Confidentiality and personal data protection policy

CONFIDENTIALITY AND PERSONAL DATA PROTECTION POLICY

/in force since 25.05.2018/

Applying the General Data Protection Regulation (GDPR) (EU) 2016/679, with the current Confidentiality and Personal Data Protection Policy we inform you about the way we collect, use and protect your personal data, which you provide us with when using TASHEV Outdoors’ e-store. This document has been prepared in accordance with the current Bulgarian and European legislation in the field of personal data protection.

Please, read carefully the Confidentiality Policy before using the e-store or provide is with your personal data through the e-store, by phone, mail or paper, as with the provision of your Personal Information, you agree to its terms. We collect your personal data directly from you, so you decide what information to provide us with. If you do not want us to process your personal data in the way, described in this Confidentiality Policy, please do not provide us with your personal data. The provision of personal data on your behalf is voluntary in order to use the e-store. Please keep in mind that we will not be able to deliver the product you ordered if you do not provide us with the necessary information.

If you have question regarding the current Confidentiality Policy, please contact us at: office@tashev.bg

The personal data administrator, processed by TASHEV Outdoors store is ET Georgi Tashev, UIC 114000470, Pleven, Zhk Drujba №60, TASHEV Building.

The Data Protection Officer of the Administrator - If you have questions regarding the current Confidentiality Policy, please contact him directly at: office@tashev.bg

The types of personal data we process:
When you place an order, you provide us with the following minimum of information, required for the processing and delivery of an order.
1. When choosing delivery to a courier office, chosen by you:
    Name and Surname
    E-mail
    Contact phone
2. When choosing delivery “to an address”, you provide us additionally with:
    Delivery address - country, city, ZIP code, address
3. If you want an invoice, you provide us additionally with:
    Three names / Company’s name
    PIN / UIC
    Address
4. If you want to return a product and receive a refund, you provide us additionally with:
    IBAN
    Bank account holder

Purposes and reasons for the use of your personal data
We will use the provided by you personal data only in your favour with the purpose of:
1. Processing and delivery of orders, made in this e-store
2. Solving problems regarding the return of products, in accordance with the current legislation
3. Refunding the value of purchased goods in accordance with the current legislation
4. Accounting
5. Contacting you
6. Sending information about new products and promotions via newsletter

We will demand your explicit prior consent before sending you e-newsletter.

You can change your decision and withdraw your consent anytime by clicking on the “Unsubscribe” button at the bottom of every newsletter or by contacting us at:
marketing@tashev.bg

Third persons who will access and process your personal data are:
1. Courier companies, in order to deliver your goods to you
2. The bank, which serves the payments, made from and towards you
3. PayPal, when paying via credit card
4. State authorities, institutions and individuals, to whom we are obliged to provide personal data in connection with their inspections in accordance with the current legislation.

The duration of time we keep your personal data depends on the processing purposes, which it was collected for
1. Account data - 5 years after your latest online order
2. Online order data - 5 years after the placing of the last order. The time duration is determined on the basis of the limitation period for repayment of the receivables.
3. Data for the purpose of issuing accounting documents (invoices, debit and credit notices, accounting records and financial statements, including tax control documents, audit and subsequent financial inspections) - at least 10 years, starting from January 1st of the reporting period, following the reporting period, to which they refer; All other bearers of accounting information - 3 years, starting from January 1st of the reporting period, following the reporting period, to which they refer. After the expiration of the specified time limit, all the data is deleted and cannot be restored and used any more.
4. Data for sending newsletters and promotions - email, which you have given us your prior explicit consent to receive our newsletter on - until you unsubscribe or we receive a written objection.

How do we protect your personal data
We guarantee the security of your personal data as we apply all necessary physical, organisational and technical measures, as well as the best practices by the international standards.
1.We keep your personal data on safe servers.
2. Access to your personal data is limited to a small number of trained employees only for processing orders and issuing documents.
3. Access to the computers, using personal data, is limited to the staff, in accordance with their job.
4. For maximum security during processing, transfer and storage of your data, we may use additional mechanisms of security like encryption, pseudonymization, etc.

The security measures we apply, are subject to constant improvement and adaptation to the latest technologies.

Your rights regarding personal data protection
You can exercise the rights below at any time by submitting an email to office@tashev.bg:
1. Right to access your stored personal data - with a written request and authentication of your identity.
2. Right to edit inaccurate or outdated personal data - this can be done by entering your profile or via written request to us, certifying your identity.
3. Right to delete - your personal data can be deleted at any time without unnecessary delay.
4. Right of withdrawal - you can withdraw your consent at anytime via written request to us. 
5. Right to appeal to the supervisory authority - you have the right to file a complaint directly to the Personal Data Protection Commission, address: Sofia 1592, “Prof. Tsvetan Lazarov” Blvd. #2 (www.cpdp.bg). You can file a complaint about the processing of your personal data to the administrator's contact details or directly to a Data Protection Officer. You will receive an answer within one month.
6. Right to object to direct marketing - You have the right to withdraw your consent at any time by sending an email requesting the discontinuation of use of your data for direct marketing purposes at: office@tashev.bg

To exercise your rights, you can contact us by using the contact data above. To be sure of your identity, please use the email address you provided us with.
To make a purchase from our e-store and receive the it, we need certain contact and payment details. If you refuse to provide the necessary data, this will prevent purchase and delivery.
You can contact with the Tashev’s Data Protection Officer anytime at: office@tashev.bg, or 064/870035

Alterations to the Privacy Policy
In case a update to the current Privacy Policy is needed, alterations and additions will be applied only after being published on our site.