PERSONAL DATA PRIVACY POLICY

for the website woodenpellets.bg

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation / GDPR).

Information about the company processing your personal data:

Supplier: LES-STROI-TRANS EOOD
Registered office and management address: 1 Han Presiyan St., 4550 Peshtera, Bulgaria
Business address and address for consumer complaints: 1 Han Presiyan St., 4550 Peshtera, Bulgaria
Contact details: les_trans_stroy_eood@abv.bg, telephone: +359 899 170 541
Registration in public registers: UIC 112660442
Email: les_trans_stroy_eood@abv.bg
Website: woodenpellets.bg

1. Introduction

The security and proper use of personal data are of utmost importance to us. Our Privacy Policy does not regulate rights and obligations, but aims to explain to users what personal data we process in connection with the provision of goods and services, why and how we process such data, including when it is necessary to disclose personal data to third parties. It also provides information about the rights users have in connection with the processing of personal data by LES-STROI-TRANS EOOD.

For greater clarity and user convenience, examples are provided in various sections of this Privacy Policy to illustrate why and/or how LES-STROI-TRANS EOOD processes users' personal data. These examples do not form part of this Privacy Policy and are not exhaustive.

2. Basic Principles for Processing Personal Data

We process personal data lawfully, fairly and transparently;
We process personal data collected for specified, explicit and legitimate purposes and do not further process it in a manner incompatible with those purposes;
The personal data processed is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed (“data minimisation”);
Personal data is kept accurate and up to date where necessary, and we take all reasonable measures to ensure that inaccurate personal data is erased or rectified without delay, taking into account the purposes for which it is processed (“accuracy”);
Personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed (“storage limitation”);
Personal data is processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).

3. Personal Data Controller

The personal data controller is:

LES-STROI-TRANS EOOD

UIC: 112660442

Registered office and management address: 1 Han Presiyan St., 4550 Peshtera, Bulgaria

If you have any questions regarding privacy at LES-STROI-TRANS EOOD or wish to contact us regarding the protection of personal data, you may contact us at les_trans_stroy_eood@abv.bg or by telephone at +359 899 170 541.

This Privacy Policy may be amended in accordance with national and European legislation. Any amendment shall enter into force upon its publication on this page. We recommend that you regularly check our website for the latest changes.

Our Privacy Policy will not be amended in a manner that provides a lower level of protection for the personal data of our customers and users without their written consent.

4. What Personal Data We Process

We collect your personal data in order to provide our goods and services and to continuously improve them. The types of information we collect include:

Information You Provide to Us

We receive and store information that you provide in connection with the services and products of LES-STROI-TRANS EOOD, such as:

information relating to searches on the platform;
orders placed by you;
login details for your customer account, where applicable;
email address where necessary to contact you;
telephone number where necessary to contact you;
address where necessary to contact you or deliver your order;
information entered into contact forms or sent to us by email for the purpose of making an enquiry;
requests for access to personal information, etc.

Automatic Information

We automatically receive and store certain types of information when you use woodenpellets.bg, such as information about your use of the website, including your interaction with content and services available through the website.

Like many websites, we use cookies and other unique identifiers and may receive certain types of information when your web browser or device accesses the website, such as:

the Internet Protocol (IP) address used to connect your computer or other device to the Internet;
email address and encrypted password; information about your computer, device and connection, such as device type, application version or browser type, browser plug-in types and versions, operating system and time zone settings;
the location (village, town or city) of the device or computer from which the website is accessed;
information about interaction with content, including downloads and other details relating to the use of website content;
device metrics, such as device usage, application usage, connectivity data and errors or failed events;
website metrics, including technical errors, interactions with website features and content, settings preferences and other technical information.

We may also use device identifiers, cookies and other technologies on devices, applications and web pages to collect browsing, usage or other technical information for fraud prevention purposes.

Information from Other Sources

We may receive information about you from other sources, such as information relating to the delivery of goods or services purchased through the website, where such functionality is available, and information regarding page views.

What Are Cookies?

In order to provide our services and successfully deliver the products, information pages or other content offered on the website by LES-STROI-TRANS EOOD, we use cookies.

For more information about cookies and how we use them, please read our Cookie Policy.

5. Legal Basis for Collecting and Processing Your Personal Data

We collect and process your personal data lawfully and in accordance with this Privacy Policy.

We process personal data where you have given your explicit consent to the processing, where processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.

Processing may also be necessary for the purposes of our legitimate interests, namely where without processing certain types of data we would be unable to provide our services, conclude contracts for the purchase and sale of goods or services offered on the website, improve the website and our customer service, and provide value to our users.

For example, collecting information about searches performed on the website may constitute our legitimate interest because it is a method of assessing the quality of our services and demand for our products.

If you choose not to provide LES-STROI-TRANS EOOD with personal data necessary for the provision of certain goods or services, LES-STROI-TRANS EOOD may be unable to provide those goods or services to you.

6. Purposes of Personal Data Processing

We process your personal data in order to provide and improve the goods and services offered through the website. These purposes include:

Purchase and delivery of products and services: We use your personal information to receive and process orders, deliver products and services, process payments and communicate with you regarding orders, products, services and promotional offers.
Provision, troubleshooting and improvement of LES-STROI-TRANS EOOD services: We use your personal data to provide functionality, analyse performance, correct errors and improve the usability and effectiveness of the website.
Recommendations and personalisation: We may use your personal data to recommend features, products and services that may be of interest to you, identify your preferences and personalise your experience on the website.
Compliance with legal obligations: In certain cases, we have a legal obligation to collect and process your personal data. For example, we process personal data in order to comply with accounting and tax legislation. Where a consumer purchases goods or services from LES-STROI-TRANS EOOD, we may also need to process relevant personal data in order to comply with applicable consumer protection legislation and handle warranty claims or complaints.
Written or verbal communication with you: We use your personal data to communicate with you regarding the goods and services we provide through various channels, such as telephone, email, chat or other communication channels.
Prevention of fraud and credit risks: We process personal information to prevent and detect fraud and abuse and to protect the security of our customers.

Purposes for Which We Seek Your Consent

We may also ask for your consent to process your personal information for a specific purpose communicated to you.

Where you have consented to the processing of your personal information for a particular purpose, you may withdraw your consent at any time and we will discontinue processing your data for that purpose. However, where processing is necessary for another lawful purpose, we may continue to process the relevant data.

7. Categories of Persons to Whom We Disclose Users' Personal Data

Information about our customers is an important part of our business and we do not provide it to third parties for their own purposes.

LES-STROI-TRANS EOOD may share customers' personal information, or part of it, only as described below and with third parties that apply appropriate data protection practices.

LES-STROI-TRANS EOOD may share customers' personal information with third parties acting as data processors. Data processors process personal data on behalf of and under the instructions of LES-STROI-TRANS EOOD on the basis of a written agreement.

They are not entitled to process the personal data provided to them for purposes other than performing the work assigned to them by LES-STROI-TRANS EOOD.

LES-STROI-TRANS EOOD takes appropriate measures to ensure that engaged processors comply with applicable personal data protection legislation and the instructions of LES-STROI-TRANS EOOD, and that they have implemented appropriate technical and organisational measures for protecting personal data.

Examples of data processors include:

courier service providers;
providers of information system implementation and/or maintenance services that may need access to personal data processed within such systems for the purpose of providing their services;
law firms, accounting firms and other professional service providers;
hosting service providers.

LES-STROI-TRANS EOOD may share customers' personal information with banks and payment institutions. In connection with payments made by bank transfer or through a payment institution, it may be necessary to exchange data between LES-STROI-TRANS EOOD and the relevant bank or payment institution.

Third parties in connection with corporate restructuring or transfer of business: In the event of a corporate restructuring of LES-STROI-TRANS EOOD, such as a merger, or the transfer of assets in accordance with applicable legislation, users' personal data administered by LES-STROI-TRANS EOOD may be transferred to a third-party successor.

Competent authorities: Bulgarian legislation may require LES-STROI-TRANS EOOD to retain certain personal data for specified periods. Where the conditions established by law are met, personal data processed by LES-STROI-TRANS EOOD may be provided to competent public authorities.

8. How We Protect Your Personal Information

We work to protect the security of your information during transmission by using a Secure Sockets Layer (SSL) certificate, which encrypts the information you enter.

In addition, we maintain appropriate physical, electronic and procedural safeguards relating to the collection, storage and disclosure of personal data.

Our security procedures may require us to request proof of identity before disclosing personal information.

The devices and systems on which personal data is stored include security features designed to protect it against unauthorised access and data loss.

It is also important that you protect yourself against unauthorised access to your password, computers and devices. Please remember to log out of your account when you finish using a shared computer.

9. How Long We Store Your Personal Data

LES-STROI-TRANS EOOD retains users' personal data for as long as necessary to achieve the purposes set out in this Privacy Policy or to comply with applicable legal requirements.

For the purpose of complying with obligations arising from tax and accounting legislation, user data may be retained for a period of 11 years following the termination of the user's most recent contract, provided that the user has no outstanding obligations to LES-STROI-TRANS EOOD.

After the applicable personal data processing periods have expired, the data shall be anonymised, erased or destroyed unless:

it is required for pending judicial, arbitration, administrative or enforcement proceedings, or in connection with a complaint submitted by the relevant user that must be considered by LES-STROI-TRANS EOOD; or
the relevant user has exercised their right to request restriction of the processing of personal data relating to them.

LES-STROI-TRANS EOOD makes reasonable efforts to ensure that users' personal data is kept up to date and corrected where necessary and that data which is no longer necessary for the purposes described above is not retained.

10. General Information About the Rights of Individuals

LES-STROI-TRANS EOOD shall take action on a request from an individual to exercise a right under this section only where it is able to identify the relevant individual.

Where the purposes for which LES-STROI-TRANS EOOD processes personal data do not or no longer require the identification of a particular individual, LES-STROI-TRANS EOOD is not obliged to maintain, obtain or process additional information solely for the purpose of identifying that individual in order to act on their request.

LES-STROI-TRANS EOOD shall inform individuals of the action taken on their request within one month of receipt. In certain cases, this period may be extended by up to a further two months.

Where necessary, this period may be extended taking into account the complexity and number of requests. LES-STROI-TRANS EOOD shall inform the relevant individual of any such extension within one month of receiving the request and shall state the reasons for the delay.

Where LES-STROI-TRANS EOOD does not take action on an individual's request, it shall inform the individual without undue delay and no later than one month after receiving the request of the reasons for not taking action and of the possibility of lodging a complaint with the Bulgarian Commission for Personal Data Protection and seeking a judicial remedy.

Additional Information for Identity Verification

Where LES-STROI-TRANS EOOD has reasonable doubts concerning the identity of an individual making a request under this section, it may request additional information necessary to confirm the individual's identity.

Actions taken by LES-STROI-TRANS EOOD in relation to requests for the exercise of rights shall be free of charge unless the requests are manifestly unfounded or excessive.

Where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, LES-STROI-TRANS EOOD may:

a) refuse to act on the request; or

b) charge a reasonable fee based on the administrative costs of providing the requested information or taking the requested action.

11. Specific Rights of Users

Right of Access

Users have the right to obtain confirmation from LES-STROI-TRANS EOOD as to whether personal data relating to them is being processed. Where such data is being processed, users have the right to access the relevant personal data.

Rectification of Inaccurate or Outdated Data

Where personal data processed by LES-STROI-TRANS EOOD is inaccurate or outdated, users have the right to request that LES-STROI-TRANS EOOD rectify such data.

Erasure of Personal Data (“Right to Be Forgotten”)

Users have the right to request that LES-STROI-TRANS EOOD erase personal data relating to them in the following circumstances:

the personal data is no longer necessary in relation to the purposes for which it was collected or processed;
the user has withdrawn the consent on which the processing is based and there is no other legal ground for processing;
the user has objected to processing based on a legitimate interest of LES-STROI-TRANS EOOD and there are no overriding legitimate grounds for the processing;
the user has objected to processing for direct marketing purposes;
the personal data has been unlawfully processed;
the personal data must be erased in order for LES-STROI-TRANS EOOD to comply with a legal obligation under Bulgarian or European Union law.

Restriction of Personal Data Processing

Users have the right to request that LES-STROI-TRANS EOOD restrict the processing of personal data relating to them in the following cases:

the accuracy of the personal data is contested by the user, for a period enabling LES-STROI-TRANS EOOD to verify its accuracy;
the processing is unlawful and the user opposes the erasure of the personal data and requests restriction of its use instead;
LES-STROI-TRANS EOOD no longer needs the personal data for processing purposes, but the user requires it for the establishment, exercise or defence of legal claims;
the user has objected to processing based on the legitimate interests of LES-STROI-TRANS EOOD, pending verification of whether the legitimate grounds of LES-STROI-TRANS EOOD override those of the user.

Right to Data Portability

Users have the right to receive from LES-STROI-TRANS EOOD the personal data they have provided in a structured, commonly used and machine-readable format and to transmit that data to another controller without hindrance from LES-STROI-TRANS EOOD, insofar as:

LES-STROI-TRANS EOOD processes the data for the purposes of entering into or performing a contract with the user or on the basis of the user's consent; and
the processing is carried out by automated means.

Users have the right to request that LES-STROI-TRANS EOOD transmit their personal data directly to another controller where technically feasible.

Right to Object to Processing

Users have the right, at any time and on grounds relating to their particular situation, to object to the processing of personal data concerning them where LES-STROI-TRANS EOOD processes their data on the basis of its legitimate interests.

Where LES-STROI-TRANS EOOD processes personal data for direct marketing purposes, users have the right to object at any time to the processing of their personal data for such marketing purposes.

In other cases, depending on the nature of the objection and the circumstances presented by the relevant user, LES-STROI-TRANS EOOD shall review the objection and:

a) inform the user that it will discontinue processing their personal data; or

b) provide reasons for refusing to discontinue the processing where there is a lawful basis for continuing it.

How to Exercise Your Rights

You may exercise your rights of access, rectification, erasure, restriction of processing and data portability by sending a written request to the data controller at:

les_trans_stroy_eood@abv.bg

12. Right to Lodge a Complaint with a Supervisory Authority

Users have the right to lodge complaints or submit