The privacy and security of our customers' personal data has always been of the utmost importance to us. For this reason, we have created this single Gardenex.bg Privacy Policy, which covers how we collect, use, store, disclose and delete, or generally "process", your data. The Unified Privacy Policy allows us to ensure the same high level of protection for all users of www.gardenex.bg.
Your data provided when creating an account will be recorded in a unified database of Gardenex.bg/"ПИПБРАДЪРС" ООД. ("Administrator") and in this regard the provision of consent to the General Terms and Conditions, an integral part of which is this Privacy Policy personal data, it is considered consent that the data provided in your account will be freely exchanged between Gardenex.bg/"ПИПБРАДЪРС" ООД.
Collection and use of personal data
Personal data is any information that can be used to identify an individual. You may be asked for personal information each time you interact with us or our partners to provide our products and services. Only in compliance with this Privacy Policy and all applicable legal provisions, the Administrator and its partners may share this information with each other and use it. Your personal data is primarily processed in the territories of the European Union and the European Economic Area. In very rare cases, it is necessary to carry out the processing in third countries located outside the specified territories. In all cases, the processing of your personal data is carried out only for the period and for the purposes for which they were provided.
-
-
What personal data we collect
-
When you register an account, purchase a product, subscribe to our special offers, participate in a raffle, etc., we collect various types of information, including but not limited to name, mailing address, phone number, email, preferred method of communication, bank card information or other.
-
In cases where it is necessary to issue certain documents, for example an invoice, you may be asked for additional data in accordance with the requirements of the regulatory framework.
-
We keep a history of orders placed by each account registered on the site.
-
-
-
-
Purposes of personal data processing.
-
We process your personal data to fulfill our obligations as a party to a contract for the sale of goods or services. We may periodically use them to send important messages such as notifications about orders placed, changes to the Terms and Conditions or other policies. In the event that a specific functionality of the site (purchase of a product; receiving information about current promotions and other activities; creating a profile and/or etc.) requires the provision of personal data, failure to provide them means that you will not be able to benefit from the same. Basis for data processing: Article 6 paragraph 1 letter b) and/or letter c) and/or letter f) of the GDPR.
-
In the event that you have subscribed, we process your data in order to inform you of the contacts you have specified (by means of a short SMS, Viber, email and/or other message) about current promotions and other activities. In certain cases, at our discretion, with the contacts specified by you at the time of subscription, you may be included in raffles or other random games organized by Us, participation in which is not tied to a purchase. Consent to subscription can be withdrawn at any time. Basis for data processing: Article 6 paragraph 1 letter a) and/or letter f) of the GDPR.
-
We process your personal data for marketing purposes in order to receive information/advertising messages, including those based on an analysis of your user behavior history. Basis for data processing: Article 6 paragraph 1 letter a) and/or letter f) of the GDPR.
-
In the event that you have consented to participate in certain events (competition, raffle, game, etc.), we process the data you have provided us in order to administer these activities. Basis for data processing: Article 6 paragraph 1 letter a) and/or letter f) of the GDPR.
-
The data provided when applying for a job will be used solely for the purposes of selection and assessment of the applicant's suitability for the relevant position. Basis for data processing: Article 6 paragraph 1 letter a) and/or letter b) and/or letter c) and/or letter f) of the GDPR.
-
-
-
-
Disclosure to Third Parties
-
In order to fulfill the purposes under item 2, or legal ones, it is necessary or we will be obliged to disclose personal data provided by you to our partners (e.g. transport, courier, service, assembly companies, financial institutions, insurers, etc.), service providers in the field of marketing, market research, user behavior analysis (e.g. Google, Facebook), etc. similar, or before competent authorities.
-
-
Protection of personal data
-
The administrator takes precautions, including administrative, technical and physical measures, to protect your personal data from loss, theft and misuse, as well as from unauthorized access, disclosure, alteration or destruction.
When you post to forums, chat rooms or social networking services, the personal information you share is visible to other users and may be read, collected or used by them. In these cases, you are responsible for the personal information you choose to provide.
-
-
Integrity and retention of personal data
-
We will retain your personal data for a period necessary to fulfill the specific purpose for which it is processed, after which it will be deleted, unless required by law to retain it for a longer period.
-
-
Rights of the subject of personal data
-
If you want to withdraw your consent to the processing of personal data (including unsubscribing from current promotions and other activities), request a correction, object to their processing or request that your data be deleted ("the right to be forgotten"), you should send a request to this effect by email to office@gadinex.bg. In order to avoid abuse, requests with the above content will only be considered if they are sent from the email used to register the account, we reserve the right to request additional data in order to establish the identity of the requester and the data subject concerned . Submitted requests regarding personal data will be answered within one month, and in the event of the need to extend the specified period, you will be informed of the extension, as well as the reasons for the delay. We may refuse to process requests that are unreasonably repetitive or that threaten the privacy of other users. In all cases, you have the right to file a complaint with the Personal Data Protection Commission, kzld@cpdp.bg, Sofiya1592, N2 "Cvetan Lazarov" blvd.
Except by message to office@gadinex.bg, directly from an account registered on the site you can:
-
to check and correct the personal data you have provided.
-
to delete the account, using the "Delete profile" button located in the "Personal data" menu.
-
from the "My subscriptions" menu to unsubscribe from receiving information about current promotions and other activities.
Conditions and procedure for reporting violations according to the law on the protection of persons submitting reports or publicly disclosing information about violations
In the event that you wish to report a violation falling within the scope of the whistleblower protection law and meet the conditions of the cited law, you may file a report with the whistleblower at one of the following ways:
-
Email: office@gadinex.bg
-
Address: Sofia, Boyana district, Golyama mogila 115, Pipbrothers LTD store;
-
In person through a pre-arranged meeting or by phone -02/9628744.
For submitting a written report, including through office@gadinex.bg, the person making the report should fill in and send to one of the above mentioned addresses. Upon receipt of a whistle-blower, the whistle-blower shall verify the existence of the necessary data for its examination in accordance with the requirements of the law, and in case of any deficiencies, shall send a notice to the whistle-blower to remedy the deficiencies within 7 days of receipt of the whistle-blower. Each alert shall be checked as to its veracity. Whistleblowers who do not fall within the scope of the law and whose content does not warrant being considered credible shall not be considered. Allegations which contain manifestly false or misleading statements of fact shall be returned with instructions to the sender to correct the allegations and to inform him of his liability for the allegation.