Privacy policy
Personal Data Protection Policy
/for the users of the Online store Cavalieri1981/
I. INTRODUCTION
The current Personal Data Protection Policy of Cavalieri 1981 AD describes how we use, store and protect the personal information that you provide to us regarding the use of our services. This Policy is an integral part of the Terms of Use of the website.
If you have any questions or comments regarding this Policy, please contact us using the information contained in the Contact Us section on the website or write to us directly.
Please read this Policy carefully before using our services. It has been written in the most concrete and clear way, as far as possible, in order to make it easier for you to read and understand.
It is important to know that:
• By registering to our Online store, you agree to this Policy and expressly acknowledge that you accept it.
• If you do not wish for your personal data to be processed by us as described in the Policy, please do not provide it to us. The provision of personal data is voluntary, in order to use or access the services of our Online store. Your possible refusal to provide the required personal data for use of the services on our website would be a refusal to use or access the services concerned.
• In certain cases, your explicit consent to the processing of personal data may not be necessary if another legal basis is available, for example: compliance with the legal obligations of the Administrator; need for contract execution, etc.
• The control body for the protection of personal data is: Data Protection Commission.
II. TERMS
COMPANY or ADMINISTRATOR: Cavalieri 1981 AD, UIC: 207396860, with corporate seat and registered address at 3 Naicho Tzanov Str., City of Plovdiv, Bulgaria
PERSONAL DATA: Any information relating to a natural person, identified or identifiable, directly or indirectly, via an identification number or by one or more specific features.
PROCESSING OF PERSONAL DATA: Any action or set of actions that may be performed with regards to the personal data by automatic or other means, such as collecting, recording, organizing, storing, adapting or modifying, restoring, consulting, using, disclosing or transmitting, distributing, updating or combining, blocking, deleting or destroying of the data.
SUBJECT OF PERSONAL DATA: Any natural person whose personal data is being processed.
Online store: This term refers to a virtual platform maintained by the Company that covers the website Cavalieri1981.com.
Additional terms are explained in the Terms of Use of the website.
III. PERSONAL DATA
1. Types of Subject of personal data, categories of processed data, objectives of processing, period of storage
Depending on the way people use our Online store and the services provided, the Subjects of personal data fall into several sections listed below. Depending on them, the data of the Subjects is processed in separate Personal Data Registries, and for each of them the processing may include different categories of data, objectives and grounds, periods of storage, protection measures, and so on.
The same person may fall into more than one of the listed sections simultaneously. For example, each Registered user is also a Visitor; each User-Buyer is also a Registered User and a Visitor.
a. Visitors
• A visitor is any person who loads a page in his browser that is part of the Online store, or who visits various sections and pages thereof (either by directly entering the link in the browser or via a link from another website or resource);
• Categories of data that can be processed: Online identifiers stored in local cookies in the device/browser of the visitor; Location information specified by the visitor; Country/city data based on the IP address of the user device, an integral part of the information received from each website; Information on actions performed by the Subject in the Platform; Preferences of the visitor on specific aspects and settings of the functionalities of the Platform; Information on the type of browser/device used;
• Objectives of the processing: Provision of basic and auxiliary functions necessary for the correct and complete functioning of the Online store; Calculation of the website traffic;
• Period of storage: Until the expiration of each cookie (up to 1 year from the time of its writing), carrier of the relevant information, or the deletion of the cookie by the Subject, in the device/browser of whom it is being stored;
• Legal basis for processing: Consent to the Cookie Policy.
b. E-mail subscribers
• An e-mail subscriber is any Visitor who has subscribed to an automatic e-mail newsletter for the Online store for receipt of e-mails containing different pieces of information from the store, commercial offers, etc. The e-mail newsletter is sent directly by the Administrator, without the use of external mediation services;
• Categories of data that can be processed: Names, E-mail addresses, Location data, an integral part of the service provision, Subscribers’ preferences on the subject of their subscription (interest in cities and locations, categories, etc.; days of receipt of the e-mails and other settings), Information on the browser/device used;
• Objectives of the processing: Provision of possibility and service of e-mail subscriptions (e-mail newsletters) for which the subscribers subscribe – receipt of e-mails with various pieces of information from the Platform, trade offers, and more;
• Period of storage: Up to 6 months after termination of the subscription by the subscriber or by the Administrator.
• Legal basis for processing: Consent to be included in a list of recipients (subscription for an e-mail newsletter).
c. Registered users
• A registered user is any Visitor who has made a registration in the Online store by entering an e-mail address (and/or username) and a password, with which a so-called profile or account is created;
• Categories of data that can be processed: Basic mandatory data: Names, E-mail addresses, IP addresses; Optional user data: Location, Phone Number, Gender, Age, Photo/Avatar, Facebook Profile, Google Account; Other data: Information about actions performed by the Subject in the Online store, Information on the browser/device used;
• Objectives of the processing: Enabling the user to register an account for the use of the services of the Online store, such as: conclusion of distance contracts for purchases, maintenance of a user profile, interactions with other users, etc.;
• Period of storage: 2 years after termination of the registration by the user or by the Administrator, if any purchases or requests have been made. If there are none – after the termination of the account, which in this case is also considered a withdrawal of consent;
• Legal basis for processing: Consent to the Terms of Use upon the registration of an account.
d. User-Buyer
• User-Buyer is any Visitor and/or Registered user who, through the technical means of the Online store, has declared (or has made a request for) the conclusion of a Purchase and Sale Contract with us for the purpose of purchasing a product offered by Cavalieri1981 at a distance;
• Categories of data that can be processed: Names, Address, Phone Number, E-mail Address, IP Addresses, Purchase Information, Information on the actions performed by the Subject in the Online store;
• Objectives of the processing: Provision of possibility to make purchases through the Online store by signing distance contracts;
• Period of storage: 10 years after the last purchase made by the User-Buyer;
• Legal basis for processing: Implementation of a contract concluded with Cavalieri1981.com
2. Your rights
If we process your personal data, you will have the following rights you can exercise by submitting an application to the address of the Company mentioned above or electronically – at info@cavalieri1981.com or via the Contact Us section of the website.
• Right of access to your personal data: You will have the right to receive confirmation from us whether personal data are being processed for you and, if this is the case – to access the relevant personal data and information.
• Right of correction of personal data: If you establish that the personal data we process for you is inaccurate, you will have the right to ask us to correct the relevant personal data.
• Right of deletion of personal data (the right to be forgotten): In certain circumstances, such as if your personal data is being processed unlawfully or you have withdrawn your consent (if the processing of personal data is based on consent) and there is no reason for continuation of its processing, you will have the right to request the deletion of your personal data.
• Right of restriction of processing: In certain circumstances, such as if you have doubts about the accuracy of your personal data or have objected to our legitimate purpose for processing your personal data, you may request that we restrict the processing of your personal data until a solution is found.
• Right of objection to processing: In certain circumstances, such as if you have doubts about our legitimate interest in processing your personal data, you will have the right to object, for reasons specific to your particular situation, against such processing.
• Right of data portability: If your personal data is processed by automatic means with your consent or in order to fulfill our contractual relations, you may request that we provide your personal data in a machine-readable format for transfer to another data controller.
• Right to file a complaint with a control body: You will have the right to file a complaint about the processing of your personal data by us to the relevant control body – the Personal Data Protection Commission or the relevant court.
3. Provision of personal data to third parties
The Company does not provide data to third parties, except in the following cases:
a. If we have a legal obligation to disclose or share data;
b. If we have received consent from the relevant Subject of personal data;
c. Personal data pseudonymization for Visitors, Users and Subscribers of the Platform data may be provided in an automated manner to the external services of our suppliers integrated into the Online store for the purpose of calculation of website traffic or for advertising purposes. You can find more information on these external services in the Cookie Policy, as well as opt-out settings for individual types of services. Such a cancellation can also be done through external tools (for Google Analytics – here; for Google ad platforms – here; for Facebook ad platforms – here; for other platforms – here and here);
d. In certain circumstances, for the purpose of sending SMS notification messages to Users by the Online store, GSM numbers are provided via a technical channel to external services of our SMS service providers in order to effect the sending itself. Such circumstances are, for example: If you made a payment request with a deadline – to remind you of the deadline; If you use the “Send as SMS” option available with some features on our website; If it is necessary to notify you of important information related to a purchase you have made; If you ask us to send you information as SMS. For our part, we do not send SMS notifications for advertising purposes, except for those who have subscribed;
e. If a User-Buyer has made a payment and subsequently this payment is being investigated by a bank or payment institution or by a legal authority due to suspicion of a fraudulent or unrecognized payment or upon an investigation of misuse, the Administrator may provide data of the User-Buyer to the relevant bank or payment institution or legal authority;
f. Personal data is provided to a third party/other administrator where this is necessary for the legitimate interests of Cavalieri 1981 AD and of that third party in the cases of transfer of ownership or renting of the Online shop info@cavalieri1981.com and the website www.cavalieri1981.com for the benefit of an administrator/person established in the territory of the Republic of Bulgaria. The provision of data in this case results from the need for the online shopping platform to continue to operate and provide the services without affecting the opportunities, rights and habits of the Users when using the services. The third person may only use the data for the purposes for which it was originally collected – as set forth in the Terms of Use of the Cavalieri1981bg website and the Personal Data Protection Policy for users of the Online store Cavalieri1981.com.
5. Protection of data
For our part, we have taken the necessary technical and organizational measures in order to ensure that your personal data is protected against unauthorized access or disclosure, accidental or unlawful destruction or alteration.
Information in electronic form is stored on secure servers across the European Union, installed in a professionally equipped and technically maintained rooms for collocation of telecommunication equipment. The data transfer between servers and the client device/browser is encrypted via HTTPS.
6. Data of minors
The services provided by the Online store are designed for people over the age of 18.
If you are a minor, you cannot use our services without providing the Administrator with an express written permission from a parent or guardian. If you use our Online store without such permission, you are hiding an important information from us and are misleading us. In this case, the Company will not be responsible for any circumstances or events that have arisen as a consequence of such misconduct on your part.
As a Data Administrator, we do not collect personal information from minors that may lead to their identification.
7. IP addresses
When the Company stores IP addresses of Subject of personal data, this is done in order to provide adequate assistance to Users in different circumstances (for example: forgotten accounts, duplicated registrations, unintentional purchases, purchase status reports, etc.). IP addresses are stored for up to 1 year (this period is designed to match the behavior of part of the Platform’s users in terms of purchasing frequency and other actions). IP addresses are not provided to third parties under any circumstances other than those described in Section III, Article 4.
IV. COOKIES
1. The website of the Online store, as well as external services provided by third parties used by the store, use cookies with the purpose to temporarily store small pieces of information for proper functioning and provision of the best possible services.
V. EXPLANATION OF SOME PROCESSES AND TECHNICAL STEPS
1. Upon registration in the Online store
a. By registering in the Online store, the Visitor (Registered User) receives the so-called account consisting of a Private user profile: An individual part of the Online store containing user information required by the Administrator and stored, used and processed by the Administrator under this Policy. The Registered User will have access to the user profile by entering the e-mail address and password specified by him/her and, if necessary, via other technical means. The profile also serves as portal for communication between the User and the Administrator.
b. When a user makes his/her registration in the Online store, he/she receives an account in it.
c. For more information about your possibilities to control your account settings, visit the Settings page (after login to your account).
2. Upon registration in the Online store via external tools (“Sign in with Facebook”, “Sign in with Google”)
When a User uses the tools to establish a link between his/her account in the Online store and his/her account on Facebook or Google with the purpose of registration, he or she authorizes the Administrator to receive partial data from his/her account in the respective external service, allowed by the User to be provided through the settings in the respective external service, after which:
a. The Administrator may receive data of the User, such as Names, Gender, Age, Place of Birth, Picture/Avatar, which data will be added to the created user account in the Online store;
b. The Administrator may receive data of the User for interactions with other users (online friendships), which data will be added to the data of the User in the Online store;
c. The Administrator may be able to send notifications via the respective external service to the User sent within the respective external service for communication or marketing purposes (for example, private Facebook notifications).
The information that the Administrator can receive and process as described above is determined entirely by the User – through the settings within the respective external service (Facebook, Google) in which he/she has an account and which account he/she has decided to link with the account in the Online store. The registration of the User with these external services is accepted as consent to the processing of the data provided through them.
3. Upon signing of distance purchase and sale contract
By declaring a distance purchase, each User agrees that:
a. The conclusion of distance contract with Cavalieri1981.com generates legal relations directly between the User-Buyer and the Administrator
4. Upon subscription to notifications
In addition to the possibility for e-mail subscriptions relating to Section III, Art.1/b of this Policy, the Online store also maintains an alternative technical possibility for a Visitor to subscribe with the purpose to receive information. Such possibilities are the so-called Web-push notifications (browser notifications).
The way they work is as follows: The browser/device displays a dialog box to the Visitor asking if he/she wants to subscribe to this type of notification. If the Visitor confirms his/her consent, the subscription is created by generating a special token in the browser/device that is sent to the server and the server can then send notifications.
At any time, the Visitor will have the option to unsubscribe from these notifications through the settings of his/her browser/device.
5. Links to external websites
Separate pages of the Online store may contain links/references to other (external) sites. They are part of the content posted in the Online store by third parties. If you visit an external site through a link available in the Online store, the Company will not be responsible for the content of this external site, its services and functionality, as well as its data protection policy. We advise you to always familiarize yourself with the policies of the websites you visit.
VI. FINAL PROVISIONS
1. More information on the manner of operation of the Online store can be found in the Terms of Use of the website, from which this Policy is an integral part.
2. Any possible future changes to this Policy will be posted on this website.