PRIVACY POLICY AND PERSONAL DATA PROTECTION (GDPR)
GENERAL PROVISIONS
Art.1. (1) This Privacy Policy provides information on the following:
the manner in which Ecoenergy - Elena" EOOD, referred to as ADMINISTRATOR for short, processes personal data on www.mezeta.bg of individuals who load the internet address into their technical device, hereinafter referred to as USER/
regulates the organization, internal order, technical and organizational measures for processing personal data and the permissible type of protection.
(2) This policy is effective from 24.11.2020 and is an integral part of the General Terms and Conditions for Use of the website with the address (URL) www.mezeta.bg.
DEFINITIONS
Art.2. (1) The terms used in this Privacy Policy and Personal Data Protection have the following meaning:
"Personal data" - any information related to an identified natural person or an identifiable natural person ("data subject"); an identifiable natural person is a person who can to be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Processing” – any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
“Administrator” – the company “Ekoenergy - Elena” EOOD with its registered office and registered office in Elena, ul. Ivan Momchilov 57, on, entered in the register of commercial companies at the Registry Agency – TRRYULNTS with UIC 201477056, represented by its manager and legal representative Pencho Truhchev, which manages and maintains the Website and the Platform;
“Consent of the data subject” – any freely expressed, specific, informed and unambiguous indication of the will of the data subject, by means of a statement or a clear affirmative action, which expresses his consent to the processing of personal data relating to him;
“Cookies” – small data files that are placed on your computer or device by your browser. Cookies allow web servers to transfer data to a given computer or device for archiving and other purposes. With the help of cookies, a website can become easier to use.
(2) All definitions given in the General Terms and Conditions are also applicable in this Privacy and Personal Data Protection Policy.
III. PROVIDER DATA
Art.3. (1) The administrator of the Platform www.mezeta.bg is "Ekoenergy - Elena" EOOD with its registered office and management address in the city of Elena, ul. Ivan Momchilov 57, registered in the register of commercial companies at the Registry Agency – TRRYULNTS with UIC 201477056
(2) The Administrator has the following contact details:
For contact: "Ekoenergy - Elena" EOOD
Contact phone: 0888 54 68 56
e-mail: mezeta.truhchev@gmail.com
For contact with the Data Protection Officer:
For contact with the Data Protection Commission:
Address: Sofia, ul. "Prof. Tsvetan Lazarov” № 2,
telephone: (02) 940 20 46
fax: (02) 940 36 40
e-mail: kzld@government.bg, kzld@cpdp.bg
website: www.cpdp.bg
PRINCIPLES FOR COLLECTING AND PROCESSING PERSONAL DATA
Art. 5 The Administrator complies with the following principles when processing your personal data:
lawfulness, good faith and transparency;
limitation of the purposes of processing;
relevance to the purposes of processing and minimization of the collected data;
accuracy and timeliness of data;
limitation of storage in order to achieve the purposes;
integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
PERSONAL DATA
Art. 6. When sending an order without registration or inquiry via the contact form, the Supplier will request and process personal data that are necessary solely for the execution of delivery and payment of the requested order, namely as follows:
name and surname;
company name /optional/;
email address;
telephone number;
country, city, postal code and address;
Art.7. All users automatically provide personal data in order to use the functionality of the platform, namely:
Device from which the user loads the platform and the information related to it - version, operating system, unique identifiers, etc.;
Location /Your location/ - various technologies are used, such as: GPS, IP address, Wi-Fi access points
All technical details, such as: the IP address of your device, time zone and operating system;
Data collected when reading cookies, in case they are accepted by the respective user.
Art.8. The Provider does not collect and process personal data that:
reveal racial or ethnic origin;
reveal political, religious or philosophical beliefs;
reveal membership in political parties or organizations, associations with religious, philosophical, political or trade union goals;
relate to health status, sexual life or the human genome, except in cases where a signal has been received for an unwanted side effect after using a product;
are provided by users under the age of 16 without the consent of their parents or legal representatives. The Administrator will delete any information sent by or relating to users who are known to be under the age of 16 and have not received the consent of their parents or legal representatives to use the platform, services and content.
Art.9. The platform provider collects and processes personal data only for the following purposes:
Performance, delivery and payment of the goods ordered by the user.
For accounting purposes.
Art.10. Bulgarian law applies to the commercial relations that have arisen between the Merchant and the Users.
Art.11. All disputes arising from or relating to this policy, including disputes arising from or relating to their interpretation, invalidity, implementation or termination, will be resolved out of court by mutual agreement of the parties, and in the absence of such a court before the competent court of the Republic of Bulgaria.
PROVIDER’S RESPONSIBILITY, PERSONAL DATA PROTECTION
Art.12. (1) Insofar as the platform services are not intended for persons under the age of 16 and have not obtained the consent of their parents or legal representatives, their personal data are not collected and processed. In the event of incorrect information provided regarding the user’s age, the provider is not responsible for the collected and processed personal data of minors.
(2) The provider processes personal data of individuals /individuals – clients, individuals – contractors, individuals representing legal entities and/or other organizations, other individuals in pre-contractual and/or contractual relationships/, in compliance with the requirements of Regulation 2016/679, in force at the time of provision of the service, Personal Data Protection Act, Ordinance No. 1/30.01.2013. for technical measures and levels of protection, as well as Internal Rules for measures and means of protection of personal data collected, processed, stored and provided to the Provider.
(3) The Provider is not responsible for incorrectly provided data.
(4) The Provider does not guarantee that the platform will be available continuously and that certain errors will not occur in accessing it.
Art.13. The User declares that by accepting this Privacy and Personal Data Protection Policy, he is aware of and agrees that for the performance of the services provided to him, his personal data may be transferred to external consultants, lawyers, accountants, auditors and/or financial institutions related to the Provider, as well as to other third parties in connection with the collection of the Company's receivables, including the so-called collection companies and private bailiffs, as well as for the performance of technical security and performance of the services - may be provided to telecommunications providers, courier services and the like.
Art.14. Users have the right to access the platform without providing personal data and registration, but in order to place an order - they are mandatory.
VII. PERIOD OF STORAGE OF PERSONAL DATA
Art.15. (1) The criteria used to determine the period of storage of personal data are those provided for in national legislation as well as the legal frameworks specified in the Regulation. After the expiry of the period specified in the Regulation, the relevant data shall be deleted in accordance with established rules if they are no longer necessary for the performance of a contract or for the emergence of a contract between the two parties.
(2) If the purpose of storage is not applicable or if the storage period set by the European legislator or another competent legislator expires, the personal data shall be blocked or deleted within 12 months after the expiry of the period or achievement of the purpose in accordance with legal requirements.
