PRIVACY, SECURITY AND PROTECTION OF PERSONAL DATA POLICY

The protection of your personal data is important to us. Therefore, we process your information exclusively on the basis of applicable legislation, specifically the GDPR, the Personal Data Protection Act (PDPA) and the Electronic Commerce Act (ECA). In this declaration, we inform you about the most important aspects of the processing of your data on our website.

 

What happens to your data after you contact us?

When you place an order or write to us via the form on our website or send us an email, we store your data so that we can process your order or request and to answer your follow-up questions. We will not share this information with third parties without your express consent!

 

Storage of your data

Please note that in order to facilitate the order and purchase process, as well as the subsequent performance of the contract with you, we store your IP address, as well as your names, address, email address and telephone number. We also collect other data in order to track behavior in an anonymous version and analyze internet traffic - device ID, history of visited pages on nitex-bg.com, web browser used. With this data we cannot identify you directly, it only helps us to better understand your behavior on this Site.

We need the data you provide to fulfill our contractual or pre-contractual obligations towards you. We do not share this data with third parties, except for:

• the payment service provider processing the payment (bank, courier company);
• the courier company with which we deliver your purchase and;
• companies for analyzing user behavior (only anonymized data about your device, browser and pages visited on this Site are provided; see section Cookies and Internet traffic analysis).

When an order is completed and a contract executed by us on the basis of Art. 6, para. 1, letters (a) and (b) of the GDPR, we store all data on the legal relationship until the expiration of the period provided for in Art. 12 of the Accounting Act (Accounting Act) 10-year term.

 

Data security

We have implemented appropriate measures to prevent the accidental loss, use or unauthorized access, alteration or disclosure of your personal data. In addition, we limit access to your personal data to those employees and third parties who have a need to receive this information. They will only process personal data based on our instructions and in accordance with their obligation of confidentiality.

When we store the information with us, it is physically saved on servers in the data center Bulgaria, Sofia (ICN DC - Telepoint), and are owned by " Internet Corporate Networks " EOOD. The company meets GDPR requirements

The protection of electronic data from unauthorized access, damage, loss or destruction, committed intentionally by a person or in the event of technical malfunctions, accidents, accidents, disasters, etc., is ensured through:

• encryption of your personal data stored on the server;
• entering passwords for the computers through which access to personal data is provided and the files that contain personal data;

 

Cookies and Internet traffic analysis

Our website uses so-called "cookies". These are small text files that are loaded in the browser and stored on your end device. They are harmless. We use them to keep our site easy to use. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser the next time you visit our Site.

We use " cookies " on the basis of Art. 4a of the Law on Electronic Commerce (ELC) and Article 6, para. 1 letter (f) GDPR.

If you do not agree to this, you can refuse storage by setting your browser so that it informs you when a site wants to save cookies on your device, and you can accept them accordingly.

Note that disabling cookies in your browser may limit the functionality of our site for you.

Most cookies do not contain sensitive information about you or personal data with which we can identify you directly. Information is provided to trusted partners who operate under confidentiality agreements. Through their services and technologies, we are able to analyze your behavior and improve the performance of our Site. These companies do not have the right to independently share this information. These companies are:

• Google with its respective products: Google Analytics, Google Adwords:  https://privacy.google.com/  ;
• Facebook:  https://www.facebook.com/privacy/explanation  ; 

Our legitimate interest within the meaning of the GDPR consists in improving the functionality of our site. We value the privacy of our users, which is why the data we use to analyze web traffic is anonymized by the provider of the technical solution.

 

 

Rights of data subjects under the GDPR

• Right of access to your personal data:  you have the right to receive confirmation from us whether personal data about you is being processed and, if so, you have the right to access the personal data and information through your profile.
• Right to rectification of personal data:  if you find that the personal data we process about you is inaccurate, you have the right to correct that personal data.
• Right to erasure of personal data (the right to be forgotten):  in certain circumstances, such as if your personal data has been processed unlawfully or you have withdrawn your consent (if the processing of personal data is based on consent), you have the right to delete everything through the profile or request that we delete your personal data from us.
• Right to restriction of processing:  in certain circumstances, such as if you doubt the accuracy of your personal data or you have objected to our legitimate purpose for processing your personal data, you have the right to request that we restrict the processing of your personal data until it is solution found.
• Right to object to processing:  in certain circumstances, such as if you doubt our legitimate interest in processing your personal data, you have the right to object, on grounds related to your particular situation, to such processing.
• Right to data portability:  if your personal data is processed by automatic means with your consent or for the purpose of fulfilling our contractual relationship, you have the right to request that we provide you with your personal data in a machine-readable format for transfer to another data controller.
• Right to lodge a complaint with a supervisory authority:  you have the right to lodge a complaint regarding the processing of your personal data by us with the relevant supervisory authority.