Personal data protection – Portobelloknit

Administrator Details:
Portobello Design EOOD
Phone: 0889275253
El. mail: info@portobelloknit.com

Our privacy policy is in a transparent, comprehensible and easily accessible form, in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC.
One of our main concerns is the security of personal data of individuals – our customers, employees, suppliers and partners. We have taken the necessary measures to bring our activities in line with good practices and legal requirements for the protection of information and its confidentiality.
When we collect personal data, we follow the principles of minimizing the processed data, legality, transparency and security. We strive to process only personal data that is essential and relevant to the purposes of our business.
When you share personal data with us, we process it in accordance with this policy. Please read the information carefully, and if you have any questions or need information about your personal information, contact us.
This Privacy Policy (“Policy”) contains information about our privacy policies and practices and how we collect, use and protect the data of customers, suppliers, contractors, job applicants and others.

The policy provides rules on how to collect, use and share your personal data. In this document you will find information on how you can access and update your personal data, as well as make certain decisions about how your personal data can be used.
This policy applies both to our online data collection activities – including personal data received by us through various channels such as websites and applications, third party social networks, etc., as well as to data received by telephone. , in person, by e-mail, by sending and receiving data from customers, suppliers and partners. This policy also explains your rights regarding your personal data and how you can exercise those rights.
In case you refuse to provide us with your personal data, which are necessary for the performance of a service, we may be unable to deliver the ordered goods and / or provide you with the requested services.

I. Categories of personal data that we process
Depending on your relationship and the way you communicate with us, we collect and process different types of personal data.
When you send an inquiry through forms on our websites, we collect and process:
• Contact person – names, phone, email;
• Company data;
• Postal address;
• Populated place;
• All other data that you enter voluntarily;
• Any information about the computer system or other technical device that you use to access any of our websites or applications (for example, the Internet Protocol (IP) used to connect your computer or device to the Internet, the operating system and browser used). and their version).
•
Other personal data that you disclose to us – personal data contained in your letters or messages to us.
Personal data of persons related to customers, partners or suppliers – names, telephone, e-mail address and position held in the company of representatives and persons with whom contact is maintained.
Personal data processed when visiting a website
When visiting the Company’s website, we use automatic technologies to collect: the address of your Internet Protocol (IP), login information, type and version of the browser, setting of time zones, types and versions of the browser; information about the operating system and platform used; information about your visit and duration, including URLs that go to, through, and from our sites, as well as other similar information and statistics about your interactions, including response time for content, errors in downloading data, and duration of visits to certain pages.
Our websites mentioned above use cookies and social plugins to function better and more efficiently. When they visit the site, they collect a limited set of information automatically, which is used for analysis and advertising. To learn more about the information we collect and how to control it, read our Cookie Policy.

Personal data processed for the purposes of direct marketing, service improvement and advertising
In order to improve our services and the quality of service, we process personal data contained in feedback forms from customers and suppliers, surveys and inquiries, data from complaints, grievances and praise.
For the purposes of direct marketing (based on consent), we use your contact details to inform you about services and products offered by us. In some cases, these data were obtained from public profiles and registers. If you do not wish us to contact you for this purpose, you may opt out at any time, as set out in the “Individuals’ Rights” section.

We recommend that when contacting us, you do not send us more than the data we need above, including information that contains sensitive personal data (information on racial and ethnic origin, religious and political beliefs, membership in trade unions and political organizations, sexual orientation, health status, etc.). When – for whatever reason – we have to process yours sensitive personal data, we will rely on your explicit prior consent for any such processing, which is carried out on a voluntary basis. If we need to process your sensitive personal data for other purposes, this processing will be carried out on the following legal grounds: for the detection and prevention of crime (including fraud prevention) or when required by law or other applicable act.

II. Objectives and legal basis for personal data processing
We process personal data for the following purposes:
• To process inquiries received by telephone, on site or through our websites;
• To prepare payment documents;
• For marketing purposes, if consent has been given or no refusal has been received in response to a conversation or a marketing message received from us;
• To communicate by phone, email or in person after an individual contacts us;
• To identify individuals;
• For other purposes specified in the contract or in the General Terms and Conditions;
• When applicable, we use cookies with other personal data that users of our websites have already shared with us, to ensure the proper functioning of our websites and applications in them, to properly display the content, to create and remember content to improve sites.
Depending on the purpose for which the data is used, the legal grounds for processing personal data may be one or more of the following:
• for preparation and implementation of a service with our client or potential client;
• for invoicing services;
• in case of obligatory data processing by virtue of a legal obligation, including obligations for cooperation with and transfer of data to state bodies and institutions;
• to protect our legitimate interest;
• to protect our rights and legitimate interests;
• for processing complaints, grievances, recommendations and other communication with customers, suppliers and partners;
• to make contact, for example, to send important messages and notifications.
If you provide us with your consent, we process your data for marketing purposes – to send you information about our products and services that are aimed at the organization in which you work or manage. You may revoke / withdraw your consent to the processing of your data for marketing purposes at any time, as set out in the “Individuals’ Rights” section. If you refuse to process your data for marketing purposes, we will not use your data for the stated purposes. Withdrawal shall not affect the lawfulness of the processing prior to receipt of the refusal.

III. Categories of recipients of personal data
We are committed to protecting and safeguarding your data by working only with trusted partners. We never provide or sell your data. We respect your rights and always strive to comply with your requests as far as possible in accordance with our legal and operational responsibilities.
Your personal data may be processed on our behalf and by our trusted suppliers and subcontractors. We may entrust services that require the processing of your personal data to IT service providers, hosting services, maintenance of our databases, software and applications that may contain data about you, social networks, web analytics and search engines, use of tools for refining user-generated content, postal services and deliveries, advertising, marketing, digital and social media agencies to assist us in organizing advertising and marketing campaigns, analyzing their effectiveness and managing your contacts and questions, couriers and suppliers for delivery of your product orders.
We may share your personal information in order to comply with our legal obligations, to prevent fraud and / or to protect our interests or to improve our services.
When we protect our rights and legitimate interests and if we use the services of external consultants, lawyers, auditors, etc., we disclose to them the amount of personal data that is necessary to assist us and provide the services for which we have hired them.
We may also provide your personal data to third parties in the event that:
• We have an obligation to disclose or share your personal data in order to comply with a legal obligation to protect the rights, property or safety of our customers and employees or in connection with contractual and legitimate interests;
• If you have given your consent;
• In other circumstances, if we have the right to do so by law.
Service providers and their designated employees have access to and use your personal data only for the specific tasks assigned to us and on the basis of our instructions, and are obliged to protect and safeguard your personal data.
More information about with whom and in what cases we share your personal data, you can get upon request to our Data Protection Officer of the above-mentioned contacts.

IV. Terms for storage of personal data
We store your personal data only to the extent necessary to meet your needs, for the purposes for which we store it or in accordance with our legal obligations. When we no longer need your personal data, we delete it from our system or make it anonymous so that you can no longer be identified by it.
In order to determine the retention period of your personal data, we apply the following criteria:
• When you submit an inquiry through our website from the moment of its receipt, we retain your data for a period of 5 years;
• When you have given your consent for marketing purposes or you have not explicitly refused to do so, we store your personal data until you give up and submit a refusal to us;
• The data processed on the occasion of and in connection with the execution of concluded contracts with customers, suppliers and partners are stored in accordance with Bulgarian legislation for tax and accounting purposes, as well as to be able to manage our rights (for example, to file lawsuits) for a period of 10 years after the termination of the contractual relationship;
• When there are cookies on your computer, we store them for as long as necessary to fulfill their purposes (for example, the duration of the login session) according to our Cookie Policy.

V. Rights of individuals
Any person to whom personal data processed by us relate has the right to receive confirmation and / or detailed information about his personal data processed, incl. a copy of his processed personal data (right of access).
The person has the right to object to the collection and further processing of his personal data, as well as to request the same to be corrected (updated) or deleted (when we do not have a valid legal basis to continue processing them).
The person has the right to request that we restrict the processing of his data if:
• disputes the accuracy of the data – the restriction will apply to the time required to verify the accuracy of the data;
• the processing of the data is illegal, but the person refuses to delete it and instead wishes to restrict the processing;
• we no longer require the data for the specified purpose, but the person needs them to impose or defend legitimate claims, or
has raised an objection to the data we process.
The person has the right to withdraw his consent to the processing of personal data for marketing purposes:
• By submitting a written request / refusal by e-mail (in free text);
• if the person has received a marketing message from us by e-mail – with a reply written in the field Subject “Unsubscribe” and a blank message;
• if we have contacted the person by phone – with an oral refusal to process the data for marketing purposes.
The person may ask us to provide him in a structured, common and machine-readable format, ready to transfer the data he has provided to us for processing (“right of data portability”), provided that:
• we process this data with his consent or perform a contract between us and the person.
• this processing is performed using an automated procedure.
If the person considers that his rights have been violated by us or there is a violation of the security of his data by us, he has the right to file a complaint to the Commission for Personal Data Protection: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., tel. 02 / 91-53-518, e-mail: kzld@cpdp.bg and / or other supervisory / regulatory body.
To ask questions about your rights or if you wish to exercise any of them, please contact the Data Protection Officer at the above contacts.
In order to identify you and make sure that we provide information to you, as well as to protect your interests, we will not accept inquiries and inquiries over the phone as valid.
We will respond to any of your requests without undue delay within 30 days of receiving the request. If we are unable to do so for reasons beyond our control, we will notify you promptly, stating the reasons for the delay.
In case of doubt, we may request additional information to verify your identity. This is done to protect your rights and the confidentiality of your data.
If you request to exercise any of these rights and this request is clearly unfounded, or if you particularly often wish to exercise your right, we may require you to pay an appropriate processing fee or even reject your request.

V. Protection and security of personal data
We always do our best to protect your personal data and once we receive your personal data, we apply security procedures and measures to prevent unauthorized access, confidentiality and data security.

All users should be aware of the many risks associated with information security and take appropriate steps to protect their own information and information processing devices. We do not accept responsibility for violations that occur as a result of actions or omissions outside our control.

Changes in current policy
Any changes to this policy will be announced on this page.