Effective from 25 May 2018, Regulation (EU) 2016/679 of 27 April 2016 of the European Parliament and the Council shall be applied on the protection of individuals with regard to the processing of their personal data and on the free movement of such data and repealing Directive 95/46/EC ('General Data Protection Regulation', GDPR), which shall significantly change the existing legal data protection regime.
In their capacity as a personal data controller, ZOGRAFOV shall process personal data in accordance with the GDPR and its implementation acts, as well as with the current national legislation and internal rules, procedures, policies and data protection impact assessments. This notification has been drawn up by ZOGRAFOV specifically for the visitors of the ZOGRAFOV website, in accordance with Art. 13 of the GDPR and contains information about:
WHO SHALL BE RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
The responsibility for the processing of your personal data shall lie with:
'ZOGRAFOV & SON' OOD, UIC: 202988840, seat and registered address: 428A Tsar Boris III Blvd, Sofia, represented by Lyubomir Zografov, herein referred to as ZOGRAFOV.
In the event that you wish to receive more information or a copy of the archive with your personal data processed by ZOGRAFOV or to exercise your rights under the GDPR, as well as if you suspect that your data is being used in an unregulated manner, you can email us at: office@zografovart.com
WHY SHALL WE COLLECT YOUR DATA?
NEXT BASKET shall process the personal data of the visitors to the Website (hereinafter collectively referred to as 'the data subjects'), in order to identify them, to maintain contact with them, to allow interaction by the data subjects with the corporate profiles of ZOGRAFOV in the various social networks, to send marketing messages, newsletters, etc., as well as to fulfil the legal obligations of ZOGRAFOV, in their capacity as the controller of these personal data.
WHAT KIND OF DATA SHALL WE COLLECT?
ZOGRAFOV shall process the following categories of personal data for you: If you do not order anything from ZOGRAFOV (detailed information here), when you visit our website, we shall collect the following personal data for you: email, in cases where you subscribe to receive advertising or informative messages from us, as well as information proving the fact of your subscription (log files - IP address; time when the subscription statement was made); information technologically necessary for the functioning of the Website (date and time of access; IP address from which the connection is made; server and system logs; logs for making legal statements); any other information constituting personal data collected or created in connection with the processing. In connection with the management and maintenance of the Website, ZOGRAFOV may use 'cookies' and other similar technologies, for which you can find more information here.
ON WHAT LEGAL GROUNDS SHALL WE PROCESS YOUR DATA?
In accordance with the GDPR, ZOGRAFOV shall process personal data only with a valid legal basis. ZOGRAFOV shall process your data on the following legal grounds:
WHAT KIND OF MEASURES SHALL WE TAKE TO PROTECT THE DATA COLLECTED?
The protection and security of your data is important to us. In order to prevent the loss, misuse or unauthorised access to your data, we shall apply all reasonable measures and means of protection, including providing for an obligation of confidentiality from all ZOGRAFOV's employees and contractors, implementing technical measures to protect the computers and systems through which personal data is processed, as well as conducting data protection training of our employees. If you suspect any kind of violation, please contact us immediately using the contact details provided.
HOW LONG SHALL WE STORE YOUR DATA FOR?
ZOGRAFOV shall store the personal data related to the data subjects' visits to the Website and corporate social networks for a period not longer than necessary and/or due according to the requirements of the applicable law and the specifics of the relevant correspondence. Except when the storage of the data is not necessary for the fulfilment of obligations stipulated by the legislation applicable to our activity, the data about the persons shall be stored for a period of 1 (one) year, counted from the termination of the relevant interaction.
WHAT RIGHTS SHALL YOU HAVE WHEN YOUR DATA IS PROCESSED BY US?
The GDPR provides a number of options for the protection of individuals in connection with the collection and processing of their data, and namely:
HOW SHALL WE SHARE YOUR DATA WITH THIRD PARTIES?
We may provide your data to the following third parties:
In any event, your data shall not be shared with persons located outside the EEA (EU, Norway, Iceland and Liechtenstein), unless the same is expressly permitted by local law and adequate safeguards are in place.
HOW CAN YOU CONTACT THE COMPETENT SUPERVISORY AUTHORITY?
Regardless of the above, in case of complaints, you shall have the right to contact the Personal Data Protection Commission (PDPC):