Data Protection Policy of GIS-04 EOOD

We are GIS-04 EOOD, with UIC 201830504 and address. Our registered office is GIS-GIS with our registered address: . 30, Russian Technical Centre. GIS-04 Ltd. is the Controller of your personal data received through this website! You can contact us and the manager Mr. G. Petkov by phone at: 064 / 850 388 or by email at privacy@gis04.bg, where you can ask your questions related to the protection of personal data!

GIS-04 EOOD respects your personal data; As a personal data controller, we collect and process certain information about individuals; With this policy we want to inform you how we use your personal data and what we need this information for; This data protection policy is available at the bottom of every page of this website;

We collect and use personal information about you, our customers, in order to sell goods or deliver services and transportation to your address; The statutory basis for the collection of this information is the DPA and related legislation; We also collect information based on your consent to understand your needs and interests and to better serve you; In addition to the information you provide to us, we may also collect information during your visit to our site through automated information collection tools that include cookies, links, pages and other commonly used information collection tools; The information we collect to understand your needs and interests helps us make your visit consistent and personalized;

This GIS-04 Ltd Data Protection Policy is intended to inform you about how GIS-04 Ltd treats your personal data as a data controller and also about how you can control and manage your preferences and settings in relation to this treatment;

What does this Privacy Policy govern and on what legal basis? As of 25 May 2018, the General Data Protection Regulation (GDPR) will apply in Bulgaria; It has been adopted by the European Union and its purpose is to align EU Member States’ policies relating to the collection and use of personal data; Another of its aims is to guarantee our right to privacy, to protect our personal data, to give more security against misuse of personal information to each of us; The new regulation comes with a number of requirements that GIS-04 Ltd. implements and which you can read here; These include: to let you know what data we use. To inform you why we use them. To ask for your consent to use them when we provide additional services based on them, such as targeted advertising, for example; To give you the opportunity to change your consent for different purposes through this site, so that you have more freedom; To guarantee you the right to request the correction of your data, its deletion, as well as to “be forgotten”; In addition, we may make the data available to you for download or transfer if you notify us and legitimise yourself in the appropriate ways; To identify any third parties/other companies with whom we exchange your data where this is necessary and/or in your interest; Keep in mind that the Internet is a global network, we often use standardized services to log log and track behavior in an anonymized version, for example Google Analytics; All data that can identify a user is considered personal data; These can be email, names, mobile phone, residential address, IP address;

Our role in your privacy

If you are our customer, a visitor to a GIS-04 Ltd store or simply visit our website, these rules apply to you; If you wish to purchase any of the products of GIS-04 EOOD, it is in your interest to be recognized with our declaration for veracity. GIS-04 EOOD does not collect information that is not strictly necessary for the purpose for which it was obtained. However, we would like to tell you a little bit about how we process your data and what happens when you visit our website;

The processing of personal data will be carried out in accordance with the data protection principles set out in member 5 of Regulation (EU) 2016/679. Policies and procedures on GIS-04 EOOD imates for the purpose of guaranteeing the spazvanetto on those principles.

  1. Personal data must be processed lawfully, fairly and transparently

When processing personal data, the controller shall comply with the following principles:

  • Personal data will be processed legislatively, fairly and transparently in the attitude of the data subject (“legality, fairness and transparency”);
  • Personal data se събират за specific, clearly stated and legitimate purposes and are not treated in a manner incompatible with those purposes; in a manner incompatible with the original purposes (“limitation on purposes”);
  • Personal data should be appropriate, connected with and restricted to the necessary in relation to the goals for which they are processed (“data minimization”);
  • Personal data tribva should be accurate and, if necessary, kept up-to-date; all measures should be taken to ensure that inaccurate personal data can be retrieved or correlated in a timely manner, as the purposes for which they are processed (“accuracy”) are foreseen;
  • Personal data se съхравават във form, кото да позволя позволя позволя идентифицираннето на субекта на данните for a period no longer than is necessary for the purposes for which the personal data are processed; personal data may be kept for a longer period insofar as they will be processed solely for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, provided that appropriate technical and organisational measures provided for in the Regulation are implemented in order to safeguard the rights and freedoms of the data subject (“storage limitation”);

Rules for notification of the data from GIS-04 EOOD as defined in our Procedure for Transparency in Processing of Personal Data and the notification is recorded in the Declaration for Verification – Notification for Verification of Personal Data.

Pursuant to Article 2(2) of the PDPA, personal data must:

  • to be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; further processing of personal data for historical, statistical or scientific purposes is permissible provided that the controller ensures adequate protection by ensuring that the data are not processed for other purposes;
  • be relevant, connected with and not excessive to the purposes for which they are processed;
  • be accurate and updated as necessary;
  • be erased or rectified where they are found to be inaccurate or disproportionate to the purposes for which they are processed;
  • be kept in a form which permits identification of the natural persons concerned for no longer than is necessary for the purposes for which the data are processed; personal data which are to be kept for a longer period for historical, statistical or scientific purposes shall be kept in a form which does not permit identification of the natural persons concerned;

The specific information to be provided to the customer must include, as a minimum:

  • data identifying the controller and the contact details of the controller and, if any, of the controller’s representative;
  • the contacts of the Data Controller;
  • the purposes of the processing for which the personal data are intended and the legal basis for the processing;
  • the period for which the personal data will be stored;
  • the existence of the following rights – to request access to the data, rectification, erasure (right to be forgotten), restriction of processing, as well as the right to object to the conditions (or lack thereof) relating to the exercise of these rights;
  • categories of personal data;
  • the recipients or categories of recipients of personal data, where applicable;
  • where applicable, whether the controller intends to transfer the personal data to a recipient in a third country and the level of data protection;
  • any additional information necessary to ensure fair processing;

  • The processing of personal data will be carried out in accordance with the data protection principles set out in member 5 of Regulation (EU) 2016/679. Policies and procedures on GIS-04 EOOD imates for the purpose of guaranteeing the spazvanetto on those principles.
  • Personal data must be processed
    • lawfully,
    • in good faith,
    • transparent

  • Read this privacy policy
  • If you are already a customer of ours, we may have already notified you of the change to our privacy policy, but we have now made changes that we feel you should be aware of, particularly in the part about how we collect and process your data;
  • If you provide us with personal information about other people, or if others provide us with information about you, we will only use that information for the specific reason it was provided to us; By submitting your information you confirm that you have the right to authorise us to process it on your behalf in accordance with this Privacy Policy;

What data do we collect?

What data do we collect from our users? GIS-04 Ltd. collects personal data from its website users and its customers in order to fulfill the terms of a transaction for the sale of products, to analyze the behavior of its users, and to provide them with more relevant content and products, as well as to ensure security; When you purchase a product, register an account, enter a sweepstakes, etc., we may collect different types of information, namely the following categories of personal information:

  • Customer contact
    • name,
    • postal address,
    • phone number,
    • email,
    • preferred mode of communication
    • SSN
  • Financial details
    • Bank details when payment is by bank transfer;
  • Additional data
    • In cases where it is necessary to issue certain documents, such as an invoice, you may be asked for additional data as required by the regulations;
    • CCTV data
  • Data that identifies you electronically
    • Your IP address,
    • login data,
    • browser type and version,
    • time zone setting,
    • browser plug-in types,
    • geolocation,
    • operating system and its version

What data do we NOT collect?

Nie DO NOT collect “sensitive data” about you (such as race or ethnic origin, political opinions, religious/philosophical beliefs, syndicate membership, genetic data, biometric data, health data, sexual behavior or orientation data, or suspected violations) unless you have special consent or are required to comply with the law.

All the products we offer are designed to enhance the quality of life of our customers; Nie NO will ask you to share and provide medical or health data, not to process such categories of sensitive personal data.

What about data on children?

GIS-04 EOOD by no means NOT COLLECTED and does not process asvito and da e dani za detsa pod 16 godini, osven tezi ot videocontrolito na shopite na firmata.

How do we use your data?

Under the Data Protection Act we can only use your data for certain reasons and where we have a legal basis to do so; Here are the reasons why we process your data:

  • Making a contract for the purchase of a product (under the DPA)
  • Video surveillance and security of GIS-04 Ltd
  • Make the site more convenient – Manage your orders and requests, login and authenticate with a password, save settings you complete your orders quickly, easily and conveniently, choose the most suitable payment method, you can choose the delivery and return methods.
  • For personalized support – Testvanje on functions, interaction with platforms for feedback and questions, management of landing pages, traffic optimization and data analysis and research.
  • Otchitame interests and zapitanie i za support for communication – We try to be as close as we can to our clients through communication by phone or e-mail, including the avoidance of problems that may arise.
  • We try to offer you the best for you and constantly papprove service – Notify you for any changes in the prices of our products, solving problems that may arise from purely technical nature.
  • Marketing goals (with your consent) – If you agree, you will be able to send messages and/or announcements for new products or upcoming and effective promotions.

AGREEMENT

All personal data, which is collected on the basis of different legal grounds, will be subject to the Consent, which you can choose to give or not to give for precisely and clearly defined purposes, for which they are obliged to give you a simple and understandable language!

You can change your mind!

If you have previously consented to us processing your data, you are free to withdraw this consent at any time; You can give us a link to your e-mail to privacy@gis04.bg

If you withdraw your consent and if we have no other legal basis for processing your information, we will stop processing your personal data; If we have another legal basis for processing your information, then we may continue to do so, subject to your legal rights;

Вижте Съгласие за обработване на личните данни и Уведомление за поверително третиране на личните данни, също така можете да се запознаете с Форма за оттегляне на съгласие от субекта на данните

When and how do we collect the data?

Our customers’ data is collected during the process of purchasing a product, when visiting our stores and when visiting our sites. When you buy a product, you need to leave certain details in order for the purchase to be completed; This includes, in addition to contact details, delivery details where necessary; While browsing the web pages of some of our sites, traffic and various metrics are recorded that allow us to collect data about the behavior of our visitors; This helps us to improve communication and customer service!

We use cookies!

“A cookie is a small amount of data that a website stores on a visitor’s computer or mobile device;
On our websites we use cookies in connection with its operation, as well as to collect statistics for the purpose of analysis, for which we use Google Analytics; Cookies are used to distinguish users and sessions, to identify new sessions, to submit requests, to store the source of traffic and how the site is reached;
The GIS-04 Ltd website uses the following cookies:
– PHPSESSID – contains only a reference to a session stored on the web server; No information is stored in the user’s browser and this cookie can only be used in the current session;
– Cookies used to collect statistical data for analysis purposes, for which we use Google Analytics; About the cookies generated by Google Analytics you can find out at: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=en .
Chrez съответна setting on your browser, can vinagi da izkluchite kakato nashete biskvitki, as well as biskvitkite na terti pagini. In this case, you may lose some of the functionality of some of the services on our site;
If you use a link that redirects you to another site, it will have its own cookies and security policy over which we have no control;

  • We use only the cookies necessary to perform and improve our work;
  • Our third-party service providers also use cookies that control
  • You can disable cookies at will from your browser, but you may lose some of the functionality of our site…

We use cookies!

“A cookie is a small amount of data that a website stores on a visitor’s computer or mobile device;
On our websites we use cookies in connection with its operation, as well as to collect statistics for the purpose of analysis, for which we use Google Analytics; Cookies are used to distinguish users and sessions, to identify new sessions, to submit requests, to store the source of traffic and how the site is reached;
The GIS-04 Ltd website uses the following cookies:
– PHPSESSID – contains only a reference to a session stored on the web server; No information is stored in the user’s browser and this cookie can only be used in the current session;
– Cookies used to collect statistical data for analysis purposes, for which we use Google Analytics; About the cookies generated by Google Analytics you can find out at: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=en .
Chrez съответна setting on your browser, can vinagi da izkluchite kakato nashete biskvitki, as well as biskvitkite na terti pagini. In this case, you may lose some of the functionality of some of the services on our site;
If you use a link that redirects you to another site, it will have its own cookies and security policy over which we have no control;

  • We use only the cookies necessary to perform and improve our work;
  • Our third-party service providers also use cookies that control
  • You can disable cookies at will from your browser, but you may lose some of the functionality of our site…

How do we pass the data?

We have physical, electronic and managerial procedures in place to protect and secure the information we collect; For more information about our efforts to ensure that your data is stored securely, we have developed and follow a Data Protection Measures and Tools Instruction which forms part of our Data Protection Policy;

Please note:

  • You provide personal data at your own risk: unfortunately no one can guarantee 100% security of data transmission, but we have minimized all risks;
  • If you believe your privacy has been violated, please contact us immediately at privacy@gis04.bg

Where do we keep the data?

The personal data we collect is processed in our office in the town of. Pleven and are stored in encrypted form on Microsoft Server and in all data processing facilities operated by the third parties listed below;

By providing your personal data, you accept this transfer, storage or processing by us; If we transfer or store your information outside the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as set out in this Privacy Policy;

Please note:

  • You provide personal data at your own risk: unfortunately no one can guarantee 100% security of data transmission, but we have minimized all risks;
  • If you believe your privacy has been violated, please contact us immediately at privacy@gis04.bg

How long do we keep them?

GIS-04 EOOD keeps information about you and, respectively, your personal data only as long as it is necessary for the period legally specified by the DPA; In most cases, this period with the order of the regulations and the law is 5years; from the date of conclusion of the contract of sale; After this period, your personal data will be destroyed in accordance with our Storage and Destruction Procedure; CCTV data is kept for a period of 14 days;

Know your rights!

We respect our customers! This is why we believe that, in addition to the right to buy from us, they have certain other rights in their relationship with us! Our customers have defined rights with respect to the processing of data as well as the data that is recorded about them under the GDPR; They consist of:

  • Access to information we hold about you or Right to information and access
  • The right to request correction / rectification of your information
  • Cancel marketing messages
  • You only want a certain service? – You have the right to restrict the processing of your data
  • Do you want to be forgotten by us? You have the right to be “forgotten”
  • Do you want to complain about us? You have the right to object and you can apply to the CPD

All of these rights are supported by appropriate procedures, developed and established within the framework of the protection of personal data from GIS-04 EOOD , which allows you to take the necessary actions within the timeframes specified in the ORPD,.

Any of our customers whose data we process may :

  • To make requests to confirm whether personal data relating to him or her is being processed and, if so, to obtain access to the data, as well as information about who the recipients of that data are;
  • To request a copy of their personal data from the controller;
  • To request the controller to correct personal data when it is inaccurate or no longer up-to-date;
  • Request the controller to erase personal data (right to be forgotten);
  • To request the controller to restrict the processing of personal data, in which case the data will only be stored but not processed;
  • To object to the processing of personal data;
  • To object to the processing of personal data concerning him/her for direct marketing purposes;
  • To lodge a complaint with a supervisory authority if it considers that any of the provisions of the GDPR have been breached;
  • To request and be provided with personal data in a structured, commonly used and machine-readable format;
  • To withdraw consent to the processing of personal data at any time by a separate request to the controller;
  • Not be subject to automated decisions affecting it to a significant degree without the possibility of human intervention;
  • Oppose automated profiling that occurs without their consent;

GIS-04 EOOD osiguriava conditions that guarantee the exercise of those rights from the data subject:

  • You, as well as all our customers, can address your requests to us and we at GIS-04 Ltd assure you that the response to your request will be considered and you will receive a response within the statutory timeframe which is also consistent with the requirements of the General Regulation.
  • Clients have the right to complain to GIS-04 EOOD, related to the processing of personal data, processing of searches from the data subject and appeals from the country of the data subject, regarding the beginning of the processing of complaints.

Third party data!

GIS-04 EOOD does not give the right to use, sell, disclose or share any of your personal data within the meaning of the GDPR with other persons or companies and organizations, or with unrelated companies, except where it is necessary for us to provide you with products and/or services you have requested and where you have provided your explicit request, or in any of the following cases:

The information is provided to trusted partners who work on behalf of GIS-04 Ltd. on a contractual basis and under confidential agreements; These companies may use such information only in your interest or to enable GIS-04 Ltd to improve its customer service; However, these companies do not have the right to share this information independently; These companies are, without being exhaustive:

  • Facebook ;
  • Google ;
  • Twitter ;
  • Cloudflare ;
  • Instagram ;
  • Pinterest.
  • ECONT EXPRESS
  • Speidi et al;

Online Privacy Policy!

What is personal data?

Under the GDPR, personal data is defined as:

“Any information relating to an identified natural person or an identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;”;

Why does GIS-04 EOOD collect and store personal data?

The legal basis for the collection of personal data is the performance of a contract under the DPA

For the purpose of communication with advertising and marketing intentions, GIS-04 Ltd. will ask for your additional consent if the company intends to change its marketing strategy;

How do you use my personal data?

Your personal data is used for:

  • Fulfillment of the objectives of the contract for the purchase of the selected product;
  • For delivery when requested by you
  • To communicate with you when it is in your best interest;
  • Improving service, etc.

Under the Data Protection Act we can only use your data for certain reasons and where we have a legal basis to do so; Here are the reasons why we process your data:

  • Making a contract for the soaking of a product (under the DPA and the CET)
  • Make the site more convenient – Manage your orders and requests, login and authenticate with a password, save your settings you complete your orders quickly, easily and conveniently, choose the most suitable payment method, you can choose the delivery and return methods.
  • For personalized support – Testvanje on functions, interaction with platforms for feedback and questions, management of landing pages, traffic optimization and data analysis and research.
  • Otchitame interests and zapitanie i za support for communication – We try to be as close as we can to our clients through communication by phone or e-mail, including the avoidance of problems that may arise.
  • We try to offer you the best for you and constantly papprove service – Notify you for any changes in the prices of our products, solving problems that may arise from purely technical nature.
  • Marketing goals (with your consent) – If you agree, you will be able to send messages and/or announcements for new products or upcoming and active promotions.

Will you forward and share my personal data with other organisations or individuals?

We will not sell your data to third parties, nor will we pass it on in order to gain any benefit; At the same time, however, GIS-04 Ltd may transfer your personal data to our subcontracted service providers; These are: courier company EKONT EXPRESS, Accounting house, with which we have a contractual relationship in the field of protection of personal data of customers of GIS-04 Ltd. and without which it is impossible to receive your order; All third parties who may receive your data are obliged to keep your data secure and to use it only for the performance of their obligations to us; When they no longer need your data to fulfil these obligations, they will have detailed instructions for its destruction in accordance with the procedures established by GIS-04 Ltd;

Recipients of your data may also be public authorities to whom we provide it under specific and clear legal obligations;

How will you store and protect my personal data that you collect?

GIS-04 EOOD will process (collect, store and use) the information you provide in a manner consistent with the requirements of the General Data Protection Regulation (GDPR); We will strive to keep the information accurate and up to date;

We will not retain information about you longer than reasonably necessary to fulfill the specific purposes for which it was collected and for which you are notified here;

Some of the retention periods depend on legal obligations to keep documents and information for certain minimum periods;

We will take all reasonable technical and organisational measures to ensure that your data is protected from unauthorised access;

Can I find out what personal data you have and process about me?

GIS-04 EOOD is obliged to answer your request what information we store about you and how it is processed;

In case we have your personal data, you can request the following information:

  • Contact details of the organisation that processes or on whose behalf your data is processed;
  • Contact details of the Data Protection Officer.
  • Purposes of processing;
  • The legal basis for the processing;
  • Relevant categories of personal data processed;
  • The recipients or categories of recipients to whom disclosure has been or will be made;
  • Recipients in third countries or international organisations, if there is a transfer of personal data to such recipients, and guarantees that data security there will be at least at the EU level;
  • If the processing is based on the legitimate interests of GIS-04 Ltd or a third party, information about those interests;
  • The intended period for which the personal data will be stored;
  • Details of your rights to request rectification or erasure of personal data or restriction of processing of personal data, and to object to such processing;
  • Information about your right to withdraw your consent at any time;
  • Details of your right to complain to a supervisory authority;
  • Information on whether the provision of personal data is a mandatory or contractual requirement, or a requirement necessary for the conclusion of a contract, as well as whether you are obliged to provide personal data and the possible consequences of failure to provide such data;
  • The source from which your personal data was collected, in cases where it was not collected directly from you;
  • Any details and information about the existence of automated decision-making, such as profiling, and any meaningful information about the underlying logic of these operations, as well as the meaning and expected consequences of this processing;

How can I access my data that is being processed?

It is necessary to popjlnitse search for access, which you can measure and izteglite from TUK (GDPR_FORM_02) or to send a search for the contact details of GIS-04 EOOD, or directly contact the manager of the company. Please download the form and fill it in, contact us on (+359) 064 / 850 388 to make an appointment with the Data Protection Officer at GIS-04 Ltd; Bring in person and present your request.

IMPORTANT!!! In order to verify your identity, you need to present a valid ID card;

Location;

Country;

gr. Pleven 5800, g.k. 30, Russian Technical Centre

Phone:

  • (+359) 064 / 850 388

El. Mail: privacy@gis04.bg

Website: www.gis04.bg

Contact person: G.Petkov