This privacy policy has been developed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. data (hereinafter "Regulation (EU) 2016/679" or "ORZD").
We understand that your personal data and the protection of the information you share with us is extremely important. Therefore, our Privacy Policy describes how we process your data and what measures we take to protect it.
This policy applies to you if you provide us with personal data by phone (by phone or SMS), in an online registration form, by mail or by courier. through social networks, on a corporate or promotional website, through a mobile application or otherwise. Our privacy policy is an expression of our readiness to we protect your personal information.
Information about the Personal Data Administrator
Art.1. (1) Armira International Ltd. (the Company) is a personal data administrator, registered in the Commercial Register at the Registry Agency with UIC: 206212948, with registered office and address of management: Sofia, zh.k. Darvenitsa, bl.13, ent. E, ap. 178.
(2) This policy aims to clarify and present information and conditions for the exercise of the rights of individuals with regard to the protection of their personal data, which are processed by Armira International Ltd. in connection with the activities of the company.
(3) The policy aims to inform you about the activities for processing your personal data, the purposes for which they are processed, the measures and guarantees for data protection, your rights and the way in which you can exercise them in accordance with the requirements of the ORD. and the relevant applicable legislation of the European Union and the Republic of Bulgaria
(4) In pursuance of the Privacy Policy of Armira International Ltd and the objectives of the General Regulation on Data Protection and the Law on Data Protection. personal data (33LD), the Company processes your personal data in compliance with the following principles:
1. legality, good faith and transparency,
2. restriction of pellets,
3. minimization of data,
4. accuracy,
5. storage restriction,
6. integrity and confidentiality.
Information on the competent supervisory authority.
Art. 2. In case of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection. protection of personal data as follows
1. Title: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, Prof. Tsvetan Blvd. Lazarov ” №2
3. Correspondence data: Sofia 1592, Prof. Tsvetan Lazarov Blvd. 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg.
Art.3. For the purposes of this policy:
1. “Personal data” - means any information relating to an identified natural person or a person who can be identified, directly or indirectly, such as name, unique civil number, location data, online identifier or one or more features specific to the physical, physiological, genetic, mental, intellectual, economic, cultural or social identity of that individual;
2. "Data subject" - an identifiable natural person, c result of the processing of his personal data;
3. "Processing" - means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, dissemination or otherwise making the data available, arranged or combining, restricting, deleting OR destroying;
4. "Processor of personal data" - is a natural or legal person, public authority, agency or other structure that processes personal data on behalf of Armira International Ltd;
5. "Recipient" - means a natural or legal person, public authority, agency or other entity to which Armira International Ltd. discloses personal data, whether a third party or not. Public authorities which may receive personal data in the context of a specific investigation in accordance with Union or Member State law shall not be considered as "recipients"; the processing of such data by those public authorities complies with the applicable data protection rules in accordance with the objectives of processing;
6. "Consent of the data subject" - means any freely expressed, in particular, an informed and unambiguous indication of the data subject's will, by means of a statement or clearly confirmatory action expressing his or her consent to the personal data relating to him or her to be processed;
7. "Breach of personal data security" - means a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is transmitted, stored or otherwise processed.
PERSONAL DATA
Art.4. In connection with our activity in Armira International Ltd. we process personal data of the following categories of persons:
1. Buyers of goods;
2. Users of services;
3. Visitors to our website;
4. Recipients of advertising messages.
Art.5. In order to establish and exercise your rights, Armira International Ltd. handles the following personal data:
1. Data about your identity - your names, gender, age, profile data social networks;
2. Your personal contact details - phone, address and e-mail;
3. Other information: company, position, business sector, as well as any feedback the message you provide to us by mail, telephone, email or through messages on social media;
4. Information about the device or devices, which you are using or used to access our site (eg. make and model of your device, operating system, browser or IP address).
5. Details of emails and other emails you receive from us, even if these messages were open and if you clicked on any of the connections (links) in them. We want to make sure that our messages are useful and important to you, so if you do not open them and click on a link in them, we know that we must approve the information we send you.
6. Information from other sources, such as our specialized partners companies that provide information about their customers with their consent, in public or animated type (eg marketing or clinical research companies, financial institutions, social networks, etc.), incl. and information about you that is publicly available.
7. Cookies, as well as other tracking devices. The so-called session (temporary) cookies are used, as far as necessary, to ensure the safe and efficient operation of our website and its use. The storage of session cookies on end devices or consumer application software designed to view information resources (browsers) is entirely under the control of the user. The information related to the cookies is stored by the server after HTTP sessions in the service logs no longer than the time required to complete the specific purpose being processed, or as provided by law.
8. We use Google Analytics as a monitoring tool (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies, which allows us to track the number of visitors to the website, their source and to analyze how often and how the content of the website is used. You can install a withdrawal tool to prevent the collection of such information from your visit. (https://tools.google.com/dlpage/gaoptout?hl=en).
9. Plug-ins - We use social media to promote the company's activities. Each social media platform has its own privacy policy and handles your data.
Art.6. (1) Armira International Ltd. does not collect or process personal data that is relate to the following:
1. reveal racial or ethnic origin;
2. disclose political, religious or philosophical beliefs, or membership in trade unions;
3. genetic and biometric data, health data or data on sexual life or sexual orientation.
(2) The personal data are collected by Armira International Ltd. from the persons for whom they are refer.
(3) The company does not perform automated decision making with data.
(4) The company does not process data for persons under 16 years of age, except with the explicit consent of their parents or representatives.
Art.7. Grounds for collection, processing and storage of your personal data:
(1) Armira International Ltd. collects and processes your personal data on the basis of the following:
1. You have consented to the processing of your personal data for one or more specific purposes;
2. Processing is necessary for the performance of a contract to which you are a party or for taking steps at your request before concluding a contract between us and you;
3. The processing is necessary for the observance of a legal obligation that applies to us as a controller of personal data;
4. Processing is necessary to protect your vital interests or to another natural person;
5. The processing is necessary for the performance of a task of public interest or in the exercise of official powersconferred on us as a controller of personal data;
6. The processing is necessary for the purposes of our legitimate interest or of a third party, except when such interests take precedence over your interests or fundamental rights and freedoms, which require special protection of your personal data.
(2) Armira International Ltd. is an administrator of personal data regarding your data as users of our services. Regarding the personal data that you process using our services, Armira International Ltd. acts as a personal data processor.
Art.8. Purposes for which we use the personal data you provide to us:
1. To send you an answer to your inquiry about any of our products or services;
2. To send you emails with news and suggestions from the company;
3. To send you invitations to events we organize - individually or with our own partners;
4. For statistical needs and analyzes;
5. To help us understand more about you as our customer, the products and/or services you use, the way you use them, and to provide you with better service from our employees;
6. To send you invitations to participate in surveys - online or on paper.
7. To find ways to improve our products, services, applications or websites.
8. To create a profile on the site and provide full functionality in providing our services;
9. For individualization of a party to the contract;
10. For accounting purposes;
11. For statistical purposes;
12. For protection of information security;
13. To ensure the implementation of the contract for the provision of the respective service;
14. To improve and individualize the service by offering suitable for you, promotional offers for products and services that may be of interest to you;
15. To subscribe to our articles published on the blog of our site;
16. To leave comments under products and our articles published on our blog.
RIGHTS OF INDIVIDUALS
Art.9. (1) In your capacity as a natural person, whose data Armira International Ltd. processes, you have the following rights:
1. To receive information about your processed personal data. You have the right to access your personal data that we process for the purposes set out above. If we process this data and receive a request from you (or from a third party authorized by you), we will provide this access free of charge. You also have the right to request a copy of your personal data that we process. Before providing access to the personal data of you or a person authorized by you, we may request proof of identity as well as details of your relationship with us or our partners, so that we can find the data that applies to you.;
2. To request correction of the data collected for you, if they are incorrect or are undergone change;
3. To request the deletion ("to be forgotten") of the personal data collected for you, p except in cases where Armira International Ltd. processes your personal data in compliance with obligations arising from the law. You have the right to request that we delete the personal data without undue delay if:
1. the personal data are no longer necessary for the purposes for which they were collected;
2. when you have withdrawn your consent;
3. when you have objected to the processing, if it is illegal;
4. where personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State that applies to us as a controller of personal data;
5. when personal data have been collected in connection with the provision of services to the information society. Under certain conditions, we may refuse to delete your personal data, in cases where they are provided by law.
4. Request to restrict the processing of your personal data only for the purposes for collected - in accordance with the requirements of the General Regulation on Personal Data Protection, the Personal Data Protection Act and their implementing acts (only in the cases provided for in the applicable legislation and insofar as this does not contradict our legal obligations to process your personal data);
5. Right to portability of your personal data (only in the cases provided for in the applicable legislation and insofar as this does not contradict our regulatory obligations for the processing of your personal data);
6. To receive copies of the documents with your personal data after submitting a request according to a sample in the office of the Company;
7. At any time you can object to the processing of your personal data for the purposes of direct marketing carried out by Armira International Ltd. by withdrawing your consent.
Art.10. (1) In case of violation of your rights under the General Regulation on Data Protection, LPPD, you have the right at any time to file a complaint to the relevant supervisory authority, namely the Commission for Personal Data Protection;
(2) You can appeal the actions and acts of Armira International Ltd. and the processors on behalf of the Company, and in court before the respective administrative court and before the Supreme Administrative Court.
Art.11. (1) The rights under Art. 9 can be done by filling in a written "Application for the exercise of rights in relation to the protection of personal data" (Application), which we will provide you upon request.
(2) The APPLICATION can be sent personally or through your explicitly authorized person with a notarized power of attorney on paper in each nap office, as well as electronically, by the order of ZEDEUU. When the APPLICATION is drawn up as an electronic document, it should be signed with a qualified electronic signature.
(3) When submitting the APPLICATION by an authorized person, you should attach to it the respective explicit power of attorney.
(4) In the cases when during the exercise of your rights under this chapter there is a possibility to disclose personal data for a third party, our respective employee will provide you with access only to the part of them that applies to you.
Art.12. (1) Within 30 (thirty days) from the receipt of your valid "APPLICATION FOR EXERCISE OF RIGHTS IN CONNECTION WITH THE PROTECTION OF PERSONAL DATA", Armira International Ltd. will provide you with written information in connection with the actions, performed by us, such as:
1. Upon exercising your right of access to personal data, it will provide you with information on: the purposes for which the Company processes your personal data, the categories of personal data that it processes; the recipients or categories of recipients to whom your personal data are or will be disclosed, in particular recipients in third countries or international recipient organizations to whom it provides them; where possible, the intended period for which your personal data will be stored and, if this is not possible, the criteria used to determine this period; the existence of a right to ask us to correct or delete personal data or to restrict the processing of personal data relating to you, or to object to such processing, your right to appeal to the competent supervisory authorities when your personal data has not been collected from you - any available information on their source, the existence of automated decision-making, including profiling, in accordance with the General Data Protection Regulation;
2. If you have exercised the right to delete your personal data - will delete your personal data without undue delay, provided that the prerequisites for exercising this right provided for in the General Data Protection Regulation are met, Personal Data Protection Act and the acts on their implementation and insofar as this does not contradict our legal obligations for processing your personal data;
3. If you have exercised the right to restrict the processing of your personal data - will limit the processing of your personal data, in the cases provided for in the applicable regulations and insofar as this does not contradict our legal obligations to process your personal data without delete, and we will inform you before lifting the processing restriction.
4. If you have exercised the right to portability of your personal data - Armira International Ltd. will present your personal data in a structured, widely used and machine-readable format and will transfer your data to another administrator, in the cases provided for in the applicable regulations. and insofar as this does not contradict our legal obligations to process your personal data.
(2) Armira International Ltd. will inform you in writing of any refusal of access, deletion, right to limit the processing of your personal data or request for exercise of the right of portability, as well as the reasons for refusal within the period under par. 1.
(3) When your personal data is deleted or their processing is limited, Armira International Ltd. will notify their recipients, who are responsible for their respective deletion or restriction.
(4) Our obligation to provide the information under this article may be limited in whole or in part, taking into account your fundamental rights and legitimate interests and in the cases provided for by the applicable regulations.
(5) Armira International Ltd has the right to extend the term under par. 1 up to 60 days, depending on the complexity and the number of the received applications in each separate case. The Company will notify you of any extension of the term, as well as the reasons for the extension of the term for response by us within 30 days from the receipt of your valid “APPLICATION FOR EXERCISE OF RIGHTS IN CONNECTION WITH PERSONAL DATA PROTECTION”.
Art.13. (1) The right to request correction of your personal data can be exercised by filling in a written "APPLICATION FOR CORRECTION OF PERSONAL DATA" (THE APPLICATION), which we will provide on request.
(2) The APPLICATION can be sent personally or through your explicitly authorized person with a notarized power of attorney on paper to your office, as well as electronically, by the order of the Electronic Document and Electronic Certification Services Act (EDESA). When the APPLICATION is drawn up as an electronic document, it should be signed with qualified electronic signature.
(3) When submitting the APPLICATION by an authorized person, you should attach to it the respective explicit power of attorney.
Art.14. (1) Within 30 (thirty days) from the receipt of your valid “APPLICATION FOR CORRECTION OF PERSONAL DATA”, Armira International Ltd., will correct without unnecessary delay inaccurate personal information related to you or will supplement your incomplete personal information.
(2) Armira International Ltd. will inform you in writing about any refusal to correct or supplement your personal data, as well as about the reasons for the refusal within the term under par. 1.
(3) When your personal data are corrected or supplemented, Armira International Ltd. will notify their recipients, who are responsible for their respective - correction or supplementation.
(4) Our obligation to provide the information under this article may be limited in whole or in part, taking into account your fundamental rights and legitimate interests and in the cases provided for by the applicable regulations.
Art.15. (1) The right to object to the processing of your personal data for the purposes of direct marketing can be exercised by filling in a written "APPLICATION FOR WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF THE DIRECT MARKETING" (the Application), on demand.
(2) The APPLICATION can be sent personally or through your explicitly authorized person with a notarized power of attorney on paper in each of our offices, as well as electronically, in accordance with the Electronic Document and Electronic Certification Services Act (EDESA). When the APPLICATION is drawn up as an electronic document, it should be signed with a qualified electronic signature.
(3) When submitting the Application by an authorized person, you should enclose the respective explicit power of attorney.
Art.16. Within 30 (thirty days) from the receipt of your valid "APPLICATION FOR WITHDRAWAL OF CONSENT FOR PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING", Armira International Ltd. will terminate the processing of the data provided by you. will provide you with written information in connection with these actions.
(2) Armira International Ltd. will inform you in writing of any refusal to Respect for the Application under para. 1, as well as for the reasons for the refusal within the term under para. 1.
(3) After Armira International Ltd. terminates the processing of the personal data provided by you, the Company will notify their recipients, who are responsible for the termination of their processing.
(4) Our obligation to provide the information under this Article may be limited in whole or in part, taking into account your fundamental rights and legitimate interests, and in the cases provided by the applicable normative acts.
(5) Armira International Ltd. shall have the right to extend the term under par. 1 up to 60 days, depending on the complexity and number of applications received in each case. The Company will notify you of any extension of the term, as well as the reasons for the extension of the term for response by us within 30 days of receipt of a valid “APPLICATION FOR WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING”.
Term of storage of your personal data
Art.17. (1) Armira International Ltd. stores your personal data for a period not longer than the existence of your account on the website. After the expiration of this period, Armira International Ltd. takes the necessary care to delete and destroy all your data without undue delay. In the general case, unless we specify otherwise, your data is stored for a term of 2 (two) calendar years from the date of their receipt. (2) Armira International Ltd. notifies you in case the storage period of the data needs to be extended in order to fulfill the objectives, fulfill the contract, in view of the legitimate interests of Armira International Ltd. or otherwise.
(3) Armira International Ltd. stores your data, given on the basis of consent, until its explicit withdrawal, and this does not affect the publications and comments made in order to preserve the semantic integrity of the comments.
(4) Armira International Ltd. stores the personal data that is necessary to keep the force of applicable law for the relevant period envisaged, which may reject the period of validity of your registration.
In case of violation of the security of your personal data
Art. 18. (1) If Armira International Ltd. establishes a breach of the security of We inform you of your data, which may pose a high risk to your rights and freedoms, without undue delay, as well as the measures that have been taken or are about to be taken.
(2) Armira International Ltd. is not obliged to notify you if:
1. has taken appropriate technical and organizational protection measures with regard to the data affected by the security breach;
2. has subsequently taken steps to ensure that the breach does not pose a high risk to your rights;
3. notification would require a disproportionate effort.
Persons to whom your personal data is provided.
Art. 19. In connection with the conclusion of contracts for purchase and sale and delivery of the goods and services provided by Armira International Ltd., Armira International Ltd. provides the necessary information to: Courier or postal companies that need to deliver documentary or other shipments on our behalf; Printers that need to prepare custom materials for you;
Companies send mass emails when you need to receive an email message from us.
Art. 20. The administrator does not transfer your data to third countries.
Data protection
Art. 21. Armira International Ltd. treats your personal data as strictly confidential. To protect them, a number of measures have been taken, including:
1. We restrict access to the premises where we work only to the people who need to be there (for this purpose we use codes and access cards, passwords and other technologies related to restricting access to certain premises);
2. We also implement access control to our information technology systems using firewalls, identification number validation (ID), logical segmentation and / or physical separation of our systems and information;
3. We use methods such as encrypting and pseudonymization of the information;
4. We never ask you to send us your password;
5. We advise you never to enter an account number, password or other sensitive information in an email to us.
ADDITIONAL PROVISIONS
1. This policy International Ltd. was approved by order of the representative Armira International Ltd.
2. The General Regulation on the basis of data protection, the Personal Data Protection Act and other normative acts applicable to the activity of Armira International Ltd. shall apply to the issues not settled in this Policy.
3. Taking into account current trends, the current privacy policy should be changed. The update date is indicated at the end of the document. All changes in this privacy policy will be applicable after theirs forward.
Last actualization: 21.01.2021.