PERSONAL DATA PROTECTION POLICY
When you share personal data with us, we process it in accordance with this policy. Please read the information carefully and if you have any questions or need information about your personal data, contact us at: 9 Tri Ushi Str.
This policy defines the ways of collecting, processing and protecting the personal data of customers, suppliers, contractors, applicants for work in Infinity Ferromodul EOOD (called for short “the Company”) and other persons providing personal data in our organization. This includes personal data that is collected through our website (www.eu-cigars.com), by telephone, in person, by e-mail, through related social media applications, by sending and receiving data from corporate customers, suppliers, contractors and partners of the Company and through the technical devices used in providing our services. This policy also explains your rights regarding your personal data and how you can exercise those rights.
One of the main concerns of Infinity Ferromodul EOOD is the security of personal data of individuals – our customers, employees, suppliers and partners. We have taken the necessary measures to bring the activities of all our employees in line with best practices and legal requirements for the protection of information and its confidentiality.
When we collect personal data, we follow the principles of minimizing the processed data, legality, transparency and security. We strive to process only personal data that is essential and relevant to the purposes of our business.
I. Who are we?
Infinity Ferromodul EOOD – the company is responsible for the protection of personal data that you share with us and is a controller of personal data within the meaning of applicable legislation for personal data protection.
Respect for your personal data is essential to us. We ensure that personal data protection and security are integrated as principles in everything we do.
Contact details of the Data Protection Officer:
Name: Victor Nedelchev
Address: 9 Tri Ushi Street
II. What categories of personal data can we receive and process for you?
We believe that you, the consumers, are at the heart of what we do. We are interested in your opinion in order to create the applications and services you need.
When you register on the site when creating a user profile, the data we may receive from you are:
- Name, surname and last name;
- IP address;
- phone number;
When requesting a subscription to an email newsletter, your personal data that we can receive and process are:
- Name, surname and last name;
When registering and purchasing a product – your personal data that we may receive and process are:
- Name, surname and last name;
- Company information;
- PIN / UIC and address for issuing an invoice
- data collected through cookies through our website, in accordance with our Cookies Policy, and all other data that you voluntarily enter during registration.
Other personal data that you disclose to us – personal data contained in your letters or messages to us, in complaints, grievances or alerts.
Personal data of persons related to corporate clients, partners or suppliers – names, telephone, e-mail address and position held in the company.
Personal data processed when visiting the website and offices / branches of the Company
When visiting the Company’s website, we collect the address of your Internet Protocol (IP – used to connect your device to the Internet); login information, browser type and version, time zone settings, browser types and versions; information about the operating system and platform used; information about your visit, including URLs that go to, through and from our site.
Personal data processed for the purpose of improving customer service and advertising
In order to improve our services and the quality of service provided by our employees, we process personal data contained in customer feedback forms.
For the purposes of direct marketing (in case you have given us consent), Infiniti Ferromodul EOOD uses your contact details to inform you about the services offered by the Company and to provide you with information about campaigns. In case you do not want us to contact you for this purpose, you can cancel at any time.
When we collect data, we mark with asterisks (*) the required fields to fill in the information we need to enable you to register on our site, to give you access to our online offers and products to send you. our newsletter if you have indicated that you wish to receive it, or to comply with certain legal requirements (for example invoicing). Failure to provide us with information in a field marked with an asterisk may affect our ability to provide you with our services.
We recommend that when contacting us, you do not send us more than the data we need above, including information that contains sensitive personal data (information on racial and ethnic origin, religious and political beliefs, membership in trade unions and political organizations, sexual orientation and others).
III. For what purpose do we process your personal data and on what legal grounds?
The processing of personal data by the Company is always related to a service or is requested by the data subject at the present moment or at a previous moment. We process your data for the following purposes:
- To register an account for free on the site;
- To accept your product request;
- To prepare payment documents;
- If you have agreed that you want us to send you our newsletter for free. You can always change this setting from your account or unsubscribe from the newsletter itself;
- To communicate through you by phone, email or in person after you contact us;
- to identify you;
If you provide us with your consent, we process your data for marketing purposes – to send you information about our products.
You can revoke the marketing consent you have given us at any time by contacting us at the contacts listed above. If your consent is withdrawn, we will not use your data for the stated purposes. Withdrawal of consent shall not affect the lawfulness of processing on the basis of consent before it is withdrawn.
If you want to unsubscribe from our newsletter, you can always change the receipt setting in your account or click the unsubscribe link from the newsletter itself.
IV. What are the categories of recipients of your personal data?
We respect your personal data and choices and ensure that personal data protection and security are integrated into everything we do. We are committed to protecting and safeguarding your data. This includes working only with trusted partners.
We never provide or sell your data. We respect your rights and always strive to comply with your requests as far as possible in accordance with our legal and operational responsibilities.
Infinity Ferromodul EOOD supports cash on delivery and cash payments, works only with electronic invoices (maybe others). For this purpose, your personal data for issuing an electronic invoice (names; PIN and address, when provided at your request) are shared and transferred to the system of a provider for issuing electronic invoices.
We may share your personal information in order to comply with our legal obligations, to prevent fraud and / or to protect our interests or to improve our services. We may also share your personal information in a pseudonymous form, without giving direct identification.
When we protect our rights and legitimate interests and if we use the services of external consultants, lawyers, auditors, etc., we disclose to them the amount of personal data that is necessary to assist us and provide the services for which we have hired them.
We do not offer or sell your personal information.
We may also provide your personal data to third parties in the event that:
- If you have given your consent to this;
- In other circumstances, if we have the right to do so by law;
- More information on with whom you can get more detailed information about who we share your personal data with and in what cases after requesting the above contacts.
How long do we store your personal data?
We store your personal data only to the extent necessary to meet your needs, for the purposes for which we store it, or in accordance with our legal and contractual obligations. When we no longer need your personal data, we delete it from our system or make it anonymous so that you can no longer be identified by it.
To determine how long your personal data will be stored, we apply the following criteria:
When you register from the moment of registration and if you do not have a contractual relationship with us / you only have a created user profile /, we store your data from your personal profile for six months. After this period, your account information will be anonymized / pseudonymized ..
When you register and submit a request for the service, and if you do not sign up for a course / exam / qualification program – we store your data for one year. After this period, your account information is anonymized / pseudonymized;
When you consent to marketing purposes, we store your personal data until you leave, you ask us to reject you or redefine your consent in response to periodic invitations that we send to You;
When you have a contractual relationship with us, the data is stored in accordance with Bulgarian legislation on tax and accounting purposes, and in order for us to manage our legal claims for 10 years after the termination of our contractual relationship with you (the retention period begins to be counted again after the termination of our relationship for each subsequent service for which we have a contractual relationship with you);
When there are cookies on your computer, we store them for as long as necessary to achieve our goals in accordance with the Infinity Ferromodul EOOD policy for the use of “cookies”;
You should keep in mind that during the expected judicial and / or out-of-court proceedings, our provided and stored data may be subsequently processed for the purposes of these proceedings.
What are your rights?
Infinity Ferromodul EOOD respects your right to privacy. It is important to be able to manage your personal data.
As the person to whom the data relates, you have the right to receive confirmation and / or detailed information about your processed personal data, including. a copy of the personal data processed for you (right of access).
In addition, you can object to the collection and further processing of your personal data, as well as ask us to correct (update) or delete them (when we have no valid legal basis to continue processing them).
In addition, you can request that the processing of Your data be restricted if:
- you dispute the accuracy of the data-the restriction will apply to the time spent checking the accuracy of the data;
- the processing of your data is illegal, but you refuse to delete it and instead want to restrict the processing;
- we no longer require data for the intended purpose, but you still need it to enforce or protect legal requirements;
- you have raised an objection to the data we process.
- In addition, it is important to know that you can withdraw your consent to the processing of personal data at any time by contacting us at the above contacts. You can exercise this right only for the categories of personal data that we process based on your consent (see section three).
You can ask us to provide you with a structured, regular, and machine-readable format ready to transmit the data that you have entrusted to us for storage, provided that:
- we process this data based on your consent or fulfill a contract between us and
- this processing is performed using an automated procedure.
If you believe that your data protection rights have been violated, you have the right to file a complaint with the Commission for personal data protection of the specified contact information in the “Contacts” section on the KZLD website (www.cpdp.bg) and / or other Supervisory / regulatory authority when you believe that there is a violation in connection with the processing of your personal data by Infinity Ferromodul EOOD.
To ask questions about your rights or if you would like to exercise any of them, please contact us at the contact details of the responsible person listed above. Or ale. mail.
In order to identify you and make sure that we provide you with information, as well as to protect your interests, requests and phone requests will not be considered valid.
We will respond to any of your requests without further delay within 30 calendar days of receiving your request. If we are unable to do this for independent reasons, we will notify you in a timely manner, specifying the reasons for the delay.
If in doubt, we may request additional information to confirm your identity. This is done to protect your rights and privacy.
If you request to exercise any of these rights and this request is clearly unfounded, or if you particularly often wish to exercise your right, we may require you to pay an appropriate processing fee or even reject your request.
We inform you that in order to ensure the observance of your rights and to accept your requests when you have requested a service through our websites, we can identify you only on the basis of the e-mail address submitted during registration of the account / request for service. In case you have subsequent changes to the e-mail address you have entered, please let us know.
Is your personal data protected?
We always do our best to protect your personal information and once we receive it we apply strict procedures and security measures to prevent unauthorized access. The data we collect is stored electronically, striving to apply all applicable good security practices to our information.
To ensure a secure encrypted connection between the web browsers of the users of the site and our servers, an SSL (Secure Sockets Layer) certificate is installed. SSL is a protocol developed by Netscape that is used to transfer personal data and documents over the Internet. The data is encrypted with a private key and then transmitted over an SSL connection.
Web-based information systems that work with this protocol usually have a URL prefixed with “https:” instead of “http:”. This is a protocol that protects your information by transmitting it over the Internet in encrypted format. The protocol ensures that the information sent remains unchanged and unread by third parties.
In all cases where possible, we apply pseudonymization. This means the processing of personal data in such a way that personal data can no longer be linked to a specific data subject without the use of additional information, provided that it is stored separately and is subject to technical and organizational measures in order to ensure that personal data do not relate to an identified or identifiable individual.
Changes in current policy