Privacy Policy Carbon Touch Ltd.

DECLARATION OF CONFIDENTIALITY OF CARBON TOUCH BG Ltd

I. PRIVACY POLICY

"CARBON TOUCH BG" Ltd strictly monitors the protection of the security and integrity of all personal data collected by our clients. We pay close attention to the processing of personal data in a lawful, conscientious and transparent manner. The data we collect is managed only for specific, explicit and legitimate purposes and we do not process further in a manner inconsistent with these purposes. The data we collect and store are minimized and related and limited only to what is necessary to meet the goals for which we have collected them. We make every effort within our organization to ensure that your personal data is always accurate and up-to-date, and we also rely on you if you find data inaccurate to remove it personally. We never store your data for a longer period than is necessary for the purposes for which we process it. We give you the opportunity at any time and without giving reasons to withdraw your consent to process your data and to delete it if you notify us of your request. At the same time, it is our priority to manage the process in such a way as to ensure the appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage. We have taken the necessary and prescribed technical and organizational measures in the applicable legislation to ensure the protection and security of our customers' personal data.

CARBON TOUCH BG Ltd. is a data controller (administrator) and as such complies with the applicable legislation (General Regulation on the Protection of Personal Data - Regulation (EC) 2016/679, the Personal Data Protection Act, etc.)

DEFINITIONS

"PERSONAL DATA" is any information related to an identifiable individiual or an individual that can be identified. Personal information includes name, personal ID, email address, telephone, postal address, and more.

"Processing" means any operation or set of operations performed with personal data or a set of personal data by automatic or other operations such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, dissemination or any other way in which data becomes available, arranged or combined, restricted, deleted or destroyed.

Our privacy policy also describes the possibilities that we provide to you to access, update, or otherwise control your personal data we process. If you have questions about our practices or any of your rights described below, you can contact our team at office@carbontouch.eu This mailbox is actively monitored and managed.

II.WHAT INFORMATION WE COLLECT - PERSONAL DATA, OBJECTIVES AND GROUNDS BASED ON WHICH CARBON TOUCH LTD

PROCESSES THEM
"CARBON TOUCH BG" Ltd collects and processes your personal data in connection with the use of the online store https://carbontouch.eu, signing contracts with the company, and in particular the following personal data in view of the following purposes:
1. Registration data, sign a contract / making a purchase / and receiving a newsletter - names and e-mail address
Purpose for which the data is collected - Making a connection with the user and sending information to him, registering a user in the online shop, ensuring the fulfillment of the contract for the provision of the respective good, and sending a newsletter.
Reason for processing of this personal data - Explicit consent received by you as a customer; taking steps for signing a contract and the main signing of the contract - with your registration in the online store or ordering without registration, as well as with a purchase and delivery ordered from our online store by you, a contractual relationship is created on which we process your personal data ;
2. Delivery details - names, telephone, email, address
Purpose for collecting the data: Execution of obligations of the administrator based on a distance-purchase contract and delivery of the purchased goods, including the customer`s right of return and replacement or refusal of purchased goods.
Reason for processing of these personal data - fulfillment of the obligation of the administrator to supply the purchased goods.
3. Data for issuing an invoice for the purchase of goods offered by us - names, PIN(DNI), address, email;
Purpose for collecting the data: We process these personal data to meet obligations based on accounting and tax legislation - tax and accounting legislation in the Republic of Bulgaria requires that certain accounting and commercial information be created, including the storage of such information for a specified period as well as any other information and documents relevant to taxation. In fulfilling this obligation, the relevant information and documents containing personal data shall be kept for the periods provided for in the relevant laws.
Reason for processing this personal data - Compliance with a legal obligation that applies to the company;
4. The Company does not collect and process data for persons under 14 years except with the express consent of their parents or legal representatives.
5. Bank information: When paying with a credit or debit card, the www.carbontouch.eu site redirects the process to the MyPos bank card payment module, from which we only receive information on whether the payment has processed or not. "CARBON TOUCH BG" Ltd. does not store or process information about your payment card.

III. SHARE / TRANSFER OF PERSONAL DATA

"CARBON TOUCH BG" Ltd. does not share, sell, assign, trade or transfer personal information gathered by its clients.
There are exceptions when your personal information may be disclosed to third parties in the following way:
It may be transferred as an asset in case of a merger or sale of a business, either as part of our business or as part of a corporate reorganization or other changes in corporate management.
It can be provided to service providers who assist us in delivering our goods - couriers, accountants. No one service provider may access personal data stored by CARBON TOUCH BG Ltd. without prior agreement of data privacy. CARBON TOUCH BG OOD is obligated to verify compliance with the obligations assumed by the agreement. The collected personal information is passed on only to our trusted partners, together with whom we carry out the organization and the delivery of the goods we offer. Before any such data transmission, we check that these providers guarantee reasonable assurance that they apply appropriate technical and organizational measures in such a way that the processing complies with the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679), The Data Protection Act, the secondary legislation on its implementation, as well as our privacy policy and to ensure the protection of the rights of the data subject. In accordance with the principle of minimizing data that is being processed, these providers receive only the personal information they need to perform their functions.

Service providers are not allowed to retain general data for their own needs or for their own benefit, as well as to retain them for longer period than is necessary to perform that service.

We share personal information with the providers when we have your permission or if there is another legitimate reason available.

Lastly, personal data may be made available to public authorities (such as control authorities and their subdivisions, authorities for the detection and prevention of crimes and offenses) only when it is provided by law and under the conditions set out in it.

"CARBON TOUCH" Ltd. does not transmit / share your personal data with administrators and processors in non-EU countries.

IV. PERIOD AND DURATION OF PROCESSING OF PERSONAL DATA BY "CARBON TOUCH BG" Ltd
"CARBON TOUCH BG" Ltd. keeps your personal data for a period no longer than the existence of your online store account or the withdrawal of the consent for processing. After deleting your account or withdrawing your consent, CARBON TOUCH BG Ltd takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (i.e.to bring them in a form that does not disclose your personality).
"CARBON TOUCH BG" Ltd. keeps your personal data provided in connection with online orders for a period of 5 years for the purpose of protecting the legal interests of CARBON TOUCH BG Ltd. in legal or administrative disputes with online shop users, such as the accounting records shall be kept for the relevant statutory period.
"CARBON TOUCH BG" Ltd informs you if the period for storing the data needs to be extended in order to comply with a statutory obligation or regarding the legitimate interests of the Administrator etc..

V. YOUR RIGHTS CONCERNING PERSONAL DATA PROVIDED

1. Right to information
You have the right at any time to request information on whether your personal data, the purposes for which it is processed, the categories of personal data processed, the recipients to whom the personal data are disclosed, the time period for which it will be stored, whether there is an automated claim decision making and data profiling.
2. Right of withdrawal
If you have agreed to use your data, you can withdraw it at any time by acting in the future without the need to state reasons.
Your request with withdrawal of your consent, you can send us to the following email:
office@carbontouch.eu
3. Right of rectification
If you find that your data stored by us is inaccurate, you can contact us to correct them.
4. Right to delete data
You may request to delete your data without undue delay. We will delete them within a reasonable time as soon as we are satisfied that there are no other issues for their handling / storage.
After deleting your data, it is no longer possible to provide information.
5. Right to restrict processing
In certain cases - for example, in case you contest the accuracy of the data, when checking the issues for the storage, etc., you have the right to request that we limit the processing of your personal data. During the limitation, we can only store personal data, and other processing activities are only possible with your consent.
6. Right to data transfer
By your request, we will transfer the data to you or another administrator in a structured, widely used and machine readable format. Direct data transfer is only possible if it is technically possible.
7. Right of objection
You may, at any time and without giving any reason to object to the processing of your personal data for the purposes of direct marketing, including profiling, although in cases where your data is processed on the basis of a public interest task, or the processing is necessary for the purposes of our legitimate interests.
8. The right not to be the subject of a decision based solely on automated data processing, including profiling - "CARBON TOUCH" Ltd. does not perform such data processing.
9. Right to appeal
You have the right to make a complaint against the processing of your personal data before the competent control authority (in Bulgaria - the Personal Data Protection Commission or the Court) if you believe that your data protection rights have been violated.
The Commission for the Protection of Personal Data
Sofia - 1592, "Prof. 2 Tsvetan Lazarov
Center for Information and Contacts - tel. 02 / 91-53-518
E-mail: kzld@cpdp.bg
Website: www.cpdp.bg
Contacts of CARBON TOUCH Ltd. and data for the responsible data protection officer:
"CARBON TOUCH BG" Ltd.,
Sofia 1225
district of Serdika
5th, Zarya Street
contact person: Alexander Hristoslavov Popov
Phone: +359 888 033 488;
E-mail: office@carbontouch.eu
Website: https://www.carbontouch.bg; https://carbontouch.eu
Please note that when you contact us through the above email, the information you provide (your email, possibly your name and your phone number) is handled by us in order to respond to your questions and resolve the problem. We undertake to delete the data stored, after the processing is no longer required or will restrict the processing if there are legal obligations for storage.