can ask us to stop sending you marketing messages at any time – you just need to contact us or use the opt-out links in every message sent to you.

Your rights
The General Data Protection Regulation guarantees you a certain set of rights that you can exercise in relation to your personal data processed by us. Specifically, you have:                                                                                     

–    Right to receive a copy of the information we hold
You can ask us for a copy of the personal data we store about you by sending us an email at contact [at] yourdomain.bg.
We will try to respond to all legitimate requests within one month. Sometimes it may take us more than a month, in which case we will let you know.                                                                                                                                 

–    Right to tell us if the information we hold is incorrect
You have the right to question any information we hold about you that you believe is wrong or incomplete. Please contact us by e-mail at: contact [at] yourdomain.bg if you wish to do so, and we will take reasonable steps to verify the accuracy of the information and, if necessary, correct it.

– Tell us that you want us to stop using your personal data
You have the right to:
objections to the use of your personal data; 
or request that we delete your personal data; 
or request restriction of processing;