Privacy Policy
Personal data protection policy
PRINCIPLES RELATING TO THE PROCESSING OF PERSONAL DATA:
The Sole-Owner Limited Liability Company „Bulterra IG“ Ltd., operating the Website www://bulterraig.com/ hereby declares that all Personal Data (hereinafter referred to as the “Data”) are considered strictly confidential in compliance with all applicable legal provisions in the field of Personal Data protection.
The privacy of your Personal Data is our priority. Therefore, we pay close attention to all Personal Data and their protection. In these Principles relating to the Processing of Personal Data (the “Principles”) we would like to inform you about what Personal Data we collect and how we use it afterwards.
1. Personal Data and their processing
What is Personal Data ? Personal Data within the meaning of Article 2, paragraph 1 of the Law on Personal Data Protection means any information relating to a natural person who has been identified or can be identified, directly or indirectly, by an identification number or by one or more specific attributes. Several examples of Personal Data are: names, personal identification number [EGN], address, telephone, place of birth, passport data of the person (physical identity). This information may refer to employees, managers, customers, suppliers, contractors, business contacts and other natural persons with whom the Controller has a relationship or wants to establish a business contact.
1.1. Categories of Personal Data
We collect different data depending on what services you use.
When you buy from us, we collect:
• Name and contact details: name and surname, e-mail address, postal address, billing address, phone number, bank account.
• Demographic data: gender, date of birth, country and preferred language.
• Data resulting from existing contracts – purchased products, consumer segment, scope of services provided.
If you are a Registered User, we collect:
• Name and contact details: name and surname, e-mail address, postal address, billing address, phone number, bank account.
• Demographic data: gender, country and preferred language, date of birth.
• Registered login details. Login names and passwords. We don’t have access to the actual password.
If you receive marketing messages from us, we collect:
• Name and contact details – email address and name.
• Demographics – country, gender reference.
Also, we process the following Personal Data :
• Data on the communication between the seller and the customer.
1.2. Purposes of processing Personal Data :
• Provision of services and their improvement. We process your Personal Data in order to provide the services offered and to improve them to your satisfaction. Specifically, these include
o Processing of orders for goods or services made either on our Website, through the mobile applications or by phone. Here, the need to perform a Sale Contract, a Registered User Contract, as well as to fulfil a legal obligation in case of selected data (e.g. accounting documents) is the legal grounds.
o Processing of orders for goods or services made either on our Website, through the mobile applications or by phone. Here, the need to perform a Sale Contract, a Registered User Contract, as well as to fulfil a legal obligation in case of selected data (e.g. accounting documents) is the legal grounds.
o Customer care. In order to provide customer service and eliminate possible problems in the performance of a Sales Contract or a Registered User Contract, we process your Personal Data on the grounds of the need to perform these contracts.
o Improving services. We use data to continuously improve our services and system, including to create new features, and simultaneously to make informative decisions using aggregate analysis and business research, all of which are based on our legitimate interest arising from the freedom of business and consisting of the need to improve the services provided in order to succeed in economic competition. To ensure sufficient protection of your rights and interests, we use personal data in anonymous form for the purpose of improvement.
• Protection, safety and dispute resolution. We may process the Data for legitimate interest, which consists in ensuring the protection and safety of our systems and our customers, detecting and preventing fraud, resolving disputes and implementing our agreements on the grounds of legitimate interest.
• Recording from Video Surveillance. The Company “Bulterra IG” Ltd. has cameras in its stores and spaces in order to protect our legitimate interests. The locations where cameras are fixed are always marked with a warning signs.
• Marketing offers
o Commercial communication
You can always stop receiving these commercial communications by using the cancellation link you will find in each email.In case that you unsubscribe from the commercial communications, we will not subsequently use your electronic contacts for this purpose. We will start using them again if you register or explicitly request it.
◦ The marketing offers you are shown may be selected based on any other information we have acquired about you over time from the contact data, demographics data, bookmarks data and data about our products you have used and the e-store (cookies, IP address, data provided by your browser, click data, displayed commercial messages, products visited). We do not perform fully automated processing, which for you would have legal consequences.
◦ If you are not our customer, we process on the grounds of your consent.
◦ You have the right to object to such processing, free of charge, at any time. The contact details are indicated at the end of this document.
Processing of Cookies from the E-Store operated by the Company „Bulterra IG“ Ltd.
◦ In case that you have enabled the Cookies in your web browser, we process the records on the behavior from the Cookies located on the E-Store operated by the Company Bulterra IG Ltd. in order to ensure better functioning of the E-Store and for the purpose of internet advertising of the Company „Bulterra IG“ Ltd. More information can be found in a separate section of this Policy.
1.3. Provision of Personal Data to third parties
Your Personal Data will only be provided to third parties or intermediary parties if necessary.
a) to subsidiaries and processing organizations on the basis of the performance of the Sales Contract or the Registered User Contract for the performance of internal processes and implementation;
b) to companies issuing credit card, providing payment services for the purpose of processing payments, and banks on the basis of your order, for the performance of the Sales Contract;
c) to suppliers, to transport and/or courier companies for the purpose of delivering the products or services ordered by you and to resolve claims, including withdrawal from a contract;
d) to security guard companies holding a license to carry out private security guard activities and processing the video recordings on sites of the Company „Bulterra IG“ Ltd. and/or maintaining other registers in the process of securing the access regimen at the said sites;
e) to other service providers, to third parties involved in the processing of data, including persons who provide maintenance services for the equipment and software used for the processing of your Personal Data, following an assignment by the Company „Bulterra IG“ Ltd., as well as persons providing technical support services for terminal equipment;
f) to third parties, e.g. legal representatives, courts, for the purpose of collecting receivables or concluding different contracts with you;
g) to state, competent authorities, which, by virtue of a legal act, have the power to request the Company „Bulterra IG“ Ltd. to provide information, including Personal Data , such as the National Revenue Agency, the Bulgarian Court or the court of another country, various supervisory/regulatory authorities, in the framework of proceedings before a court, in accordance with the requirements of procedural and substantive legal acts applicable to the proceedings; Consumer Protection Commission or third parties provided for in the Law on Consumer Protection;
h) to third parties conducting customer surveys;
If any third parties use any data in the framework of their legitimate interest, the Controller may not be held liable for such processing. This processing is governed by the principles for the processing of the Personal Data of the respective companies and individuals.
1.4. Principles
2. Protection of Personal Data and retention period
2.1. Protection of Personal Data
a) Your Personal Data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) encryption system. On our web site and other systems, we maintain technical and organizational measures against the loss and destruction of your data, against access of unauthorized persons to your data, their modification or dissemination.
b) From our processing organizations, we require a proof of compliance of their systems with the guidelines under the GDPR (General Data Protection Regulation).
2.2. Processing period
Processing and storage of Personal Data
• for a time unconditionally necessary to secure all rights and obligations arising from a Sales Contract, i.e. for the time of the order and the warranty period.
• for the duration of a Registered User Contract.
• 1 year after the end of the warranty period in order to resolve any potential disputes.
• for the time during which the Company „Bulterra IG“ Ltd. ,as a Controller, is obliged to store them according to the generally mandatory legal regulations. Accounting documents, e.g. invoices issued by the Company „Bulterra IG“ Ltd. are archived in accordance with the law for a period of 10 years from their issuance.
• The consent for the notifications on the availability of goods remains in force until the information on the availability is sent, but no longer than for a period of up to 1 year or until its cancellation.
• The consent for the marketing offers remains valid for up to 4 years or until its cancellation.
In other cases, the processing time is determined by the purpose of processing or set by the legal requirements in the field of Personal Data protection.
3. Rights of data subjects
• a) If we process your Personal Data, you may request free information about the processing of your Personal Data at any time.
• b) In the event that you believe that we are carrying out the processing of Personal Data contrary to the protection of your Personal Data and the legal requirements for the protection of Personal Data, you may request an explanation, request remedy of the condition thus arising, or you may request the rectification, addition, deletion of Personal Data or blocking of Personal Data .
• c) Also, you have the right to contact the Data Protection Officer or the Commission for Personal Data Protection at any time.
• d) You may withdraw your consent to the processing of Personal Data at any time. If you withdraw your consent to the processing of Personal Data, your Personal Data will be deleted or replaced by anonymous ones; however, this does not apply to the Personal Data that are necessary for the Company „Bulterra IG“ Ltd. in order to fulfil legal obligations (e.g. to implement an order already placed) or to protect its own legitimate interests. The destruction of Personal Data will also occur if the Personal Data are not necessary for the purpose or the storage of your data is inadmissible for other reasons provided for by law.
4. Contact us
If you have any questions, comments and queries about these Principles, do not hesitate to contact us at the address or contact details.
Contact: info@bulterraig.com , +359 896 811 204 and +359 897 909 702
