Privacy policy

Effective from: 22.07.2024

Last version:   22.07.2024

 

1. What is personal data?

Personal data is information that directly or indirectly identifies you as a natural person, as indirect means when it is combined with other information such as your name, postal address, e-mail address, telephone number, etc.

2. How do we process your personal data?

We (the site administrator – WORK FACTORY OOD, with UIC 207727933, headquarters and management address in the city of Sofia, 85 Alexander Malinov Blvd., floor 1, office 1, e-mail hi@workfactory.bg) will use Your personal data solely for the purposes of fulfilling the contract for the provision of goods and services to which you are a party when you send an inquiry or order from our site.

We will only use personal data as set out in this policy, unless you have given us your express consent to another use of your personal data, such as through an express statement of consent to send marketing messages.

3. Which of your personal data do we process?

In order to fulfill our obligations with you under our contract for the provision of goods and services, as well as for the purpose of preparing an offer for concluding such a contract, we will process the following categories of your personal data:

(1) names;

(2) e-mail address;

(3) contact phone number.

The listed categories of personal data are only those that you provide to us when making a request or requesting an offer from us.

We may be required to process and store personal data on legal grounds and to achieve regulatory compliance such as to prevent, detect or investigate crime, prevent loss, fraud or other financial abuse.

4. Using the Home Page:

This Privacy Policy also applies to your use of our website with the following mechanics and features related to the protection of personal data.

(1) “Cookies”: Our Website uses cookies and other technologies to improve user experience and Website functionality, usability and security, as well as for research purposes related to advertising effectiveness. Please see our cookie policy for more details.

 

(2) Third Party Websites: For the convenience of our visitors, this portal contains links to various websites that are not affiliated, controlled or operated by us. The policies and procedures we describe here do not apply to those websites. We are not responsible for the security or protection of any data collected by these third parties. We advise you to contact these websites directly for information about their data protection policies.

5. Who we share your personal data with:

We will disclose your personal data only for the purposes and only to those third parties set out below – unless we have obtained from you additional consent to transfer personal data to other categories of third parties, given elsewhere, such as through a consent statement for a specific purpose. We will take appropriate measures to ensure that your personal data is processed, protected and transferred in accordance with applicable law.

(1) External service providers:

When necessary, we engage other companies and individuals to perform certain tasks on our behalf, supplementing our services, such as to companies delivering our goods – postal operators, forwarding companies, etc. We will share or provide access to such information with external service providers only to the extent necessary for the relevant purposes. This information cannot be used by them for any other purpose, and in particular neither for their purposes nor for the purposes of third parties. External suppliers are obliged by contract with us to respect the confidentiality of your personal data.

(2) Conversion of a commercial company and redemption of shares:

In connection with a conversion, restructuring, merger, sale or other transfer of assets, we will transfer information, including personal data, on a reasonable scale to the transferee of such interests or assets, and as necessary for the Transfer of Ownership, provided that that the receiving party has agreed to treat your personal data in a manner that complies with applicable data protection legislation.

(3) Public bodies:

We will disclose your personal data to public authorities when required by law. For example, we will honor requests from courts, administrative and other public state or municipal authorities, which may include similar state or municipal authorities.

We do not transmit your personal data, nor any information that may concern you, outside the territory of the Republic of Bulgaria.

6. Processing of personal data of children:

We do not collect or process personal data of children under the age of 18, except with the consent of a parent or guardian in accordance with applicable local law. If we learn that a child’s personal data has been accidentally collected, we will promptly delete the data in question.

7. Processing of special categories of personal data (“sensitive” data):

We do not collect or process the so-called special categories of personal data, namely: personal data revealing racial or ethnic origin, political views, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the sole purpose of identifying a natural person, data for the state of health or data on the sex life or sexual orientation of the natural person.

8. Security of your data:

We take the security of your personal data seriously. We apply the appropriate level of protection and to this end we have developed reasonable physical, electronic and technical procedures to protect the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to transmitted, stored or otherwise processed personal data. Access to your personal data is permitted only to those employees, service providers or persons related to us on the principle of need for information for official purposes or who need it for the performance of their official duties. In the event of a data leak containing personal data, we will follow all applicable notification norms in such cases.

9. What are your legal rights?

As a data subject, you have specific legal rights related to the personal data we collect from you. This applies to all processing activities that we carry out and undertake with your personal data and that are listed above. We respect your individual rights and will answer your questions in an adequate manner.

The list that follows contains information about your rights arising under applicable data protection laws:

 

• Right to rectification: You have the right to rectification of personal data concerning you. We make reasonable efforts to ensure that the personal data in our possession and under our control, which is regularly processed, is accurate, complete, up-to-date and relevant, based on the latest information available to us.

 

• Right to restriction: You have the right to restrict the processing of your personal data if:

– dispute the accuracy of your personal data for the period we need to verify their accuracy,

– the processing is unlawful and you request restriction of processing instead of deletion of your personal data,

– we no longer need your personal data, but you require it for the establishment, exercise or protection of rights and legal interests, or

– objections to processing pending verification of whether our legal grounds prevail over yours.

 

• Right of access: You have the right to ask us for information about the personal data we hold about you, including information about what categories of personal data we hold or control, what they are used for, where we obtained them from, if not directly from you, and to whom they were disclosed, if applicable. You have the right to one free copy of the personal data we hold about you. Subject to applicable law, we reserve the right to charge a reasonable fee for any additional copy beyond the first you may request.

 

• Right to portability: Upon your request, we will transfer your personal data to another controller where this is technically feasible, provided that the processing is based on your consent or a contractual obligation. Instead of receiving a copy of your personal data, you may request that we transfer it directly to another controller designated by you.

 

• Right to deletion: You have the right to delete your personal data if:

– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

– you have the right to object to further processing of your personal data (see below) and exercise this right to object to processing;

– the processing is based on your consent, you withdraw this consent and there is no other legal basis for the processing;

– the personal data were processed illegally;

 

unless the processing is necessary for the following reasons:

– to comply with a legal obligation that requires processing by us;

– in particular, for the purposes of archiving in the public interest;

– for the establishment, exercise or protection of rights and legal interests.

 

• Right to object: You may object at any time to the processing of your personal data in relation to your particular situation, provided that the processing is not based on your consent, but on our legitimate interests or those of a third party. In such case, we stop processing your personal data, unless we can prove that there are compelling legal grounds that take precedence over your interests, or for the establishment, exercise or defense of legal claims. If you object to the processing, please specify whether you wish to delete your personal data or restrict the processing by us.

 

• Right to file a complaint: In the event of an alleged violation of applicable data protection laws, you may file a complaint with the data protection supervisory authority in your country of residence or place of the alleged violation. In the Republic of Bulgaria, this body is the Personal Data Protection Commission (PCPD).

Additional information needed to exercise your rights:

• Time: We will try to comply with your request to exercise rights or request information from us regarding your personal data within 30 days, which time may be extended for specific reasons related to the particular legal right, or due to the complexity of your request.
• Restricting access: In certain situations, we may not be able to give you access to all or part of your personal data due to legal regulations. If we refuse your access request, we will tell you the reason for this refusal.
• Impossibility of identification: In some cases, we may not be able to verify your personal data based on the identifiers provided in your request. In such cases, where we cannot identify you as a data subject, we are not objectively able to fulfill your request to exercise your legal rights as set out in this section, unless you provide us with additional information that would allow us to We identify you.
• Exercising Your Legal Rights: To exercise your legal rights, please contact us at the addresses provided at the end of this policy.

10. Storage of your personal data:

In general, we will store the personal data that you have provided to us for the purposes of selling and delivering goods for as long as we need them to complete the delivery, as well as for a longer period, to the extent that this is required by the applicable legal acts regulating the requirements for accounting and control of the company’s cash flows. We keep the history of your purchases on the site for a period of 3 years.

11. Changes to this policy:

We reserve the right to change our data protection practices and to update and amend this policy at any time. For this reason, we encourage you to consult the policy regularly. This data protection policy is current as of the “last revision” date, which is indicated at the top of this page.

12. Contact details:

Please direct your inquiries regarding data protection and any requests regarding the exercise of your legal rights to the email specified on the site.