Privacy Policy

Privacy Policy

‘’SCRAPBOOKY’’ Ltd

(Notice Regarding the Processing of Personal Data)

 

Personal Data Administrator:

1. Name: ‘’SCRAPBOOKY’’ Ltd

2. UIC / BULSTAT: 207414002

3. Headquarters and management address: Bulgaria, Sofia 1839, kv. Vrazhdebna, ul.2,  No. 17A

4. E-mail: scrapbookyshop@gmail.com

5. Web-site: www.scrapbooky.net

 

Scrapbooky LTD (hereinafter referred to as ‘’the Company’’ or ‘’the Administrator) performs its activity in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, on the protection of physical persons in relation to the processing of personal data (‘’General Data Protection Regulation’’ or ‘’the Regulation’’). This Privacy Policy (‘’Privacy Policy’’ or ‘’the Policy’’) aims to inform each Client (as defined below) of the Company regarding the processing of data that identifies or may identify the specific Client.

For the purposes of this Policy, ‘’Client’’ refers to any individual who is a party to a contract with the Company for the purchase and sale of goods, as well as any individual who has expressed a willingness to enter into pre-contractual relations with the Administrator and/or is a user of the online store www.scrapbooky.net, accessible on the Internet at the electronic address: www.scrapbooky.net, as well as a director, manager, representative, agent, employee, partner, shareholder, actual owner, or a legal entity, or other legal entity utilizing the online store.

1. What personal data do we process?

As a personal data administrator, the Company processes the following categories of personal data of the Clients:
      

  ·        Physical identity – names, personal identification number (UCN), address, phone number, e-mail address;

·       Economic identity – information about bank account number.

The personal data is collected by the Administrator from the individuals to whom it relates.

 

 2. How do we collect personal data?

We collect personal data in the following ways:

·        During the registration process on the website of the online store and when using the online store without registration.

·        During correspondence with the Client, which may include communication in written form, including electronic and oral communication.

·        Through ‘’cookies’’ when using or browsing our website.

In some cases, we may also collect information from third parties or from public sources. Our website collects data in log files. This information includes data about your IP address, internet service provider, browser used, your operating system, when you visited our website, and the visited pages.

Our website uses ‘’cookies’’. Cookies are small files containing information that the website sends to the visitor’s browser. The browser stores this information in a text file on the user’s device. They help us improve the functionality of our website for you. More information about the use of cookies can be found in our Cookie Policy, published on the website of the online store: www.scrapbooky.com

 

3. Do we process special categories of personal data?

The Company does not process special categories of personal data of the Clients.

 

4. For what purposes we process personal data?

The Company processes personal data of Clients for the following purposes:

·        Providing information and assistance requested by you

·        Individualization and contacting clients and actual owners

·        Carrying out all activities related to the existence, modification, and termination of the relationship between the Company and the Client

·        Offering and promoting additional services

·        Compliance with regulatory requirements

·        Providing protection in the event of a dispute and cooperation with regulatory authorities to the extent required by law.

If we do not process these personal data, we may not be able to provide you with our services or the requested assistance.

5. On what legal basis we process personal data?

The personal data of Clients is collected, processed, and used based on several legal grounds for processing:

·        For contract performance or for entering into pre-contractual relations

·        For compliance with a legal obligation applicable to the Company

·        For the purposes of the legitimate interests pursued by the Company or a third party, when the rights and interests of the data subjects do not override those interests – for resolving disputes; for the prevention, detection, investigation of fraud, violations, or other unlawful behaviour; for the establishment, exercise, or defense of legal claims;

·        Under the conditions of voluntarily given consent when required by applicable legislation

 

6. For how long do we store personal data?

The Company stores personal data during the contractual relationship and until the settlement of the contractual obligations, as well as during a transitional period (e.g., for compliance with obligations related to archiving and retention of accounting data). If legal or other proceedings are initiated, personal data may be stored until the conclusion of such proceedings, including any potential appeal periods, and then will be erased or archived as permitted by applicable legislation. Specifically, various media containing accounting and tax information that includes personal data are retained for a period of 10 years, from January 1^st of the reporting period following the reporting period to which they relate.

In cases where your personal data is obtained and processed based on your consent, we will only process your personal data to the extent that we have your consent to process it.

 

7. Who do we share personal data with? Do we disclose personal data to third parties?

The Company may, at its own discretion, disclose part or all of the personal data to data processors for the purposes of processing, in compliance with the requirements of the Regulation.

The Company shares personal data with:

·        Third parties - service providers engaged by us to perform functions or activities on our behalf;

·        Third parties - regulatory authorities, tax authorities, financial authorities, judicial, administrative, and law enforcement authorities, all in accordance with applicable law.

This list is not exhaustive, and there may be other lawful purposes for storing, disclosing, or otherwise processing your personal data.

The Company notifies the data subject in the event of an intention to transfer part or all of their personal data to third countries or international organizations.

8. Is personal data protected?

The Company ensures and maintains appropriate technical and organizational measures to protect personal data against unauthorized access or unlawful use of personal data and/or against their accidental loss, alteration, disclosure, access and/or damage or copying. These measures are designed to provide ongoing protection and integrity of personal data. The Company regularly reassesses the measures to achieve a constant level of data security.

 

9. Do we perform automated decision-making?

The Company does not engage in automated decision-making with data.

 

10. What are the rights of the Customers regarding personal data protection?

Each Customer has the right to exercise the following rights by submitting a written request to the Company.

·       Withdrawal of consent for personal data processing

When the processing of a Customer’s personal data is based on the Customer’s consent, the Customer has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent before its withdrawal.

·       Right of access