The policy is in force since September 27, 2018.
POLICY FOR THE PROTECTION OF PERSONAL DATA OF USERS OF THE A STUDIO'S WEBSITE
In order to provide its goods and services on the website http://artline-store.net (the "Website"), A STUDIO ("A's Studio" / "We"), UIC 205810214, address of management: Sofia 1421, Чер4 Chervena Stena Str., processes personal data of individuals (“Data Subjects” / “You”), in accordance with this Policy.
When processing personal data, STUDIO A complies with all applicable data protection regulations, including but not limited to Regulation (EU) 2016/679 (the "Regulation").
According to the Regulation, personal data is any information that relates to you and through which you can be identified. Processing of personal data ("Processing") is any action or set of actions that can be performed on personal data by automatic or other means.
You decide whether and how to use the goods and services provided through the Website. In the forms through which personal data are entered, we clearly indicate the mandatory or voluntary nature of the provision of data. The data, the completion of which is obligatory, are such without which it is impossible to offer and deliver the respective goods or to provide the respective service or part of it.
1. Categories of data subjects
In connection with the provided goods and services, A STUDIO processes information on the following Data Subjects:
(a) natural persons, users of the Website with registration, as Users;
(b) natural persons, users of the Website without registration, as Guests;
(c) natural persons who have made inquiries (including by phone), requests, signals, complaints or other correspondence to STUDIO A;
(d) natural persons for whom information is contained in inquiries (including by phone), requests, signals, complaints or other correspondence addressed to STUDIO A;
(e) natural persons, legal representatives of minors;
(f) natural persons representing and acting on behalf of a legal person in the cases under b. (a) - (d) above.
2. Categories of data we process
The information (categories of personal data) that we process about you in accordance with this Policy may include:
2.1. In connection with the registration / creation of a user profile of an individual: names, email address, address, telephone, postal code, location, country and password;
2.2. In connection with registration / creation of a user profile of a legal entity: names, VAT number, e-mail address, company, address, telephone, postal code, location, country and password;
2.3. In connection with making purchases in the e-shop of the Website: type of user, names, telephone, address, postal code, city, country, VAT number and company name (for legal entities), method of payment, voucher number (if is applicable), instructions and comments to the order in unstructured form;
2.4. In relation to submitted complaints, applications, requests, requests and signals (including in free text): unstructured information contained in the respective complaints, applications, requests, requests and signals, as well as information related to the result of their processing;
2.5. In connection with subscribing to receive marketing messages for product lines, planned editions, best-selling book rankings and other up-to-date information such as sales offers, events, media publications, etc .: name and surname, e-mail address, additional information about the subscriber (reader / parent / journalist / distributor of printed publications), preferred newsletter format (HTML / text);
2.6. In connection with the publication of opinions, comments, etc. sub .: three names, date, product evaluation, opinion (unstructured text content);
2.9. Other data: STUDIO A may also process other data relating to you in cases where you voluntarily provide such data by filling in the relevant electronic forms on the Website, adding preferences, settings, etc.
3. Purposes of personal data processing
Objectives necessary for the fulfillment of legal obligations of the STUDIO OF A;
Objectives related to and / or necessary for the performance of the contracts concluded with the STUDIO OF A or for taking steps at the request of the Data Subject before the conclusion of the contract;
Objectives necessary for protection and implementation of the legitimate interests of STUDIO A and third parties;
Purposes for which you have given your explicit consent.
3.1. The purposes for processing personal data from STUDIO OF A LTD, related to compliance with legal obligations, include:
(a) handling of signals, complaints, requests for the exercise of rights and the like, as well as complaints and commercial guarantees (if applicable), including the preparation of responses thereto;
(b) accounting, invoicing and reporting of payments received and made in accordance with applicable tax and accounting legislation;
(c) keeping logs of electronic declarations of intent;
(d) other activities for fulfillment of legal obligations (tax, accounting, regulatory, licensing, etc.) of STUDIO OF A LTD, related to providing information to competent state and judicial authorities and assisting in inspections by competent authorities.
3.2. The purposes for the processing of personal data by STUDIO A, related to and / or necessary for the performance of the contracts or for taking steps at the request of the Data Subject prior to the conclusion of a contract with STUDIO OF A LTD, include:
(a) receiving, administering and processing orders;
(b) execution and delivery of purchases made through the Website;
(c) customer service, including the provision of online services available on the Website;
(d) providing the ability to register an account on the Website and to administer and maintain the registered accounts;
(e) communication related to the services provided;
(f) administering and receiving payments for the services provided, incl. from a distance;
(g) receiving, administering and processing complaints;
(h) financial and accounting activities and administration, processing and collection of payments due for the services provided;
(i) recovery of amounts wrongly transferred;
(k) ensuring an individual approach to the provision of services in line with the preferences stated by users.
3.3. The purposes of the legitimate interests of STUDIO A or third parties (other users of the Website (registered and unregistered users of the Website), employees of STUDIO A and its subcontractors or service providers), which may require the processing of personal data of Data Subjects include:
(a) ensure the proper functioning and use of the Website by Data Subjects and third parties, including for the purposes of maintaining and administering the Website, preventing cyberattacks and other malicious activity;
(b) modeling, developing and improving the functionality of the Website;
(d) activities for carrying out inspections in connection with received complaints, signals, requests, etc. floor;
(e) exercising and protecting the rights and legitimate interests of STUDIO A, including in court and assisting in exercising and protecting the rights and legitimate interests of other visitors to the Website;
(f) administering and managing the services provided through the Website and servicing registered users and visitors to the Website;
(g) establishing relationships with new customers;
(h) management and quality control of the services provided by A STUDIO.
3.4. The purposes for the processing of personal data on the basis of consent given by the Data Subject include:
(a) sending marketing and advertising messages for products, services, special offers, packages, events and the like.
(b) research and feedback on the quality of services;
(c) sending information bulletins;
(d) other purposes for which specific consent has been given by the Data Subject.
4. Terms for data storage
Here you can find information about the shelf life of different types of data. In data storage, we apply the general principle of data storage in a minimum volume and for a period not longer than necessary to provide the services and to comply with the law.
Registration data and data contained in the account
For the entire period of maintaining the registration, the profile on the Website and up to 5 (five) years from the termination of the registration
This information identifies you as a party to the contract for the provision of services on the website. In order to resolve possible disputes that have arisen or become known after the termination of the contract and in connection with ZEDEUU (see below), these data are stored for a period of up to 5 (five) years from the termination of registration.
Payment and invoice details
up to 10 (ten) years, starting from the beginning of the year following the year during which the payment of the obligation for the respective year is due.
These data are necessary in view of the tax and accounting legislation, and the specified storage period is in accordance with their requirements.
For a period of 1 (one) year. In view of the requirements of ZEDEUU, the logo is kept for a period of 1 (one) year
STUDIO A as an intermediary for electronic statements within the meaning of the Electronic Document and Electronic Certification Services Act has an obligation to keep log information about the time and source of each electronic statement made through the Website. In addition, in order to ensure the security of the Services, the proper functioning of the Website and the protection and exercise of the legal rights and interests of STUDIO A and other users of the Website, among the data that could be kept in accordance with this term are logs for the login. exit from the Website, delete data on the Website, access data on the Website, etc. under. actions of legal significance performed on the Website.
Email newsletter subscription details
For the period for which the subscription is active until its termination
The subscription can be terminated at any time. When the Data Subject withdraws its consent to receive an e-newsletter, the subscription data required for sending it shall be deleted.
Correspondence, complaints and signals
Correspondence, complaints and signals are stored for up to 5 (five) years.
In order to resolve complaints, signals, disputes, inquiries, requests or other questions addressed in communication to Us, received through the Website, by sending by regular or e-mail, We store and process this information and the result of this processing. Given the statute of limitations under Bulgarian law in order to resolve disputes, this information is stored for up to 5 (five) years.
In the event of a legal dispute or proceedings requiring retention of data and / or a request from a competent state authority, it is possible to retain data for longer than the specified periods until the final conclusion of the dispute or proceedings before all instances. The specified deadlines may be changed in case a different requirement for keeping the information is established according to the current legislation.
5. Provision of information
5.1. Providing information to subcontractors processing assignment data
Personal data of the Data Subjects and other information about them may be disclosed to and processed by third parties to whom STUDIO A has assigned the performance of certain services related to the Website, such as. processing of information for statistical and marketing purposes, performing tests and trials of the Website operation, services for colocation of server and network equipment, legal services, etc. Such persons may be providers of distance payment services, companies providing transport and courier services, as well as other persons involved in the processing and servicing of payments and accounting, provision of colocation services, legal services and other similar activities related to with the services provided through the Website.
5.2. Providing information to trading partners and other data controllers
In order to carry out activities for administration of the activity of STUDIO OF A LTD, servicing of the Data Subjects, technical support and administration of the Website and of the services provided through it, the information about the Data Subjects may also be provided to partners of STUDIO OF A LTD A.
By accepting this Policy, the Data Subject declares that it is informed and agrees to the information about it resp. the information provided by him about the other Data Subjects (eg persons to whom he is a legal representative - minors, legal entities), to be provided by STUDIO OF A LTD A to other personal data controllers and in particular to trade partners of THE STUDIO OF A under the above paragraph and accordingly to be processed by them for the purposes provided in this Policy.
5.3. Providing information under a statutory obligation
In addition to the above, STUDIO A may disclose your personal data to third parties where required by law, including if so requested by STUDIO OF A LTD duly by a competent state or judicial authority when STUDIO OF A LTD A has obtained the express consent of the Data Subject for this, as well as when this is necessary for the protection of the rights and legitimate interests of STUDIO A or of users of the Website.
6. Rights with regard to personal data
The regulation provides for the following rights:
6.1. Right to information - You have the right to receive information about the processing of your personal data by the STUDIO OF A. This Policy is intended to inform you in detail about the processing of your personal data in connection with the Services provided.
6.2. Right of access - You have the right to receive confirmation whether your personal data is being processed, access to them and information about their processing and your rights in this regard.
6.3. Right of correction - You have the right to request correction or completion of your personal data in case they are incomplete or inaccurate.
6.4. Right to delete - You have the right to request the deletion of data, except in cases where there is a substantial reason and / or legal obligation to process them.
6.5. Right to restrict the processing of data - The Regulation provides for the possibility to restrict the processing of your personal data if there are grounds for doing so.
6.6. Right to notify third parties - If applicable, you have the right to ask STUDIO A to notify third parties to whom your personal data has been disclosed of any correction, deletion or restriction of the processing of his personal data, unless this is impossible or requires a disproportionate effort from A's STUDIO;
6.7. Right to data portability - You have the right to receive the personal data you have provided and which relates to you in a structured, popular machine-readable format, as well as to use this data for another administrator at your discretion.
6.8. The right not to be the subject of a decision based solely on automated processing, including profiling, which has legal consequences for you or similarly affects you significantly, unless the grounds for personal data protection provided for in the applicable data protection legislation are met. this provides appropriate guarantees to protect your rights, freedoms and legitimate interests. Such guarantees are at least the right of human intervention on the part of STUDIO A, the right to express your point of view and to challenge the decision.
6.9. Right to withdraw consent - You have the right, at any time, to withdraw your consent to the processing of personal data, which is based on your consent. Such withdrawal shall not affect the lawfulness of the processing on the basis of the consent given until the moment of its withdrawal.
In the case of services provided on the basis of your consent, such as subscription to receive an e-newsletter, through the functionalities of the Website there is a possibility to terminate the subscription at any time (withdrawal of consent).
6.10. Right to object - You have the right to object to data processed on the basis of a legitimate interest.
In the event of such an objection, we will consider your request and, if justified, we will comply with it. If we believe that there are compelling legal grounds for processing or that it is necessary to establish, exercise or defend legal claims, we will inform you.
6.11. Right to appeal to a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the applicable data protection legislation. The supervisory body in the Republic of Bulgaria is the Commission for Personal Data Protection, with address: Sofia 1592, Prof. Tsvetan Lazarov ”№ 2.
7. Contact details of the STUDIO OF A EOOD
The registered office and the address of management of STUDIO OF A LTD A are: Sofia 1421, 4 Chervena Stena Str., Tel .: 02/411 00 02, VAT №: BG205810214.
The address for correspondence and the address of the place where the STUDIO OF A carries out its economic activity in the sense of art. 47, para. 1, item 4 of the CPA, is: Sofia 1421, 4 Chervena Stena Str., Tel .: 02/411 00 02; Email address: firstname.lastname@example.org
Data subjects may exercise their rights under items 6.1-6.10 of this Policy by making a written request to STUDIO OF A LTD A at the address for correspondence and the coordinates of STUDIO OF A LTD A above paragraph.
The request may also be exercised electronically, for which purpose it must be signed by the Data Subject with a qualified electronic signature within the meaning of the Electronic Document and Electronic Certification Services Act and Art. 3, point 12 of Regulation (EU) № 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and certification services for electronic transactions in the internal market and repealing Directive 1999/93 / EC, and to be sent to STUDIO OF A LTD at the e-mail address indicated in the contact details of STUDIO OF A LTD under this item.
Data subjects may exercise the rights related to their personal data personally or through a person explicitly authorized by them (with a notarized power of attorney).
Some of the rights can also be exercised through the functionalities available on the Website.
8. Conditions applicable to the consent of a person under the age of 18 in relation to information society services
In cases where the basis for the processing of personal data of a Data Subject is his explicit consent and this processing is related to the direct provision of information society services to a Data Subject under the age of 18, the processing of the personal data of such data subject A data subject is only performed with the consent of the parent / guardian / custodian of that data subject.
This Policy has been drawn up by the STUDIO OF A EOOD with a view to fulfilling its obligations to provide information to data subjects under Art. 13 and Art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC.
Last updated: 02/18/2021.