Privacy Policy (Privacy-Policy)
- Mandatory information regarding individuals' data protection rights (Privacy notice)
Information regarding the Personal Data Controller, the controller's identification details, and contact information
Name: DI-MA 2024 Ltd.
UIC:207864871
Registered office and management address: NOVACHENE VILLAGE 2147, 1 Hristo Botev St. N.1
Email: magazindimaood@gmail.com
website: https://bultee.com
conducts its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
- Purposes and principles for collecting, processing, and storing your personal data
Personal data is information that serves to identify you, i.e. names, telephone number, address, email address.
DI-MA 2024 Ltd. collects only the personal data voluntarily provided by you, in full compliance with Regulation (EU) 2016/679 and the Personal Data Protection Act, and more specifically, on the basis of:
- your explicit consent as a customer;
- performance of the Controller's obligations under a contract with you;
- compliance with a legal obligation applicable to the Controller;
- for the purposes of the legitimate interests of the Controller or a third party;
DI-MA 2024 Ltd. will under no circumstances collect any other personal data from you except that necessary to perform activities on the website www.charmingshirts-bg.com
We collect and process the personal data you provide to us in connection with your use of the online store https://bultee.com and entering into a contract with the company, including for the following purposes:
- creating a profile and providing full functionality when using the online store;
- identification of a party to the contract;
- accounting purposes;
- statistical purposes;
- protecting information security;
- ensuring the performance of the contract for providing the relevant service.
More specifically, the purpose of collecting and processing data is to create and manage a profile on the website https://bultee.com, process orders, including accepting, confirming, dispatching, and invoicing them; resolve issues related to order cancellations or any other issues related to orders, purchased goods, or services; return products in accordance with legal provisions; refund the value of products in accordance with legal provisions; provide support, including answering your questions regarding your orders or the goods and services of DI-MA 2024 Ltd.;
Processing your data for these purposes is, in most cases, necessary for entering into and performing a contract between DI-MA 2024 Ltd. and you. In addition, achieving these purposes requires processing in accordance with applicable legislation, including tax and accounting legislation.
-
Categories of personal data that will be processed
The services provided by the website https://bultee.com
involve providing Personal Data such as name, address, telephone number, and e-mail.
3.1. Registration data: names, e-mail
Purpose for which the data is collected:
- Establishing contact with the user and sending information to them,
- for the purpose of registering a user in the online store,
3.2. Data required for delivery: names, telephone number, e-mail, address
Purpose for which the data is collected:
- Performance of the Controller’s obligations under a distance sales contract
- delivery of the purchased goods
- exercising the right to return and exchange or cancel a purchased product.
3.3. Legal basis for processing your personal data:
By accepting the General Terms and Conditions and registering in the online store, placing an order without registration, or concluding a written agreement, a contractual relationship is established between the Controller and you. On this basis, we collect and process your personal data under Article 6(1)(b) of Regulation (EU) 2016/679. Your data for sending an information newsletter is processed on the basis of your explicit consent under Article 6(1)(a) of Regulation (EU) 2016/679.
https://bultee.com does not collect data falling within the category of special data within the meaning of Articles 9 and 10 of Regulation (EU) 2016/679. By giving this consent, you undertake not to store or send such data through the website, such as:
– data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in trade unions, or your genetic or biometric data, data concerning your health, sex life or sexual orientation, or data relating to your convictions and offenses.
– identity documents, as well as personal identification number, passport/identity card number, and other similar data.
The Company does not carry out automated decision-making using data.
The Company does not collect or process data concerning persons under 16 years of age, except with the explicit consent of their parents or legal representatives.
-
Categories of data recipients
The website https://bultee.com operates as an online store through which Users may enter into contracts for the sale and purchase of the offered
DI-MA 2024 Ltd. is a company registered under the Commercial Act of the Republic of Bulgaria, with UIC: 207864871, having its registered office and management address at: 1 Hristo Botev St., Novachene village, 2147; email address: magazindimaood@gmail.com. It offers items with prints or embroidery based on a design chosen by the user. Through the way the website is organized, users are guaranteed that the goods they order are fully personalized according to their order and are not pre-produced.
Since the products desired and ordered by the consumer are manufactured by the company without engaging third parties, consumers’ personal data is not transferred or provided to anyone.
The ordered products are shipped via a courier service. In this case, only the consumer’s name, address, and telephone number are provided to the selected courier for the purpose of fulfilling our contractual obligations, with the applicable guarantees for protecting the provided personal data, in accordance with the contract between ДИ-МА 2024 ООД and the respective courier.
- How do we process your personal data?
We use your data only for the purposes for which we collect it.
The information log and the data contained in it are stored to ensure the security of our systems, so that a violation, attack, or unauthorized access to your personal data can be identified. We are unable to attribute a given log to a specific person. We do not compare information from one database with another database.
The data you voluntarily provide to us is stored so that we can:
- To process your orders;
- when it is necessary to contact you to clarify your orders, delivery times, and delivery method.
After achieving the purpose for which we collected your personal data and after performing or terminating the contract concluded between us, we undertake to destroy it immediately, unless there is a statutory retention period.
Retention period for your personal data
The data controller stores your personal data for no longer than the existence of your online store account or the completion of an order as a “Guest.” After your account has been deleted or the order has been successfully completed, the Controller takes the necessary steps to delete and destroy all your data without undue delay or anonymize it (i.e., render it in a form that does not reveal your identity).
The data controller stores your personal data provided in connection with online orders for a period of 5 years, for the purpose of protecting the Controller’s legal interests in judicial or administrative disputes with online store consumers, while accounting documents are stored for the applicable statutory period.
The data controller stores the personal data of the legal representatives of its business partners for the duration of the contract, to protect the Controller’s legitimate interests and comply with its legal obligations; this period may exceed the term of the concluded contract.
We do not provide users with online services, nor do we carry out automated processing of your personal data or profiling (a form of automated processing of personal data intended to evaluate certain personal aspects relating to an individual and used to analyze or predict aspects concerning the person's professional duties, financial situation, health, personal preferences, interests, reliability, behavior, location, or movements)
The personal data you provide is limited to the minimum necessary to fulfill the order placed by the user, and no other personal data beyond this minimum is collected, processed, or stored by .
Access to the information you have provided is available exclusively to DI-MA 2024 Ltd., and all the information we receive about you is stored on secure servers. Appropriate technical and organizational measures have been implemented to protect it from unauthorized access by third parties and to ensure the ongoing confidentiality, integrity, availability, and resilience of the systems and services used to process it.
When collecting and processing your personal data, DI-MA 2024 Ltd. adheres to the following principles:
- lawfulness, fairness, and transparency;
- purpose limitation of processing;
- relevance to the purposes of processing and minimization of the data collected;
- accuracy and currency of the data;
- storage limitation with a view to achieving the purposes;
- integrity and confidentiality of processing and ensuring an appropriate level of security for personal data.
- What are your rights?
You have the right at any time to refuse to have your personal data collected and processed, and also to request that it be deleted, corrected, or blocked.
To do so, send an email with the subject line: “Personal Data Officer” to the following email address: magazindimaood@gmail.com
6.1. Withdrawal of consent to the processing of your personal data
- If you do not wish all or part of your personal data to continue to be processed by the Company for a specific purpose or for all processing purposes, you may withdraw your consent to processing at any time by completing the form in your profile or by submitting a free-form request.
- The controller may ask you to verify your identity and that you are the person to whom the data relates by asking you to enter an email address and password to access the website, or by another appropriate method that identifies you unequivocally and beyond doubt as the data subject—for example, by requiring you to follow a link sent by the controller or by using another technical method.
- By withdrawing your consent to the processing of the personal data required to create and maintain an account in the online store, your account will become inactive. Of course, you will still be able to browse the online store and the products offered, place orders as a guest, or register a new account.
- If you have placed an order that is being processed, the earliest time at which you can withdraw your consent to processing is upon the successful completion of the order.
6.2. Right of access
- You have the right to request and receive confirmation from the Controller as to whether personal data concerning you are being processed; if you are a registered user, you can view the personal data you have provided and that are being processed for you in your account at any time.
- You have the right to access the data concerning you, as well as information relating to the collection, processing, and storage of your personal data.
- Upon request, the Controller will provide you with a copy of the personal data concerning you that are being processed, in electronic or another appropriate form.
- Providing access to the data is free of charge, but the Controller reserves the right to charge an administrative fee in the event of repetitive or excessive requests.
6.3. Right to rectification or completion
- You can correct or complete inaccurate or incomplete personal data concerning you directly through your account on the website or by submitting a request to the Controller.
6.4. Right to erasure (“right to be forgotten”)
- You have the right to request the Controller to delete some or all personal data concerning you, and the Controller is obliged to delete them without undue delay when one of the grounds listed below applies:
* the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
* You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
* You object to the processing of personal data concerning you, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing;
* the personal data have been processed unlawfully;
* the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State applicable to the Controller;
the personal data were collected in connection with the provision of information society services.
- The Controller is not obliged to delete personal data if they are stored and processed:
* for the exercise of the right to freedom of expression and the right to information;
* for compliance with a legal obligation requiring processing under EU law or the law of a Member State applicable to the Controller, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
* for reasons of substantial public interest in the area of public health;
* for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes;
* for the establishment, exercise, or defense of legal claims.
- * If you exercise your right to be forgotten, the Company will delete all your data, except for the following information:
* information necessary to verify that your right to be forgotten has been fulfilled – email address, IP address;
* technical information about the operation of the online store that cannot be linked to you in any way;
* the email address you used to register in the online store.
- To exercise your right to be forgotten, you must submit a request through your online store account or send a request by email to the Controller.
- The Controller may ask you to verify your identity and that you are the person to whom the data relates.
- If you have placed an order that is being processed, the earliest time you can request to be “forgotten” is after the order has been successfully completed.
- When your personal data is erased, your account will become inactive. Of course, you will still be able to browse the online store and the products offered and place orders as a guest or create a new account.
- The Controller does not erase data that it is legally required to retain, including for its defense against legal claims brought against it or to establish its rights.
6.5. Right to restriction
- You have the right to ask the Controller to restrict the processing of data concerning you when:
* you contest the accuracy of the personal data, for a period enabling the Controller to verify its accuracy;
* the processing is unlawful, but you do not want the personal data to be erased and instead want its use to be restricted;
* The Controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims;
* You have objected to the processing pending verification of whether the Controller’s legitimate grounds override your interests.
6.6. Right to receive information
You may ask the Controller to inform you of all recipients to whom the personal data for which rectification, erasure, or restriction of processing has been requested have been disclosed. The Controller may refuse to provide this information if doing so would be impossible or require disproportionate effort.
6.7. Right to object
You may object at any time to the processing of personal data concerning you by the Controller, including where the data is processed for profiling or direct marketing purposes.
6.8. Your rights in the event of a personal data security breach
- If the controller establishes a breach of your personal data that may result in a high risk to your rights and freedoms, it will notify you of the breach without undue delay, as well as of the measures that have been taken or are to be taken.
- The controller is not required to notify you if:
* has implemented appropriate technical and organizational measures to protect the data affected by the security breach;
* has subsequently taken measures ensuring that the breach will not result in a high risk to your rights;
* notification would require disproportionate effort.
- If your rights under the above-mentioned or applicable data protection legislation are violated, you have the right to lodge a complaint with the Commission for Personal Data Protection as follows:
Name: Commission for Personal Data Protection
Registered office and business address: 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence address: 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd.
Telephone: 02 915 3519
Website: www.cpdp.bg
- Links to other web pages
Our website contains links to other web pages. The data protection notices apply only to our web page. Please pay attention to the data protection information published on such web pages. We are not responsible for their content. The provider of the web page to which you were redirected is responsible for any illegal, incomplete, or missing notices, as well as for any damage caused by the presence or absence of such information.
- Google Analytics
https://bultee.com uses Google Analytics (“Google Analytics”), a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses so-called cookies, which are text files stored on your computer, to enable analysis of users’ use of the website.
Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use. Google will not associate the IP address sent by your browser through Google Analytics with other data held by Google.
You can prevent cookies from being stored by using the relevant settings in your browser. Please note that if you do so, you may not be able to use all the functions of this website.
In addition, you can prevent Google from collecting the data obtained through cookies and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plug-in available at the following internet address: https://tools.google.com/dlpage/gaoptout?hl=en
Please note that the use of the browser plug-in is limited to the respective browser and computer, and after it is installed, it cannot be deleted in order to preserve the deactivation of Google Analytics. Google's privacy statement can be found at https://www.google.com/intl/bg/policies/privacy.
- Facebook Conversion Pixel
Using the Facebook Conversion Pixel, we and Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) understand that someone has clicked on our Facebook advertisement and been redirected to our website. However, we cannot see which other websites you have visited. The information collected using the Facebook Conversion Pixel is intended to compile statistics on the success and use of our advertisements on Facebook. Nevertheless, we do not collect or receive information that enables users to be personally identified. For more information about the purposes and scope of Facebook's collection and processing of your personal data, as well as the settings options for protecting your privacy on Facebook, please refer to https://www.facebook.com/policy.php
- Encryption
We take technical and organizational security measures to protect your data as much as possible from unwanted interference and access.
In addition to securing our information infrastructure, cryptographic methods are used in all sections. To prevent third parties from misusing your data, the information you submit is transmitted and verified in encrypted form using the TLS (Transport Layer Security) protocol. You can recognize this in your browser's address bar by the padlock symbol, which is locked, and the internet address begins with https.
Modern websites use various systems to analyze and improve the provision of goods and services to users, and it is not possible to describe them in detail. If you have any concerns about the information collected by our website, we recommend using the Incognito option in the Google Chrome browser.
“ undertakes not to disclose any personal information about Users or provide the information collected to third parties—state authorities, commercial companies, individuals, or others—except where:
- the User's explicit consent has been obtained;
- the provision is necessary to fulfill the obligations undertaken under the contract with the User and/or to pursue the legitimate interests of “ or of a third party to whom the data is disclosed, except where the interests of the User to whom the data relates take precedence over those interests;
- the information has been requested by state authorities or officials who, under the applicable legislation, are authorized to request and collect such information in compliance with legally established procedures;
- in other cases specified by law;