Personal data

 

Privacy policy

in relation to the processing of personal data

Ensuring the right to protection of personal data is a major commitment of ELITEX Ltd., so we use all the necessary means and effort to process your data in full compliance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR") and any other applicable Bulgarian legislation. We hereby notify you of the manner in which we collect, use, transmit and protect your personal data when you interact with us in relation to products and services, including through our website.

We reserve the right to periodically update and modify this Privacy Policy to reflect any changes to the way we handle your personal data or changes to your legal requirements. In the event of such modifications, we publish the amended version of the Privacy Policy on our website http://shop.elitex.bg.

 

What is personal data?

Personal data is any information relating to an individual who is identified or can be identified directly or indirectly by an identification number or by one or more specific features.

 

Who are we, and how can you contact us?

ELITEX is a Bulgarian manufacturer of high quality socks, underwear, pajamas and other knitwear. The company performs 8-color screen printing on textile and is a Bulgarian legal entity with a headquarter: Rousse, 34, Kapitan Raycho Nikolov Str., Bulgaria, UIC 117541292 (hereinafter referred to as "ELITEX" or "we"). For the purposes of data protection legislation, we are an administrator in the processing of your personal data.

You can contact us by e-mail at: elytex@abv.bg or by regular mail at: Bulgaria, 7000 Rousse, 34, Kapitan Raycho Nikolov Str.

 

Which categories of personal data we process

• When you create a profile on our site: http://shop.elitex.bg, you are sending us your e-mail address, your first name, last name and surname;

• You can also add an additional information such as: mobile phone number, landline phone number, date of birth, delivery address, additional e-mail address, etc.;

• When making an order, you provide us with the following information: the product you want, your first and last name, shipping address, billing information, payment method, phone number, etc.

We do not collect or otherwise process sensitive data included in special categories of personal data in the General Data Protection Regulation. In addition, we do not wish to collect or process data of individuals under the age of 16.

 

What are the purposes and the grounds for processing?

1. Providing services of ELITEX in your favor

• creating and managing a profile on the ELITEX web platform;

• processing orders, including acceptance, validation, shipping and billing;

• solving problems related to order cancellations or any other issues related to orders, purchased goods or services;

• returning products in accordance with legal regulations;

• reimbursement of the value of the products in accordance with the legal provisions;

• assistance, including answering your questions about your orders or the ELITEX goods and services;

Processing your data for these purposes is in most cases necessary for the conclusion and performance of a contract between ELITEX and you. In addition, these purposes require processing under applicable law, including tax and accounting legislation.

 

2. Improving our services

We can use certain information about your buyer behavior to complete surveys of your satisfaction after completing an order or to conduct market research.

We base our activities on our legitimate business interests by always ensuring that your fundamental rights and freedoms are unaffected.

 

3. Marketing

We can send you all kinds of messages via e-mail / SMS / mobile push / webpush channels that contain general and thematic information, information about similar products or products that complement the products you buy, information about offers and promotions, information about the products added in the "Shopping Cart" section, or if you're interested in buying them, and other business communications such as market research and consumer opinion polls, and we can present customized recommendations bass. In order to provide you with information of interest to you, we may use certain information about your buyer behavior (for example, products / products that have been added to the list of desirable products / purchased products) to create an account. We always guarantee that this processing is done in compliance with your rights and freedoms and that the decisions taken in connection with them do not have any legal consequences for you and do not affect you substantially.

In most cases, we require your prior consent to send you marketing messages. You can change your decision and withdraw your consent at any time by contacting ELITEX using the contact details above.

In certain situations, we can base our marketing activities on our legitimate interest in promoting and developing our business. In any case, when we use your information for our legitimate interests, we take care and take the necessary measures to ensure that your fundamental rights and freedoms are not affected. You may at any time, by contacting us, discontinue processing your personal data for marketing purposes, and we will respond to your request.

 

4. Protection of our legitimate interests

There may be cases in which we use or transmit information to protect our rights and our commercial activities. These may include:

• measures to protect the website and users of the ELITEX platform against cyber attacks;

• measures to prevent and detect attempts at fraud, including the transmission of information to competent public authorities;

• Measures to manage various other risks.

The main reason for these types of processing are our legitimate interests related to the protection of our business activity, making an agreement that we ensure that all measures taken by us guarantee a balance between our interests and your fundamental rights and freedoms.

In addition, in some cases our processing is based on legal provisions such as the obligation to protect the goods and the values provided by the applicable legislation in this regard.

 

How long do we keep your personal data?

We store your personal information while you have an ELITEX account. You may always ask us to delete certain information or to close your account and we will respond to this request by retaining certain information, even after the account is closed when the applicable law or legitimate interests impose it.

 

To whom do we send your personal data?

As the case may be, we may transmit or give access to some of your personal data to the following categories of recipients:

• partners in the ELITEX market platform;

• courier service providers;

• payment / banking service providers;

• providers of marketing / telemarketing services;

• market research service providers;

• IT service providers;

• other companies with whom we can develop joint programs to market our goods and services.

If we are legally bound or if this is necessary to protect our legitimate interests, we may disclose certain personal data to public authorities as well.

We guarantee that access to your data by third party private parties is subject to the legal provisions on data protection and confidentiality of information, based on contracts concluded with them.

 

To which countries do we transmit your personal data?

We currently store and process your personal data in Bulgaria.

However, some of your personal data may be transmitted to entities located within or outside the European Union, including in countries for which the European Commission has not recognized an adequate level of personal data protection.

We will always take steps to ensure that any international transmission of personal data is carefully conducted in order to protect your rights and interests. Data transfers to service providers and other third parties will always be protected by contractual obligations and, where appropriate, by other safeguards, such as standard contract terms issued by the European Commission or certification schemes, such as the Privacy Shelf of personal data transferred from the EU to the United States of America.

You may contact us at any time by using the contact details listed above to find out which countries we are transmitting your data to and what safeguards we apply in connection with these data transmissions.

 

How do we protect the security of your personal data?

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures while complying with industry standards.

Despite the measures we apply to protect your personal data, we are aware that, in general, the transmission of information over the Internet or other public networks is not completely safe, with the risk that data may be reviewed and used by unauthorized third parties. We cannot take responsibility for these vulnerabilities of systems that are not under our control.

 

What are your rights?

The General Data Protection Regulation recognizes a number of rights in relation to your personal data. You may request access to your data, correction, deletion, limitation of processing, and / or raise objections to the processing of your personal data. To exercise these rights, you can contact us using the contact details listed above.

You have the right to complain to the local authority on the processing of your personal data. The contact details of the Data Protection Supervising authority in Bulgaria are as follows:

Commission for Personal Data Protection

Address: Sofia 1431, Acad. Ivan Evstratiev Geshov" 15

Phone: + 359 2 915 35 18

Fax: + 359 2 915 35 25

E-mail: kzld@government.bg, kzld@cpdp.bg

Website: www.cpdp.bg

 

1. We are serious about the confidentiality of all records containing personal data. For this reason, we ask that you send us your requests regarding these records using your email address listed on your ELITEX account. Otherwise, we reserve the right to verify your identity by requesting additional information to confirm your identity.

 

1. We will not charge any fee for the exercising of any rights with respect to your personal data except when your request for access to information is unreasonably, repeatedly or superfluously repeated, in which case we will charge a reasonable amount. We will inform you of any applicable fees before considering your request.

 

Response time. We respond to all valid requests within one month. In cases where the request is particularly complex or if you have made more requests, we will respond within a maximum of two months.

 

Third-party rights. We will not need to respond to a request if it adversely affects the rights and freedoms of other data subjects.