1. Data controller/processor

2. What data we collect about you?

Personal data is any information that can identify an individual. Anonymous data is not included in this category. We process the following categories of personal data:

• Communication Data - Includes any message you send to us, whether it is through the communication form on our site, via email, message or post on social networks or any other type of message sent. We process this data for the purpose of communicating with you, for record keeping and for the establishment, exercise or defense of legal claims. The legal basis for this processing is our legitimate interests, which in this case are to respond to messages sent to us, to maintain records and to conduct or defend legal claims.
• Customer data. Include data related to the purchase of goods and/or services, such as your name, billing address, shipping address, email address, other contact details (phone number), statistics about your purchases and others. We process this data to deliver the goods and/or services you have purchased and to keep records of such transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
• User data. Includes data about how you use our website and other online services, together with any data you post on our website or through other online services. We process this data to operate our website and to ensure that we provide you with relevant content, to ensure its security, to maintain backup copies of our website and/or database and to enable us to manage and administer our website, other online services and business. The legal basis for this processing is our legitimate interests, which in this case allow us to properly administer our website and business.
• Technical data. Includes data relating to the use of our website and online services, such as your IP address, login details, details of your browser, duration of your visit to our website pages, page views and navigation paths, details of the number of visits to our website, the time zone settings and other technologies of the devices you use to access our website. The source of this data is from our analytics tracking system. We process this data to analyze the use of our website and other online services, to administer and protect our business and website, to provide relevant content and advertisements, and to understand the effectiveness of our advertisements. The legal basis for this processing is our legitimate interests, which in this case will allow us to properly administer our website and business, develop our business and determine our marketing strategy.
• Marketing data. Includes data related to your preferences for receiving marketing information from us and third parties and your preferred method of communication. We process this data so that we can include you in our promotions, such as games, prizes and free gifts, provide you with adequate content and advertisements, and understand the effectiveness of those advertisements accordingly. The legal basis for this processing is our legitimate interests, which in this case will help us to study how customers use our products/services, develop them, grow our business and determine our marketing strategy.
• We may use Customer Data, User Data, Technical Data and Marketing Data to provide you with adequate content and advertisements (including Facebook ads or other advertisements) and to understand the effectiveness of the advertisements provided accordingly. The legal basis for this processing is our legitimate interests, which are related to the growth of our business. We may also use this data to send you other marketing communications. The legal basis for this processing is either consent or legitimate interests (namely growing our business).

Confidential Data

We do not collect any confidential data about you. Data related to your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political views, membership in trade unions, information about your health, genetic and biometric data are confidential. We do not collect information about criminal convictions and crimes.

Please note - where we are required to collect personal data by law or under the terms of the contract between us and you do not provide us with this data on request, we may not be able to perform the contract (for example to supply you with goods or services). If you do not provide us with the requested data, we may have to cancel the product you have ordered, but if we do, we will notify you in good time.

We will use your personal data only for the purpose for which it was collected or if necessary for a purpose close in meaning to the main one. For more information, please write to us at info@pochivam.bg. In the event that we need to use your data for an unrelated new purpose, we will notify you, setting out the legal reasons for our actions.

We may process your personal data without your knowledge or consent, but only to the extent permitted by law. We do not perform automated decision-making or automated profiling.

3. How we collecting your personal data

Personal data is any information that can identify an individual. Anonymous data is not included in this category. We process the following categories of personal data:

• Provided to us personally by you (for example, by filling out forms on our site or by sending emails);
• Automatic collection of certain data obtained from you when you use our website through the use of cookies and other similar technologies. Please see our cookie policy for more details here.
• We may receive data from third parties such as: analytics providers (eg Google) based outside the EU; advertising networks (e.g. Facebook) based outside the EU; search information providers (eg Google) based outside the EU; providers of technical, payment and delivery services, information brokers or aggregators.

4. Marketing communications

The legal basis for processing your personal data for the purpose of marketing communications is: Your consent or our legitimate interests (for example - to expand our business).

In accordance with the legal provisions for the protection of personal data and electronic communications, we may send you marketing communications if:

(A) make a purchase, register on our site or make an inquiry to us about our goods or services; or (B) you have agreed to receive marketing communications, provided in both cases you have not expressly refused to receive such communications. According to legal regulations, if you are a legal entity, we may send you marketing emails without your consent. In this case, you can also opt out of receiving marketing emails from us at any time.

Before we share your personal data with third parties for their marketing purposes, we will ask for your express consent.

You can ask us to stop sending you marketing messages at any time by logging into the website and your profile and adding or removing the relevant fields/options to adjust your marketing preferences.

Please note - if you opt out of receiving marketing communications, this opt-out does not apply to personal data provided as a result of other transactions such as purchases, warranty records, etc.

5. Sharing of your personal data

We may share your personal data with the following parties:

• Service providers that provide IT services and system administration;
• Professional consultants, including lawyers, bankers, auditors and insurers;
• Governmental authorities that require us to report processing processes;
• Courier companies;
• Third parties that acquire or merge parts of our business or assets.

Ние изискваме от всички трети страни, на които прехвърляме Вашите данни да спазват сигурността на личните Ви данни и да ги третират съгласно закона. Третите страни могат да обработват личните Ви данни само за конкретно определени цели и в съответствие с нашите указания.

6. Data security

We have security measures in place to prevent the accidental loss, use, alteration, disclosure or unauthorized access of your personal data. We provide access to your personal data only to those employees and partners who have a business need to use such data. They are instructed to process your personal data according to our instructions and to comply with the confidentiality rules.

We have a procedure in place to deal with a suspected breach of your personal data and will notify you and the relevant regulators of such breaches if and when necessary.

7. Data storage

We will keep your personal data for as long as necessary to fulfill the purposes for which we collected it or to satisfy legal, accounting or reporting requirements.

When deciding how long to keep this data, we consider its amount, nature and sensitivity, the potential risk of unauthorized use or disclosure and the purposes of the processing, and whether it can be achieved by other means and legal requirements.

Please note - tax laws require us to keep basic information about our customers (such as contact details, identity, financial and transaction details) for up to ten years after you cease to be our customer.

In certain circumstances, we may anonymize your personal data for research or statistical purposes, and in such cases we may use this information indefinitely and without notifying you.

8. Your rights

Under data protection laws, you have rights in relation to your personal data, which include the right to request access, rectification, deletion, restriction, transfer, objection to processing, data portability and (where the legal basis for processing is consent) to withdraw your consent.

See more about these rights at the following address: https://www.cpdp.bg/?p=rubric&aid=2

If you wish to exercise any of the above rights, please contact us at: info@pochivam.bg

There is no fee to access your personal data (or to exercise any of your other rights). However, the law allows us to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or is inconsistent with your request in the above circumstances.

We may need to ask you for specific information to verify your identity and to ensure your right to access your personal data (or to exercise any of your other rights). This security measure ensures that your personal data is not disclosed to persons who do not have the right to receive it. We may also contact you to request additional information regarding your request in order to expedite our response.

The deadline for responding to all legitimate requests is one month. If your request is particularly complex or you have made several requests and we are unable to respond within a month, we will let you know.

If you are not satisfied with the way your data is collected and used, you have the right to file a complaint with Profi Tours Ltd for Personal Data Protection (https://www.cpdp.bg). We would be grateful if, in the event of an objection or complaint, you would first contact us to find a way to resolve the issue.

9. Third Party Links

This website may include links to other third-party websites, plug-ins and applications. Clicking on these links or enabling them may allow third parties to collect or share data about you. We do not control these websites and are therefore not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of each website you visit.