Privacy Policy

Privacy Policy

PRIVACY POLICY AND PERSONAL DATA PROTECTION OF DSTOYKOVA.COM

The protection of personal data is of great importance to Dstoykova.com, and we want the process of processing your personal data to be completely open and transparent for you. That is why we have a policy that outlines how your personal data will be processed and protected.

This Privacy Policy has been prepared and is based on the current Bulgarian and European legislation regarding the protection of personal data. Any changes and amendments to the Privacy Policy will be applied after the publication of its current content on our website Dstoykova.com, as well as after notifying the users of the site via email.

The Privacy Policy is applicable to your personal data if you are an individual or a representative of a legal entity that is our client. It will clarify what personal information we process when providing our services, for what purposes we use it, and what your rights are as a data subject.

WHO PROCESSES AND IS RESPONSIBLE FOR YOUR PERSONAL DATA?

1. Our name and address – Art Gallery D. Stoykova, website Dstoykova.com, correspondence address: Sofia, Tsar Asen St. 61, mobile: +359 886687280, email: danielastoykova@abv.bg

We never transfer, sell, or exchange your data for marketing purposes to third parties. Data forwarded to third parties is used only to provide our services.

1. What data do we process, for what purposes, and on what legal basis?

Depending on specific purposes, Dstoykova.com processes the data listed below independently or in combination with each other.

1.1 Categories of data

A) Data provided by you, necessary for identification and fulfillment of the contractual obligations of Dstoykova.com and the client:

* full name, address, phone number, and email address for contacting you or the contacts specified by you;

* data collected during payment made to Dstoykova.com

B) Data prepared and generated by Dstoykova.com during the provision of services/goods:

* order number, customer number, and similar;

* data necessary for issuing invoices, the value of used services; information on the payment method, completed and due payments; information on changes in the use of services, limitations, and service restoration;

* IP address when visiting our website;

1.2. Purposes and legal bases for processing personal data:

A) Processing of data necessary for fulfilling the order. Dstoykova.com processes your data for the following purposes:

* Identifying the customer when an order is placed in our online store Dstoykova.com or by phone.

* Updating your personal data or the information regarding the services provided in relation to the order;

* Sending courier shipments with ordered goods;

* Technical assistance for creating accounts and recovering forgotten passwords to access our website;

* Payment for orders, installment payments for due amounts;

B) Sending marketing messages upon obtaining explicit consent from the user:

* Providing information about new products and current offers;

* Providing information about promotions, games, and events organized by Dstoykova.com;

C) In fulfillment of its legal obligations, Dstoykova.com processes your data for the following purposes:

* Providing information about the customer and their purchases and/or services used upon request from a competent authority;

* Issuing invoices;

* For conducting tax and social security audits by the relevant competent authorities;

2. Categories of third parties who have access to and process your personal data?

2.1. Personal data processors – individuals who, based on an order, process your personal data on behalf of Dstoykova.com or have direct/indirect access to your personal data, could be:

* Transport/courier companies to fulfill our contractual obligations for delivering the order.

* Banks handling payments made by you;

2.2. Other personal data controllers to whom Dstoykova.com provides your personal data, processing your data on their own behalf:

* Competent authorities that, under statutory authority, have the power to require Dstoykova.com to provide information, including personal data, such as – a Bulgarian court or a court in another country, various supervisory/regulatory authorities – Consumer Protection Commission, Communications Regulation Commission, authorities with powers for national security and public order protection;

To ensure adequate protection of its customers' data, we implement all necessary organizational and technical measures provided in the Personal Data Protection Act.

3. How long do we store your personal data?

The duration of storage of your personal data depends on the purposes of processing for which they were collected:

* Personal data retained upon registration of active (registered) users on the site are stored until registration is terminated by the user;

* Personal data retained upon obtaining consent for sending marketing messages are stored until the user withdraws their consent.

* Personal data processed for the purpose of concluding/amending and fulfilling an order are stored until all financial relations between the parties are definitively settled;

* Personal data processed for issuing accounting/financial documents for conducting tax and social security audits, including but not limited to – invoices, debit, credit notes, handover protocols, service provision contracts are stored for at least 5 years after the expiration of the limitation period for extinguishing the public claim, unless applicable legislation provides for a longer period.

* Dstoykova.com may store some of your personal data for a longer period until the relevant limitation period expires for:

- preparing statistical reports on the operation of the online store;

- protection against potential customer claims regarding order fulfillment/return, as well as for a longer period in the event of an already arisen legal dispute related to the above until its final resolution by a binding court/arbitration decision;

4. What are your rights regarding the processing of personal data by Dstoykova.com?

As our client regarding your personal data, you have the following rights:

*4.1. Right of access: to obtain access to your personal data and information related to it.

*4.2. Right of erasure/correction: to request the deletion, correction, or blocking of your personal data when it is inaccurate or needs to be completed, or if its processing does not comply with the requirements of the legislation;

*4.3. Right of objection: to object to Dstoykova.com at any time against the processing of your personal data if there is a legal basis for this;

*4.4. Right to withdraw: to withdraw your consent for the processing of your personal data, but only when their processing is based solely on your consent (also applies to receiving marketing messages).

*4.5 Right of complaint: to file a complaint with the CPDP if you believe your rights have been violated;

How can you exercise your rights?

We take the protection of personal data very seriously, which is why we have a customer service team that processes your requests regarding the above rights. You can always contact them at danielastoykova@abv.bg

5. Can you refuse to provide personal data to Dstoykova.com, and what are the consequences?

To accept and fulfill your orders in accordance with our legal obligations, Dstoykova.com needs certain data. Failing to provide the following data prevents Dstoykova.com from processing and delivering your orders:

* full name, address, phone number, and email address for contacting you, or contacts specified by you;

*