Privacy Policy

Mandatory information about the persons’ rights regarding personal data protection

Information about the company processing your data:

Name: Dekori EOOD

Unique company identifier: 202472286

Registered office and head office: 27, Promishlena Str., Sofia, Bulgaria

Mailing address: 27, Promishlena Str., Sofia, Bulgaria

Telephone: : +359 889 101 327

E-mail: office@3dbgprint.com

Website: www.3dbgprint.com

Information about the competent supervisory personal data protection authority:

Name: Commission for Personal Data Protection

Registered office and head office:  2, Prof. Tsvetan Lazarov Boul., Sofia 1592, Bulgaria

Mailing address: 2, Prof. Tsvetan Lazarov Boul., Sofia 1592, Bulgaria

Telephone +359 2 915 3 518

Website: www.cpdp.bg

Dekori EOOD (hereinafter “Controller” or “the Company”) shall perform its activity in compliance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). This information is intended to inform you about all aspects of processing of your personal data by the Company and your rights in this relation.

Basis for collecting, processing and storing your personal data

Article 1. The controller shall collect and process your personal data in relation to the online shopping store www.3dbgprint.com and the conclusion of contracts with the Company pursuant to Article 6(1) Regulation (EU) 2016/679 (GDPR), and in particular on the following basis:

  • Your express consent as a customer;
  • Carrying out the controller’s obligations under a contract concluded with you;
  • Compliance with a legal obligation to which the controller is subject;
  • For the purposes of the legitimate interests pursued by the controller or by a third party;

Purposes and principles for the collection, processing and storage of your personal data

Article 2. (1) We shall collect and process the personal data which you have provided us with in relation with the online shopping store and the conclusion of contracts with the Company, including for the following purposes:

  • Creating a profile and providing full functionality for using the online store;
  • Concluding and performing a contract remotely;
  • Individualising a party to the contract;
  • Accounting purposes;
  • Statistical purposes;
  • Information security protection;
  • Ensuring the execution of the contract for the provision of the respective service.
  • Sending electronic newsletter upon your express wish;

(2) When processing your personal data, we shall comply with the following principles:

  • lawfulness, fairness and transparency;
  • purpose limitation;
  • relevance to the purposes of processing and minimization of the collected data;
  • accuracy and up-to-datedness;
  • storage limitation with a view to achieving the purposes;
  • integrity and confidentiality of the processing and ensuring appropriate security of the personal data.

(3)  In processing and storing personal data, the controller may process and store the personal data with a view to protecting the following legitimate interests:

  • carrying out its obligations towards the National Revenue Agency, Ministry of Interior and municipal authorities.

Types of personal data that our Company collects, processes and stores

Article 3. (1)  The Company shall perform the following operations with the personal data provided by you for the following purposes:

  • Registration of a consumer in the online store and performance of a distance sale and purchase contract – the purpose of this operation is creating a profile for the purpose of using the online store for purchasing goods and providing contact data for the delivery of the purchased goods. Registration and creating a profile for the purpose of using the online store is not a mandatory step for the provision of the service and it is largely accessible without creating a profile.
  • Conclusion from the impact assessment: On the basis of the performed impact assessment, the operation “Registration of a consumer in the online store and performance of a distance sale-and-purchase contract” shall be allowed and shall provide sufficient guarantees for the protection of the rights and legitimate interests of the data subjects in line with the requirements of the GDPR.
  • Concluding and performing a commercial transaction with a customer or a partner – the purpose of this operation shall be the conclusion and performance of a contract with a trade partner or a customer and its administration. With a view to the limited scope of the collected personal data and the circumstance that part of this data is collected by publicly accessible sources, impact assessment of the operation shall not be required.
  • Sending newsletter – the purpose of this operation shall be administering the process of sending newsletter to customers who have expressed their wish to receive it. With a view to the limited scope of the collected personal data and the circumstance that part of this data is collected by publicly accessible sources, impact assessment of the operation shall not be required.
  • Exercising the right of withdrawal and making a complaint – the purpose of this operation is administering the process of exercising the right of withdrawal or making a complaint by the customer. With a view to the limited scope of the collected personal data and the circumstance that part of this data is collected by publicly accessible sources, impact assessment of the operation shall not be required.

(2) The controller shall process the following categories of personal data and information for the following purposes and on the following bases:

  • Your individualizing data (e-mail, name etc.)

 

  • Purpose for collecting the data:1) Contacting the consumer and sending him/her information, 2) registering a consumer in the online store, as well as 3) sending the newsletter.
  • Basis for processing your personal data – By accepting the general conditions and registering in the online store or making an order without registration, or by concluding a contract in writing, a contractual relationship shall occur between you and the controller. On this basis we shall process your personal data Article 6(1)(b) Your data for sending the newsletter shall be processes upon your express consent – Article 6(1)(b) GDPR.
  • Data for making a delivery (names, telephone, address etc.)

 

  • Purpose for collecting the data: Carrying out the controller’s obligations under a sale and purchase contract and delivery of the purchased goods.
  • Basis for processing your personal data – By accepting the general conditions and registering in the online store or making an order without registration, or by concluding a contract in writing, a contractual relationship shall occur between you and the controller. On this basis we shall process your personal data – Article 6(1)(b)
  • Additional data provided by you – If you wish to add something to your profile, you may fill in your name and telephone number.

 

  • Purpose of collecting the data: Supplementing the information about the consumer in his or her user account.
  • Basis for processing your personal data: You have provided express consent for processing your personal data for one or more specific purposes – Article 6(1)(a) GDPR when registering in the online store. Providing this data is not mandatory for the purpose of registering in the online store.

(3) The controller shall not collect or process personal data, which refers to the following:

  • Reveals racial or ethnic origin;
  • Reveals political, religious or philosophical convictions or membership in trade unions;
  • Genetic and biometric data and data about the health condition or sexual life or orientation.

(4)  The personal data shall be collected by the controller from the concerned persons.

(5)  The enterprise shall not perform automated decision-making with data.

Article 4. (1)  The enterprise shall perform the following operations with the personal data provided by you in your capacity of legal representatives or proxy holder of legal persons – trade partners, for the following purposes:

  • Concluding and performing a commercial transaction: For the purpose of concluding and performing a commercial transaction with a trading company, we shall process solely the three names of the legal representative or the person authorized by the trading company. Conclusion of the impact assessment: With a view to the not so large number of natural persons whose data are being processed and the limited scope of the collected personal data, impact assessment of the operation shall not be required.

(2)  The personal data shall be collected by the controller from the concerned persons and the Commercial Register with the Registry Agency.

(3)  The enterprise shall not perform automated decision-making with data.

Чл. 5.  The controller may use the so called “cookies” for the purpose of providing full functionality of the website, improving the consumer experience, statistical purposes, easier access etc., to which you agree by using our website. You may control and/or delete the “cookies” at any time through the settings of your browser. “Cookies” are not personal data and are not used for the purpose of identifying visitors and users of the online store.

Period for storing your personal data

Article 6. (1) The controller shall store your personal data for a period not longer than the period of existence of your profile in the online store. After your profile has been deleted, the controller shall take due care to delete and destroy all your data, without undue delay, and to render it anonymous (i.e. to render it in such a manner that it no longer reveals your personality).

(2)  The controller shall process your personal data which you have provided at the time of making an order without registration in the online store, until the order is completed, unless you have expressly consented at the time making the order that your data is processed for the purpose of improving the service, receiving recommended content, individual conditions, promotions and for statistical purposes.

(3)  The controller shall store your personal data provided in relation to orders made online for a period of five years for the purpose of protecting the controller’s legitimate interests in judicial or administrative disputes with online store consumers.

(4)  The controller shall notify you in case the period of storing the data has to be extended with a view to complying with a statutory obligation or with a view to legitimate interests of the controller or for another purpose.

(5)  When required under the applicable law, the controller shall store personal data for the respective period specified therein, which may be longer than the period of existence of your profile in the online store or until the order has been completed.

Article 7.  The controller shall store the personal data of the trade partners’ legal representatives for the period of performance of the contract, for the purpose of protecting the controller’s legitimate interests and complying with its statutory obligations, where this period may be longer than the period of the concluded contract.

Transmission of your personal data for processing  

Article 8. (1)  The controller may, at his or her own discretion, transmit part or all of your personal data to personal data processors for the purposes of processing to which you have consented, in compliance with the requirements of Regulation (EU) 2016/679 (GDPR).

(2)  The controller shall notify you in case he or she intends to transmit part or all of your personal data to third countries or international organisations.

Your rights in the process of collecting, processing and storing your personal data

Withdrawal of the consent for processing your personal data  

Article 9. (1) In case you do not wish to have your personal data processed for marketing purposes or to receive the newsletter, you may at any time withdraw your consent for processing by filling in the form for withdrawal of consent (Annex 1) or by a request in writing sent by e-mail.

(2)  After receiving your request, we shall send you at the e-mail address which you have specified for receiving the newsletter and advertisements a letter with detailed instructions to verify that you are the receiver of newsletter and subject of the personal data for which withdrawal of the consent has been requested.

(3)  The withdrawal of consent shall not affect the lawfulness of processing personal data which the controller has performed thus far.

Right of access

Article 10. (1)  You shall be entitled to request and receive from the controller a confirmation whether personal data concerning you are being processed by sending a request to that end by e-mail.

(2)  You shall be entitled to acquire access to the data concerning you, as well as to the information related to the collection, processing and storing of your personal data.

(3)  After receiving your request, we shall send you at the e-mail you have used for registering or making an order in the online store a letter with detailed instructions to verify that you are the subject of the personal data to which access has been requested.

(4)  After the verification, pursuant to Article 3, the controller shall provide upon request a copy of the processed personal data concerning you by e-mail or in another appropriate form.

(5)  The provision of access to the data shall be free of charge. However, the controller reserves the right to impose an administrative fee in case of repeated or excessive requests.

Right to rectification and completion

Article 11. (1)  You ma at any time rectify or complete inaccurate or incomplete personal data concerning you by choosing ‘Edit Profile’.

(2)  You may easily rectify or complete inaccurate or incomplete personal data concerning you directly through your profile in the website.

Right to erasure (‘right to be forgotten’)

Article 12. (1)  You shall be entitled to obtain from the controller erasure of part or all of the personal data concerning you, and the controller shall have the obligation to erase it without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you withdraw your consent on which the processing of data is based, and where there is no other legal ground for the processing;
  • you object to the processing of the personal data concerning you, including for the purposes of direct marketing, and there are no overriding legitimate grounds for the processing;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services .

(2)  The controller shall not be obliged to erase your personal data if he or she stores them and processes them Администраторът не е длъжен да изтрие личните данни, ако ги съхранява и обработва:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
  • for the establishment, exercise or defence of legal claims.

(3)  In order to exercise your right to be forgotten, you need to send by e-mail a request to have erased your personal data which the controller processes. Thereafter the controller shall send to the e-mail address which you have used for registration or making orders in the online store a letter with detailed instructions to verify that you a consumer of the store and the subject of the personal data for which a request for erasure has been made.

(4)  After we establish the identity of the person who has made the request and the person who the data concern in accordance with the instructions sent, we shall erase all data concerning you which we process, in accordance with paragraph 3.

(5)  In case you have made an order which is still being processed, the earliest time you may request ‘to be forgotten’ shall be the successful completion of the order.

Right to restriction of processing

Article 13.  You shall be entitled to obtain from the controller restriction of processing data concerning you by sending us an e-mail to that end in case:

  • you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
  • you have objected to processing pending the verification whether the legitimate grounds of the controller override your interests.

(2)  After we receive your request, we shall send you to the e-mail address which you have used for registration or making orders in the online store a letter with detailed instructions to verify that you a consumer of the store and the subject of the personal data for which a request for restriction of processing has been made.

(3)  After the verification referred to in paragraph 2 has been made, the enterprise shall cease processing your data but shall not remove the publications you have made in the online store, if any.

Right to data portability

Article 14. (1)  In case you have consented to processing of your personal data or such a processing is required for the performance of the contract with the controller, or your data are processed by automated means, you may:

  • request from the controller your data in a readable format and transmit it to another controller;
  • request from the controller to directly transmit your personal data to a controller specified by you, if this is technically feasible.

(2)  You may exercise your right to data portability by sending us an e-mail to that end. Thereafter the controller shall send to the e-mail address which you have used for registration or making orders in the online store a letter with detailed instructions to verify that you a consumer of the store and the subject of the personal data for which a request for portability has been made.

(3)  After the verification referred to in paragraph 2 has been made, the enterprise shall send to the e-mail specified by you that data concerning you which it processes in XML format.

Right to obtain information

Article 15.  You may request the controller to inform you about all recipients whose personal data about which rectification, erasure or restriction has been requested have been disclosed. The controller may refuse to provide this information if this would be impossible or requires disproportionate efforts.

Right to object

Article 16.  You may object at any time to processing by the controller of personal data concerning him or her, including processing for the purposes of profiling or direct marketing.

Your rights in case of violation of your personal data security

Article 17. (1)  In case the controller establishes a violation of the security of your personal data which may create a high risk for your rights and freedoms, he or she shall notify you without undue delay about the violation as well as about the action taken or due to be taken.

(2)  The controller shall not be obliged to notify you in case:

  • he or she has taken appropriate technical and organizational measures for the protection of the data affected by the violation of the security;
  • he or she has taken subsequent measures that guarantee that the violation will not lead to a high risk to your rights;
  • notifying you requires disproportionate efforts.

Persons to whom your personal data is provided or who have access to your personal data

Article 18. (1)  For the purposes of processing your personal data and providing the service in its complete functionality, as well as in view of your interests, the controller may provide the data or allow access to the following data processors:

 

Personal data processor Purpose of personal data processing
Transport and courier companies Deliveries at a specified address
Marketing agencies Marketing purposes; website content, and
Host providers For the purpose of displaying the website

 

(2)  Personal data processors shall comply with all requirements for lawfulness and security in the course of processing and storing your personal data.

Article 19.  The controller shall not transmit your data to third countries.

Article 20.  In case of violation of your rights according to the above or the applicable law for personal data protection, you shall have the right to filing a complaint to the Commission for Personal Data Protection as follows:

Name:  Commission for Personal Data Protection.

Registered office and head office:  2, Prof. Tsvetan Lazarov Boul., Sofia 1592, Bulgaria

Mailing address: 2, Prof. Tsvetan Lazarov Boul., Sofia 1592, Bulgaria

Telephone +359 2 915 3 518

Website: www.cpdp.bg

 

Article 21.  You may exercise all your rights concerning your personal data protection by using the forms annexed to this information. Certainly, using these forms is not mandatory and you may make your requests in any form as long as they contain a statement to that end and identify you as the data owner.

Article 22.  In case your consent concerns data transmission, the controller shall describe the possible risks related to the transfer of data to third countries where there is no decision about adequate protection and appropriate means for protection.