The website www.everglass.bg (the “Website”) and its related services are available to visitors and users (“you”) in accordance with the policy governing the management and protection of personal data, as described in this document.
The Website is owned by “Ever Glass” Ltd., UIC 208673901, registered in the Commercial Register and Register of Non-Profit Legal Entities maintained by the Registry Agency at the Ministry of Justice, with its seat and registered address at: Bulgaria, Sofia (capital), Sofia Municipality, Sofia 1415, Vitosha district, Okolovrasten pat str. No 42, Butterfly office building, floor 1. Your personal data is collected and processed by “Ever Glass” Ltd., UIC 208673901, with its seat and registered address at: гBulgaria, Sofia (capital), Sofia Municipality, Sofia 1415, Vitosha district, Okolovrasten pat str. No 42, Butterfly office building, floor 1. (the “Company” or “we”).
As a personal data controller, the Company and its employees comply with all requirements of Bulgarian law and applicable European legislation relating to the protection of personal data. The Company guarantees the confidentiality of non-public information and personal data of all visitors and users of the website www.everglass.bg.
Please read this Privacy and Personal Data Protection Policy (the “Policy”) in order to understand how we collect, process, store, and use your personal data in the course of our activities. This Policy applies only to the Website and to personal data processing activities carried out by the Company or by third parties engaged by the Company for that purpose.
The Policy contains information regarding access to and protection of personal data, the purposes, legal grounds, and means of processing personal data, and other information that may be of interest to you in your capacity as a data subject. You can find this information below in this Policy, as well as by contacting us at: sales@everglass.bg. Please read the Policy before deciding to use the Website or register as a user.
PURPOSES
The Company recognizes the right to privacy and private life and undertakes to implement a comprehensive policy for protection against unlawful access to and/or processing of the personal data of Website users in accordance with this Policy.
The purpose of this Policy is to inform Website users about the purposes for which their personal data is processed, the recipients or categories of recipients to whom such data may be disclosed, the main principles governing the collection and processing of personal data, including the voluntary nature of its provision, the strict observance of users’ rights, and the Company’s compliance with its obligations as a personal data controller.
In order to comply with the applicable national and European legislation in the field of personal data protection, this Policy may be updated, amended, and supplemented periodically whenever required by law or by the practice of the competent regulator. The most current version is published on the Website.
This Policy applies to the information we collect through the Website, including advertisements, services, and applications, as well as through email, text messages, and other electronic communications between you and the Website.
TERMS
For the purposes of this Policy:
– “personal data” means any information relating to an identified natural person or to a natural person who can be identified, directly or indirectly, by reference to identifiers such as a name, identification number, location data, an online identifier, or one or more factors specific to that person’s physical, economic, cultural, or social identity;
– “processing of personal data” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, use, disclosure, or any other form of making the data available;
– “personal data controller” means a natural or legal person, public authority, agency, or other body which, alone or together with another party, determines the purposes and means of the processing of personal data.
COLLECTION OF INFORMATION AND DATA PROVIDED BY YOU
The Company collects information that you voluntarily provide to us, including through your use of the Website, your interaction with the Website’s functionalities, your registration as a user, your subscription to a newsletter, your registration for events and initiatives offered through the Website, and other similar activities. The Company also reserves the right to store and process users’ personal data for the purpose of complying with Bulgarian law and applicable European legislation.
The information that we collect and process depends on the manner in which you use and access the Website.
When the Website is visited by unregistered users, the provision of personal data is not required.
When the Website is used by registered users, we collect information and personal data from you when you submit a request for us to contact you in connection with the provision of information or services, when you contact us for assistance or information, or when you otherwise provide personal data, including in connection with news, events, information updates, or other services. For the purposes of registration on the Website, you provide the information required on the Website, including your name, email address, contact phone number, any message addressed to us, and any other required information. You provide similar information when submitting comments or sending a request or complaint to us.
The provision of personal data by the user is necessary for the performance of the services and functionalities offered through the Website, such as registration on the Website and subscription to newsletters, news, up-to-date information about events, other initiatives offered through the Website, or promotions. If a user refuses to provide personal data, they may be unable to register on the Website or to use services or other initiatives offered through the Website.
Each user is responsible for the truthfulness and accuracy of the personal data they provide. Any loss or damage caused to the Website, the Company, or any third party as a result of incorrect, inaccurate, or incomplete information shall be the sole responsibility of the user.
AUTOMATIC COLLECTION OF DATA
We may collect data automatically, including for profiling purposes, while you browse or use the Website, such as data relating to the number of your visits to the Website, your location, the information you access on the Website, your IP address, operating system, and browser type.
“COOKIES”
Like many other websites, we use cookies, which are small files stored on your computer’s hard drive. We use cookies to personalize the Website, including by displaying different pages to different users, to track individual users’ access to the Website, to analyze visitor patterns, to assess how users interact with the Website’s content, and generally to improve the Website. Through cookies, our Website may “distinguish” and “remember” visitors and their individual preferences, settings, and actions.
Most browsers allow you to delete cookies at any time or to disable their use entirely through the relevant settings. Please refer to your browser’s Help menu for information on how to stop the acceptance of new cookies, how to change your settings so that you receive a warning when a new cookie appears, or how to reject all cookies. Please note that restricting or refusing cookies may result in limited access to, or inability to use, certain functions of the Website.
IP ADDRESS
An IP address (Internet Protocol address) is a number that uniquely identifies a computer or other device connected to the Internet and enables it to communicate with other devices over the Internet or a local network. An IP address alone cannot identify a natural person. We store your IP address and the data derived from it in order to ensure the security of our systems and to prevent misuse of information and data.
We use automatically collected information to improve the Website and the user experience by creating and analyzing user patterns, personalizing access to and use of the Website according to your preferences and interests, and facilitating your searches based on the statistical data collected. We will store this information for a period of 3 years.
Automatically collected information is statistical in nature and does not itself contain personal data. However, in combination with other information that we store or receive, it may be possible to identify a personal data subject. In such cases, this information will be processed, stored, and used in accordance with this Policy.
ONLINE SURVEYS, SOCIAL NETWORKS, LINKS TO OTHER WEBSITES
We may conduct online surveys through the Website, created either by the Website team or by the Company’s partners, for the purpose of examining user attitudes and preferences. If you participate in an online survey, we may request specific information from you, such as your age, gender, education, interests, email address, and/or mailing address. This type of information constitutes personal data and is treated in accordance with this Policy.
The Website may contain links to other websites, for example to the Website’s Facebook page, Google Maps, and other external websites or platforms. Please note that this Policy does not apply to information collected through other websites. We recommend that you read the privacy policies of all websites you visit. If you have accessed the Website through a link from one of our advertising, marketing, or other partners, you may be redirected through pages associated with those partners. However, any information you provide will be collected by us, and the provisions of this Policy will apply to the use of that information.
GOOGLE ANALYTICS
While users visit and browse the Website, we may monitor the pages they visit and the time they spend on the Website through the Google Analytics analytics tool. You may object to the collection and processing of your data in this manner by downloading and installing a browser add-on from the following link:
http://tools.google.com/dlpage/gaoptout?hl=en
MANAGEMENT AND MAINTENANCE OF THE WEBSITE
The management and technical maintenance of the Website are carried out by external service and content providers. Such services may include the distribution of marketing and advertising materials, Website evaluation, surveys and data analysis, fraud prevention and risk mitigation, data cleansing, and other similar activities. We may provide personal data to these external providers, while permitting and requiring them to use such data only for the relevant services and subject to a contractual obligation to take the necessary measures to comply with the applicable personal data protection legislation.
PURPOSES FOR WHICH WE USE THE INFORMATION AND PERSONAL DATA COLLECTED BY US
We use this information and personal data for the following purposes:
– to provide the services offered through the Website;
– to improve the Website, personalize it, and facilitate access to and searches within it;
– for marketing and advertising purposes;
– to conduct online surveys and to analyze, process, and store information, including for statistical purposes;
– to send you information regarding news, upcoming events, promotions, services, and other activities, where you have consented to receive such information, and to otherwise communicate with you;
– to collect and store complaints, opinions, and recommendations, and to take appropriate action in connection with them;
– to comply with the Company’s legal obligations and to protect the rights and interests of users, the Company, and its affiliated persons, including for the purpose of preventing misuse of information and data;
– for other purposes for which we have obtained your explicit consent.
PROCESSING OF PERSONAL DATA
We process your personal data on the basis of legitimate interest. Our legitimate interest is generally based on the legally recognized right to economic initiative, namely the right to conduct and develop our business. Where we have requested and you have given consent to the processing of your personal data, your consent constitutes the lawful basis for such processing. The processing of your personal data is also lawful where it is necessary for compliance with a legal obligation of the Company as a personal data controller, or where such processing is necessary in order to protect your interests, such as in cases involving the detection and prevention of data theft, fraud, or other violations.
The Company, as the controller of users’ personal data, processes such data in accordance with this Policy and with the consent given by the user when providing the data. Users’ personal data is processed by persons authorized by the Company who have access to it on the basis of their official or contractual duties and only in connection with, and for the purposes of, such processing. Upon submission of a request in electronic form to sales@everglass.bg, each Website user may obtain information about the type of personal data processed by the Company, the authorized employees carrying out the processing, whether third parties process their personal data, the legal grounds and purposes for which their personal data has been provided to third parties, and other relevant information.
The Company processes personal data in accordance with the necessary security requirements in order to minimize the risks of data destruction or loss, unauthorized access, unlawful processing, or processing that does not correspond to the purposes for which the data was collected. The Website’s information systems and software are configured so as to minimize the use of personal and identification data, so that such data is used only where necessary for the specific purpose of the processing.
STORAGE OF PERSONAL DATA
Your personal data will be collected and processed through an electronic system managed by the Company or by third parties engaged by the Company for that purpose, and will be stored on secure servers.
The retention period of your personal data is determined primarily by the duration of your user profile. As long as you maintain an active profile on the Website, the Company will store your personal data. Upon deletion or other deactivation of the profile, the personal data associated with it will be deleted within one month, subject to compliance with the applicable legal requirements.
In all other cases, the data necessary for achieving the specific purpose of the processing, including data provided on the basis of the user’s explicit consent, shall be stored by the Company for a period of 5 years from the date of receipt, or for such longer period as may be necessary for compliance with our legal obligations as a personal data controller.
DISCLOSURE OF PERSONAL DATA
We may disclose the personal data stored by us in the following cases:
– with your consent;
– for the purpose for which you provide it, where disclosure of the data is necessary for that purpose;
– to third parties providing services related to the maintenance and management of the Website, data analysis, and data protection;
– to intermediaries involved in pre-contractual relations and in the conclusion of contracts by the Company, including sales intermediaries, marketing specialists, analysts, and the Company’s technical and other consultants;
– in compliance with a legal obligation or upon request by state authorities or judicial authorities, for the protection of the rights, property, and security of the Company, its affiliated persons, business partners, clients, or users of the Website;
– in the event of acquisition by third parties of control over the Company, its capital, or its business assets, in whole or in part. Transactions of this nature may also include the transfer of information relating to Website users, in which case we will notify you on the Website of the transfer of such data and of any new privacy and personal data protection policy.
We may share information that does not contain personal data with our marketing partners, analysts, advertisers, consultants, and other persons providing services to the Company. Such information is usually presented in numerical form, such as the number of users who visited the Website during a given period, the most frequently searched information or service, and other similar data.
RIGHTS OF WEBSITE USERS
Users of the Website have the right, at any time:
– to request from the Company access to their personal data processed by the Company, verification of its content, correction or completion, updating, blocking, deletion, termination or restriction of processing, to object to such processing, and to withdraw their consent to such processing by email to: sales@everglass.bg. Following such withdrawal, they will no longer be able to use the Website’s services, receive messages, emails, or SMS communications for advertising, marketing, and commercial purposes, or contact the Company electronically on matters related to customer programs and other similar matters. Such withdrawal will therefore be treated as a refusal by the user to receive services through the Website;
– to review and delete the information related to their personal data, including their profile. Upon deletion of a profile, all personal data relating to the data subject shall be automatically deleted;
– to receive from the Company information regarding the purpose of the processing of their personal data, how and where their personal data is stored, the third parties to whom it has been provided and the legal basis for such disclosure, how and for what period their personal data is stored, or to request that their data not be used for direct marketing purposes.
Pursuant to Article 20 of Regulation (EU) 2016/679, the Company states that it does not have the technical capability to provide portability of personal data from the Website to other websites.
You may contact us at: sales@everglass.bg if you wish to obtain the above information from the Company or to exercise your rights.
If you suspect misuse of your personal data, please contact a representative of the Company by email at sales@everglass.bg.
CHANGES TO THE POLICY
We will inform users of any substantial changes to this Policy by means of a notice published on the Website. In some cases, we may also send emails to inform our users of such changes. We recommend that you check the Website regularly for updates to the Privacy Policy.