Privacy policy

 Privacy Policy and Cookies of e-shop www.vivasan.bg

"Vivasan BG Ltd ("Controller", "We") appreciates the importance of your privacy. This Privacy and Cookies Policy ("Policy") contains information about the purposes and uses of your personal data in connection with the provision of our services ("Services"). More information about us and our Services is available on our website at www.vivasan.bg ("Website")  

 Personal data is any information that relates to an identified person or a person who can be identified. Please read this Policy carefully to know how We collect, use, protect and process your Personal Data in accordance with applicable law, including the General Data Protection Regulation ("GDPR") and the Personal Data Protection Act ("PDPA").

1. Administrator

The administrator of personal data is "Vivasan BG" Ltd, a company registered under the legislation of the Republic of Bulgaria, with UIC 130354173, registered office and registered address in the town of. Sofia, Oborishte district, bul. "Knyaz Aleksandar Dondukov №49, et. 1, app. 1.

2. How do we use your personal data?

We may collect personal data from you when:

• you register on our Website
• you place an order for a product of your choice via our e-shop;
• you send us an enquiry via our contact form;
• receive a customer discount on our products;
• you are our business partner;
• otherwise use our Services.

You understand and are informed that the provision of some of our Services requires access to your personal data, such as the fulfillment of an order you have placed.When purchasing products or services, you do not provide us with your bank, debit/credit card details. Payments with payment bank cards are made via a POS or VOPS terminal of DSK Bank, through which the necessary data is exchanged in order to authorise payment and we do not receive, process or store such data in our system.

The table below sets out the categories of personal data we collect, the purposes for which we collect it, the legal basis on which we process it and the period for which we retain it:

We will only use your personal data for the purposes for which it was originally collected, unless we have a legitimate reason to use it for another purpose that is compatible with the original purpose. If we wish to use your data for another purpose that is unrelated to the original purpose, we will explicitly contact you, informing you of the legal basis that allows us to do so. Where we need to collect and process personal data in order to comply with a legal obligation we have to you or a contractual obligation we have to you, but you do not provide the requested data, we may be prevented from providing our services to you. In such a case, we may need to cease providing a particular service to you, of which you will be expressly notified.

Providing information that is not absolutely necessary to provide our Services is entirely at your discretion. Any optional data that you provide to us when using the Services or through other communications with us that we have not specifically requested from you, but that you have provided to us, we will treat as personal data obtained with your explicit consent to the processing. We will process such data lawfully by applying the principles of minimisation and restriction.

We may also be required to retain certain categories of personal data for a period of time specified by law. For example, media of accounting information shall be kept for a period of three years from 1 January of the accounting period following the accounting period to which it relates.

3. How do we protect your personal data?

We are committed to protecting your personal data. To this end, we implement a variety of technical and organisational measures to protect your personal data against unauthorised access, processing, accidental loss, destruction or damage.

As part of the data protection measures provided, we use the method of pseudonymisation of some of the data. Some of the data that you provide to us in the process of using the Services could not itself directly identify you, but may be linked to an individual through the use of additional information provided by you, and therefore should be considered information relating to an identifiable individual.

4. Where do we store and process your personal data?

We do not store your personal data outside the European Economic Area (EEA). Where we transfer personal data to a third country outside the EEA that has not provided an adequate level of data protection, we will implement the necessary measures to safeguard and ensure security.

5. Do we use cookies?

We use cookies. To do this, you must provide your consent by clicking on the "I agree to the use of cookies" button.

Cookies are small files that a website or service provider stores in the memory of your device via the browser you are using, if you have allowed this. They allow the site or service provider to recognise your browser and store certain information. You can get more information about the types of cookies we use in the table below:

You have the ability to change your cookie preferences at any time by changing your browser options. To block cookies in a specific browser, learn more here:

• Cookie settings in Google Chrome
• Cookie settings in Firefox
• Cookie settings in Internet Explorer
• Cookie settings in Safari

Refusing cookies may result in limited functionality or in the inability to use our Website services.

6. With whom do we share your personal data?

Your personal data will not be transferred to third parties unless:

• You provide us with your explicit, informed and freely given consent;
• the third parties in question provide us with support under contract in order to provide our Services
• o it is required by law or by an act of a public authority
• there is a reasonable need to protect the rights, property or safety of users of the Website or other protectable public interest;
• it is required in connection with the sale of a business, our company or its assets that is subject to confidentiality.

Our employees and partners have access to your personal data for the purposes of maintaining the Website and Services, but they are bound by a duty of confidentiality in relation to the data they access in connection with carrying out this activity.

Our employees and partners are duly informed of the importance of their duty of confidentiality and are responsible for fulfilling that duty.

We may share non-personally identifiable data with our commercial partners (media, marketing agencies and other business partners who have agreed to comply with this Policy) for the purpose of providing you with information about products and services, as well as promotions and offers, with your consent.

For any other purposes not specifically mentioned in this Policy, we will ask for your explicit consent, identifying our partners and the purposes for the transfer and sharing of data.

We may be required to disclose a User's identity by a court order or an act of a public authority, particularly in the event of an investigation into violations of third party rights or the unlawful acquisition of personal data. In the event of disclosure of a User's personal data to a public authority in connection with an investigation or proceeding against the User, we are not obligated to notify the User in question.

7. Links to third party websites

This Policy is applicable and valid only for users of the Services accessible through our Website. This Policy does not apply to other websites, social networks, platforms or companies that we do not control but to which our Website links directly or indirectly. You should be aware that all such websites, social networks, platforms or companies have their own privacy policies and that we are not responsible for them. Please review the privacy policies of other websites, social networks, platforms or companies before providing personal information to them.

8. Minimum age

We do not collect or process personal data from anyone under the age of 18. We will delete any information submitted by or relating to users known to us to be under the age of 18.

9. Your rights

We do not collect and process personal data of persons under the age of 18. We will delete any information submitted by or relating to users known to us to be under the age of 18.

Under applicable law, you have the legally recognised right, without owing anything, to object to the processing of your personal data at any time by submitting an explicit request here:

You have the right to access the personal data we hold about you in a structured, commonly used and machine-readable format by sending an explicit request here:

You have the right to request the transfer of your personal data to another controller by sending an explicit request here:

If any of the information we hold about you is incorrect or inaccurate, you have the right to correct it by amending the information contained in your profile by sending an explicit request here:

You have the right to request deletion of your personal data by sending an explicit request here. This does not apply to those personal data that we are obliged to keep by law.

You also have the right to request a restriction on the processing of your personal data in relation to individual collection, processing and sharing activities by submitting an explicit request here.

You have the right to request that third parties who have access to your data be notified of the restriction, erasure or prohibition of processing of your data, in order for those third parties to delete any links, copies or replicas of your personal data.

The controller will respond to your request or inform you in writing of the action taken in relation to the request within two months of receipt of the request. The time limit may be extended by a further month where the complexity or number of requests so requires, of which you will be duly notified.

10. Control authority

For matters relating to the protection of personal data, the local supervisory authority is. "2 Tsvetan Lazarov, Tel. +359 2 915 3580 Fax +359 2 915 3525, e-mail: kzld@cpdp.bg, Website: http://www.cpdp.bg/

11. Questions?

If you have any questions, alerts or requests regarding your personal data stored by Us, please do not hesitate to contact Us at:

• Email: dpo@vivasan.bg;
• phone: +359 2 953 27 78;
• address for correspondence: Sofia, ul. Ami Bue №72, floor 1, office 8.

We may make changes to this policy in the future. The latest up-to-date version is published on our website.

Download in PDF here.

Effective since 2019.

© 2000-2023 Vivasan BG Ltd | All rights reserved.