GDPR personal data protection policy

My personal data under the GDPR 

PERSONAL DATA PROTECTION POLICY

INTRODUCTION

In carrying out its activities, “Boris Donev” EOOD, UIC 205601312, with registered office and business address at: 5B Bratya Miladinovi St., Blagoevgrad, processes information, including personal data. 

This website, www.ikonata.bg, is owned by “Boris Donev” EOOD and is operated by the Company in accordance with the provisions of the Personal Data Protection Act and related legislation, including but not limited to Regulation (EU) 2016/679 (“GDPR”). 

This Policy aims to inform you about how we process your personal data in our capacity as a data controller, as well as about your rights. “Boris Donev” EOOD (Ikonata.bg) strives to provide you with accessible and useful information on its website. 

The protection of personal data is of utmost importance to us. “Boris Donev” EOOD (Ikonata.bg) does not sell your data to other companies or individuals. If we provide your data to third parties, they are our contractors, who process the information on our behalf, following our instructions and applying our standard for protecting your personal data. We strive to be as clear, specific, and transparent as possible in the information we provide you about the processing of your personal data.

WHAT IS PERSONAL DATA

Personal data means any information relating to an identified or identifiable natural person (such as an email address, name, age, date of birth, telephone number, and others).

Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning the health or sexual life or sexual orientation of a natural person, constitute a special category of personal data. “Boris Donev” EOOD (Ikonata.bg) does not process such information about you.

COLLECTION AND USE OF PERSONAL DATA

“Boris Donev” EOOD (Ikonata.bg) collects, uses, stores, and processes your personal data that the Company needs to provide the services and goods of “Boris Donev” EOOD (Ikonata.bg). Your data is used to manage your account on our website and manage your purchases. It may also be used for the Group’s statistical purposes related to improving the quality of our services, as well as for the marketing activities of “Boris Donev” EOOD (Ikonata.bg).

Below are examples of the types of personal information that “Boris Donev” EOOD (Ikonata.bg) may collect, as well as the ways in which we may use it. 

WHAT PERSONAL INFORMATION WE COLLECT

When creating an account, registering on our website, purchasing a product, or entering into a contract—the names you provide; your email address; the delivery address for the goods you order.
- To manage access to and identify your account—email address and password;

- Payment details and protection of your data related to payment—email address, customer number, telephone number, billing address, delivery address, information related to the payment method, purchase amount, and frequency of purchases made;
- For issuing and processing an invoice—your name, billing address, delivery address, email address, payment method used, payment amount and product(s), and purchase date;
- Participation in an online survey and other marketing activities—various types of information, including, but not limited to, your name, postal address, telephone number, email address, preferred method of contacting you, and information about your credit card, purchase history, and search history;

- To ensure safety from defective products and in connection with goods, claims, and complaints—your name, email address, purchased products, postal address, information regarding the claim/complaint, and the affected product(s).

FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE USE YOUR PERSONAL INFORMATION

The main activities, purposes, and legal bases related to the processing of personal data for “Boris Donev” EOOD (Ikonata.bg) are:

- Activities related to managing our online store:

-- Data for the purpose of fulfilling order(s) placed through the online store of “Boris Donev” EOOD (Ikonata.bg), based on the conclusion of a contract;
-- Data for our fraud-prevention system in connection with payment, based on our legitimate interest in protecting the data we control;

-- Accounting for and invoicing purchases and the online store based on our legal obligation to do so;

- Activities related to managing your account on our website:
-- Data related to managing your access (identification), based on your consent;

- Marketing activities of the Company based on consent provided.

The personal information we collect allows us to keep you informed about our latest products and upcoming events. It also helps us improve our services, content, and advertising. If you do not wish to be included in our mailing list, you can unsubscribe at any time by updating your preferences in your account and on the website.

We use personal information because it helps us develop, deliver, and improve our products, services, content, and advertising.

We may periodically use your personal information to send important messages, such as notifications regarding your purchases and changes to our rules, terms, and various policies.

We may also use your personal information for internal purposes, such as checks, data analysis, and research to improve the products, services, and customer communications of “Boris Donev” EOOD (Ikonata.bg).

If you participate in events, lotteries, contests, or promotions, we may use the information you provide to administer these programs.

In addition, your data are processed by “Борис Донев” EOOD (Ikonata.bg) for the following purposes:

- Identifying anomalies and complaints related to products of “Борис Донев” EOOD (Ikonata.bg), based on legitimate interest;
- Questions addressed to us concerning products, based on your consent;
 

COOKIES AND OTHER TECHNOLOGIES, USE OF COOKIES

WHAT ARE COOKIES?

Cookies are small information files that are saved in your internet browser (data about the language used, connection time, and web pages visited) or on your hard drive when you visit the website. We may access them in connection with your most recent visits to improve and facilitate your browsing experience. The paragraphs below are intended to provide you, transparently, with the necessary and comprehensive information about the cookies that “Борис Донев” EOOD (Ikonata.bg) uses on its website. Please note that if you share the use of your device with other people, the personalized nature of how the cookies function may also change.

WHAT TYPES OF COOKIES ARE USED BY “Борис Донев” EOOD (Ikonata.bg)?

The website uses cookies to facilitate your navigation. The following cookies are used:

- Cookies necessary for the functioning of your browsing experience, which allow you to use essential features such as managing a “shopping cart” and maintain your identification throughout your browsing session;
- Personalization cookies, which allow you to visit web pages in a personalized manner based on your previous visits, purchases, and other activities. They help you find the offers that suit you best more quickly;

- Advertising cookies, which allow you to receive offers from “Борис Донев” EOOD (Ikonata.bg) on the web pages of external partners.

You can configure your internet browser not to save cookies or delete those already saved. If you wish to use these features, please contact the manufacturer of your internet browser.

“Борис Донев” EOOD (Ikonata.bg) is not responsible if the internet browser you use does not support features for controlling the use of cookies, refusing to save them, or deleting saved cookies. If you disable the saving of cookies or delete cookies that have already been saved, the website may malfunction depending on their type.

SOCIAL NETWORKS

Your access to social networks such as Facebook, Google +, YouTube, Twitter, and others requires separate registration and acceptance of the terms and conditions of those websites. “Борис Донев” EOOD (Ikonata.bg) is not responsible for the protection of your personal data when accepting these terms and conditions. Please read the terms and conditions of these websites carefully.

DISCLOSURE OF YOUR PERSONAL DATA

In certain cases, “Boris Donev” EOOD (Ikonata.bg) may disclose certain personal information to strategic partners—subcontractors who work with us by providing products and services related to the Company’s business or by assisting “Boris Donev” EOOD (Ikonata.bg) with customer marketing. We will share personal information only to improve our products, services, and advertising; it will not be shared with third parties for their own marketing purposes. 

Your personal data may be provided to companies within the Group for statistical purposes and for managing the services and the quality of their provision.

In cases where “Boris Donev” EOOD (Ikonata.bg) shares information about you with third parties—suppliers of “Boris Donev” EOOD (Ikonata.bg)—the Company has mechanisms to ensure that they provide a level of data protection in accordance with the agreed standard. Your data is considered confidential by our partners as well.

“Boris Donev” EOOD (Ikonata.bg) may be required by law, in legal proceedings, in litigation, and/or at the request of public and governmental authorities in or outside your country of residence to disclose your personal information. 

We may also disclose information about you if we determine that such disclosure is necessary or appropriate for purposes of national security, law enforcement, or other matters of public importance.

We may also disclose information about you if we determine that such disclosure is reasonably necessary to enforce our terms and conditions or to protect our operations or users. In addition, in the event of a reorganization, merger, or sale, we may transfer any and all collected personal information to the relevant third party.

TRANSFER TO THIRD COUNTRIES

As a rule, “Boris Donev” EOOD (Ikonata.bg) does not transfer your data. In certain cases, your data may be transferred to third countries under an agreement between “Boris Donev” EOOD (Ikonata.bg) and a company acting as a service provider for certain services. In such cases, “Boris Donev” EOOD (Ikonata.bg) guarantees that this transfer will be carried out in full compliance with the applicable legal provisions and ensures the level of protection of your data (including, but not limited to, the conclusion of standard transfer clauses approved by the European Commission). The protection of your information remains with your data. If our partners are located in the United States, we verify their certification under the Privacy Shield, which is a legal mechanism allowing data transfers to that country.

PROTECTION OF PERSONAL INFORMATION

“Boris Donev” EOOD (Ikonata.bg) takes precautionary measures—including administrative, technical, and physical measures—to protect your personal information from loss, theft, and misuse, as well as from unauthorized access, disclosure, alteration, or destruction.

The online service—ONLINE STORE—uses encryption through secure methods on all web pages where personal information is collected.

When you post on forums, chat rooms, or social networking services, the personal information you share is visible to other users and may be read, collected, or used by them. You are responsible for the personal information you choose to provide in these cases.

All employees of “Boris Donev” EOOD (Ikonata.bg) are required to protect the confidentiality of your information and to comply with the applicable organizational and technical measures for its protection. Access to your data is restricted according to the need to perform their duties.

In cases where “Boris Donev” EOOD (Ikonata.bg) shares information about you with third parties—suppliers of “Boris Donev” EOOD (Ikonata.bg)—the Company has mechanisms in place to ensure that they provide a level of data protection in accordance with the agreed standard. 

RETENTION OF PERSONAL INFORMATION

We will retain your personal information for the period necessary to fulfill the purposes set out in this Personal Data Protection Policy, unless we are legally required to retain it for a longer period. Depending on the type of data and the purposes for which it was collected, a retention period is defined, after which the information is permanently deleted.

YOUR RIGHTS REGARDING YOUR DATA

If you have provided your personal data to “Boris Donev” EOOD (Ikonata.bg), you have the following options at any time:

- to check the accuracy, completeness, and currency of your contact information by logging into your profile on the website of “Boris Donev” EOOD (Ikonata.bg);
- the right to access your personal data processed by “Boris Donev” EOOD (Ikonata.bg);

- the right to request the appropriate correction, erasure, or blocking of your personal data;
- the right to data portability in a structured, commonly used, and machine-readable format;

- the right to object at any time to the processing of your personal data where there are legal grounds for doing so;
- the right to refuse the processing of your personal data for the purpose of receiving the newsletter and other marketing communications, etc.;

- the right to lodge a complaint with the Commission for Personal Data Protection if you believe that your data protection rights have been violated.

If you wish to exercise your rights or opt out of receiving the newsletter and other marketing communications, you may contact us by sending a message to adimin@ikonata.bg or use the unsubscribe tools below.

We may refuse to process requests that are manifestly unfounded or repetitive, require disproportionate technical effort, jeopardize the privacy of other users, are extremely impractical, or for which access is otherwise not legally required.

Exercising your rights, provided that your requests are not repetitive or unfounded, is not subject to a fee.