Privacy Policy

  1. Mandatory information on the rights of individuals regarding the protection of personal data (Privacy notice)

Information about the Personal Data Administrator, administrator identification data and contact details

Name: DI-MA 2024 Ltd

UIC:207864871

Headquarters and management address: Village of Novachene 2147, 1 Hristo Botev Street

E-mail: magazindimaood@gmail.com

website: https://bultee.com

It carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

  1. Purposes and principles for collecting, processing and storing your personal data

Personal data is information that serves to identify you, i.e. name, telephone number, address, e-mail.

DI-MA 2024 Ltd. collects only the personal data voluntarily provided by you, in full compliance with Regulation (EU) 2016/679 and the Personal Data Protection Act, and more specifically, on the basis of:

  • explicit consent received from you as a customer;
  • performance of the Administrator's obligations under a contract with you;
  • compliance with a legal obligation that applies to the Administrator;
  • for the purposes of the legitimate interests of the Administrator or a third party;

DI-MA 2024 Ltd. will not collect any of your personal data in any form, except for that necessary to perform actions on the website www.charmingshirts-bg.com.

We collect and process the personal data that you provide to us in connection with the use of the online store https://bultee.com and the conclusion of a contract with the company, including for the following purposes:

  • creating a profile and providing full functionality when using the online store;
  • individualization of a party to the contract;
  • accounting purposes;
  • statistical purposes;
  • information security protection;
  • ensuring the implementation of the contract for the provision of the relevant service.

Specifically, the purpose of data collection and processing is to create and manage a profile on the site https://bultee.com; process orders, including acceptance, confirmation, shipping and invoicing thereof; resolve problems related to cancellation of orders or any other problems related to orders, purchased goods or services; return of products in accordance with legal provisions; refund of the value of products in accordance with legal provisions; provide support, including answering your questions regarding your orders or the goods and services of DI-MA 2024 OOD;

The processing of your data for these purposes is in most cases necessary for the conclusion and performance of a contract between DI-MA 2024 OOD and you. In addition, the fulfillment of these purposes requires processing in accordance with applicable law, including tax and accounting legislation.


  1. Categories of personal data that will be processed

The services provided by the site https://bultee.com

involve providing Personal Data such as name, address, telephone number, e-mail.

3.1. Registration data: names, e-mail

Purpose for which the data is collected:

  • Establishing a connection with the user and sending information to him,
  • for the purposes of user registration in the online store,

3.2. Delivery data: names, telephone, e-mail, address

Purpose for which the data is collected:

  • Fulfillment of the administrator's obligations under a distance sales contract
  • delivery of purchased goods
  • exercising the right to return and exchange or refuse purchased goods.

3.3. Grounds for processing your personal data:

By accepting the General Terms and Conditions and registering in the online store or placing an order without registration, or by concluding a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we collect and process your personal data - Art. 6, para. 1, b. "b" of Regulation (EU) 2016/679. Your data for sending a newsletter is processed on the basis of your explicit consent - Art. 6, para. 1, b. "a" of Regulation (EU) 2016/679

https://bultee.com does not collect data with a special data category within the meaning of Articles 9 and 10 of Regulation (EU) 2016/679. With this consent, you undertake not to store and send such data through the site, such as:

– data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, nor your genetic data, biometric data, data about your health, your sex life or your sexual orientation, or data related to your convictions and offences.

– identity documents, as well as personal identification number, passport/ID card number, etc. similar.

The company does not perform automated decision-making with data.

The company does not collect and process data about persons under 16 years of age, except with the express consent of their parents or legal representatives.


  1. Categories of data recipients

The site https://bultee.com functions as an electronic store through which Users have the opportunity to conclude purchase and sale contracts for the products offered by

DI-MA 2024 OOD is a company registered under the Commercial Code of the Republic of Bulgaria with UIC: 207864871, with headquarters and management address: s.Novachene 2147, ul.Hristo Botev N.1,: email address: magazindimaood@gmail.com items with prints or embroidery according to the design desired by the user. Through the way the site is organized, the user is guaranteed that the goods ordered by him are fully individualized according to his order and are not pre-produced.

Since the products desired and ordered by the user are manufactured by the company, without outsourcing to third parties, the users' personal data is not transferred or provided to anyone.

The shipment of the ordered products is carried out via courier service, in which case the selected courier is provided with only the names, address and telephone number of the user, in order to fulfill our contractual obligations, and with the relevant guarantees for the protection of the personal data provided, in accordance with the contract between DI-MA 2024 OOD and the respective courier.

  1. How do we process your personal data?

We use your data only for the purposes for which we collect it.

The information protocol and the data in it are stored for the security of our systems, in order to identify a violation, infringement or unauthorized access to your personal data. We are not able to attribute a protocol to a specific person. We do not compare information from one database with another database.

The data we receive from you voluntarily is stored so that we can:

  • To process your orders;
  • if necessary, contact you to clarify orders, deadlines and method of delivery.

After achieving the purpose for which we collected your personal data and after the performance/termination of the contract concluded between us, we undertake to immediately destroy them, unless there is a legal period for their storage.

Period of storage of your personal data

The Administrator stores your personal data for a period not longer than the existence of your account in an online store or placing an order as a “Guest”. After deleting your account or successfully completing it, the Administrator takes the necessary care to delete and destroy all your data without unnecessary delay or to anonymize it (i.e. to bring it into a form that does not reveal your identity).

The Administrator stores your personal data, provided in connection with online orders placed, for a period of 5 years for the purposes of protecting the Administrator's legal interests in legal or administrative disputes with users of the online store, and accounting documents are stored for the relevant statutory period.

The Administrator stores the personal data of the legal representatives of its business partners for the term of the contract, to comply with the legitimate interests and legal obligations of the Administrator, and this term may exceed the term of the concluded contract.

We do not provide online services to users, and we do not carry out automated processing of your personal data, nor profiling (a form of automated processing of personal data, for the purpose of evaluating certain personal aspects relating to the natural person and intended to analyze or predict aspects relating to the person's professional obligations, financial situation, health, personal preferences, interests, reliability, behavior, location or movements)

The personal data you provide to us is limited to the minimum necessary to fulfill the user's order, and no other personal data beyond this minimum is collected, processed or stored by .

Only DI-MA 2024 Ltd. has access to the information you have provided to us, and all information we receive about you is stored on secure servers and appropriate technical and organizational measures have been implemented to protect it from unauthorized access by third parties, as well as to ensure constant confidentiality, integrity, availability and resilience of the systems and services for its processing.

When collecting and processing your personal data, DI-MA 2024 Ltd. adheres to the following principles:

  • legality, good faith and transparency;
  • limitation of the purposes of processing;
  • relevance to the purposes of processing and minimization of the data collected;
  • accuracy and timeliness of data;
  • storage limitation in order to achieve the objectives;
  • integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
  1. What are your rights?

You have the right at any time to refuse to have your personal data collected and processed, and also to request that it be deleted, corrected or blocked.

To do this, send an email with the subject: “Personal Data Controller” to the following email address: magazindimaood@gmail.com

6.1.Withdrawal of consent to the processing of your personal data

  • If you do not want all or part of your personal data to continue to be processed by the Company for specific or all processing purposes, you can withdraw your consent to processing at any time by filling out the form in your profile or by making a free text request.
  • The administrator may request that you verify your identity and identity with the person to whom the data relates by asking you to enter an email address and password to access the site or in another appropriate manner that identifies you in an indisputable and undoubted manner as the subject of the personal data - for example, by requiring you to follow a link sent by the administrator, or by another technical means.
  • By withdrawing your consent to the processing of personal data that is mandatory for creating and maintaining an account in the online store, your account will become inactive. Of course, you will be able to browse the online store and the products offered and place orders as a guest or make a new registration.
  • If there is an order placed by you that is in the process of being processed, the earliest time you can withdraw your consent to processing is upon successful completion of the order.

6.2. Right of access

  • You have the right to request and receive from the Administrator confirmation whether personal data related to you is being processed, and if you are a registered user, you can at any time view in your profile the personal data that you have provided and are being processed for you.
  • You have the right to access the data relating to you, as well as information relating to the collection, processing and storage of your personal data.
  • The administrator provides you, upon request, with a copy of the processed personal data relating to you, in electronic or other appropriate form.
  • Providing access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repetitive or excessive requests.

6.3. Right to correction or completion

  • You can correct or complete inaccurate or incomplete personal data related to you directly through your profile on the website or by sending a request to the Administrator.

6.4. Right to erasure ("to be forgotten")

  • You have the right to request from the Administrator the deletion of part or all of your personal data, and the Administrator has the obligation to delete them without undue delay where any of the following grounds apply:

* the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

* You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;

* You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no overriding legal grounds for the processing;

* the personal data has been processed unlawfully;

* the personal data must be erased for compliance with a legal obligation under EU law or the law of a Member State to which the Administrator is subject;

the personal data were collected in connection with the provision of information society services.

  • The administrator is not obliged to delete personal data if it stores and processes it:

* for exercising the right to freedom of expression and the right to information;

* for compliance with a legal obligation which requires processing provided for in EU law or Member State law to which the Administrator is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in him/her;

* for reasons of public interest in the field of public health;

* for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes;

* for the establishment, exercise or defense of legal claims.

  • In case of exercising your right to be forgotten, the Company will delete all your data, except for the following information:

* information necessary to verify that your right to be forgotten has been fulfilled – email, IP address;

* technical information about the functioning of the online store, which information cannot be linked in any way to your identity;

* email address with which you registered in the online store.

  • To exercise your right to be forgotten, you must submit a request through your account in the online store or by sending a request by email to the Administrator.
  • The administrator may request that you verify your identity and identity with the person to whom the data relates.
  • If you have an order that is in the process of being processed, the earliest time you can request to be "forgotten" is upon successful completion of the order.
  • By deleting your personal data, your account will become inactive. Of course, you will be able to browse the online store and the products offered and place orders as a guest or make a new registration.
  • The administrator does not delete the data that he has a legal obligation to store, including for protection against legal claims made against him or to prove his rights.

6.5. Right to restriction

  • You have the right to request the Administrator to restrict the processing of data relating to you when:

* contest the accuracy of the personal data, for a period that allows the Administrator to verify the accuracy of the personal data;

* the processing is unlawful, but you do not want the personal data to be deleted, but only to have their use restricted;

* The administrator no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defense of your legal claims;

* You have objected to the processing pending verification of whether the Administrator's legitimate grounds override your interests.

6.6. Right to receive information

You may request the Administrator to inform you of all recipients to whom the personal data for which rectification, erasure or restriction of processing has been requested have been disclosed. The Administrator may refuse to provide this information if this would be impossible or would involve disproportionate effort.

6.7. Right to object

You may object at any time to the processing of personal data relating to you by the Administrator, including if it is processed for profiling or direct marketing purposes.

6.8. Your rights in the event of a breach of your personal data security

  • If the Administrator establishes a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, he will notify you without undue delay of the breach, as well as of the measures that have been taken or are to be taken.
  • The administrator is not obliged to notify you if:

* has taken appropriate technical and organizational measures to protect the data affected by the security breach;

* has subsequently taken measures that ensure that the violation will not lead to a high risk to your rights;

* notification would require disproportionate effort.

  • In the event of a violation of your rights under the above or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Name: Personal Data Protection Commission

Headquarters and management address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone: 02 915 3519

Website: www.cpdp.bg

  1. Links to other web pages

Our website contains links to other websites. The data protection information applies only to our website. Please note the data protection information published on such websites. We are not responsible for their content. The provider of the website to which you were referred is responsible for illegal, incomplete or missing information, as well as for damages caused by the presence or absence of such information.

  1. Google Analytics

https://bultee.com uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses so-called cookies, which are text files stored on your computer, to help the website analyse how users use the website.

Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage to the website. Google will not associate the IP address sent by your browser through Google Analytics with other data held by Google.

You can prevent the storage of cookies by adjusting your browser settings accordingly. Please note that if you do this, you may not be able to use all the functions of this website.

You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following Internet address: https://tools.google.com/dlpage/gaoptout?hl=en

Please note that the use of the browser plug-in is limited to the respective browser and the respective computer and, once installed, it cannot be deleted in order to maintain the deactivation of Google Analytics. Google's privacy policy can be found at https://www.google.com/intl/bg/policies/privacy.

  1. Facebook Conversion Pixel

Through the Facebook Conversion Pixel, we and Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) understand that someone has clicked on our Facebook ad and has been redirected to our website. However, we cannot see which other websites you have visited. The information collected using the Facebook Conversion Pixel is intended to compile statistics on the success and use of our Facebook ads. However, we do not collect or receive information that allows users to be personally identified. For more information about the purpose and scope of Facebook's collection and processing of your personal data, as well as the setting options to protect your privacy on Facebook, please refer to https://www.facebook.com/policy.php

  1. Encryption

We take technical and organizational security precautions to protect your data to the greatest extent possible from unwanted interference and access.

In addition to securing our information infrastructure, cryptographic methods are used in all sections. To prevent misuse of your data by third parties, the information you submit is transported and verified in encrypted form using the TLS (Transport Layer Security) protocol. You can recognize this in the address bar of your browser by the padlock symbol that is locked and the Internet address begins with https.

Modern websites use various systems to analyze and improve the provision of goods and services to users and it is not possible to describe them in detail. If you have any concerns about the information collected by our website, we recommend that you use the Incognito option of the Google Chrome browser.

" undertakes not to disclose any personal information about Users and not to provide the collected information to third parties - government authorities, commercial companies, individuals and others, except in cases where:

  • the explicit consent of the User has been obtained;
  • the provision is necessary for the performance of the obligations assumed under the contract with the user and/or for the realization of the legitimate interests of "or a third party to whom the data is disclosed, except when the interests of the User to whom the data relates take precedence over these interests;
  • the information is requested by state authorities or officials who, according to the current legislation, are authorized to request and collect such information in compliance with the legally established procedures;
  • in other cases specified in the law;