PRIVACY AND COOKIE POLICY
The policy of INFARMACY Ltd. fully complies with Regulation (EU)2016/679 (the "Regulation"). The use of the wwwpandamore.eu website requires the processing of personal data, for which we seek the user's prior consent and declare this policy for their protection.
The processing of personal data, such as name, address, email address or telephone number, is always in accordance with the General Data Protection Regulation (GDPR) and in accordance with the data protection regulations of the country concerned. With this data protection declaration we want to inform you about the scope and purpose of the data we collect, use and process. Users are informed, through this statement, about the protection of their personal data and the rights they have under the regulation.
"INFARMACY Ltd. has implemented numerous technical and organizational measures to ensure the full protection of the personal data of natural persons received and processed through our website.
1. Definitions
The data protection statement of INFARMASI Ltd. is based on the terminology used in the General Data Protection Regulation (GDPR). The data protection statement must be understandable to the general public as well as to our customers and business partners. To ensure this, we would first like to explain the terminology used.
In this privacy statement we use the following terms:
1.1. Personal data
Personal data - any information that can be used to identify an individual ("user"). A natural person who can be identified directly or indirectly, in particular by reference to data such as name, location data, online identifier, etc.
1.2. Data subject/user
A data subject ("user") is any identified or identifiable natural person whose personal data we process in accordance with the terms of the Regulation.
1.3. Processing
Processing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available or combining, restriction, erasure or destruction of personal data.
1.4. Limitation of processing
Restriction of processing is the marking of stored personal data in order to restrict their processing in the future.
1.5. Creating a profile
Profiling - any form of automated processing of personal data.
1.6 Control authority/manager
The controller or controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of that processing are determined by the EU legal framework.
1.7. Recipient
The recipient is the natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether a third party or not. Public authorities that may receive personal data in the context of a specific investigation under EU law are not considered third parties; such data are processed in accordance with the applicable data protection rules depending on the purposes of the processing.
1.8. Third part
A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or the processor, are entitled to process personal data.
1.9. Consent
The user's consent is any freely given, specific, informed and clear indication, by declaration or by clear affirmative action, and consents to the processing of his/her personal data.
2. Name and address
Company.
Address. "6, Colonel Drangov Street, Petrich
Phone: +359892787894
E-mail: store@pandamore.eu
Website: www.pandamore.eu
Supervisor:
Committee for the Protection of Personal Data with the address. Sofia, ul. "Ivan Evstatiev Geshov" 15, tel.: 02 940 20 46 fax: 02 940 36 40; e-mail: kzld@government.bg, kzld@cpdp.bg: Website: www.cpdp.bg.
3. "Cookies"
The website www.pandamore.eu uses cookies. "Cookies are text files that are stored on the user's device.
Through the use of cookies, INFARMACY LTD can provide the users of this website with more user-friendly services that would not be possible without the setting of cookies.
With the help of cookies, the information on our website can be optimised according to the user's behaviour and wishes. "Cookies allow us to identify our users. The purpose of this identification is to make it easier for users to use our website.
The user can at any time disable the use of cookies by adjusting the appropriate setting in the Internet browser used. Already stored cookies can be deleted at any time by an internet browser or other software applications used to visit our website. This is possible with all browsers and applications. If the data subject deactivates the setting of the use and recording of cookies in the browser used, not all functions of our website can be fully used.
4. Collection of general data and information
The INFARMACY Ltd website collects general data and information when you visit it. This general data and information is stored in the server logs owned by Superhosting.BG Ltd, which strictly comply with the data protection regulation. Information about this can be found at https://www.superhosting.bg/web-hosting-page-terms-and-agreements.php#gdpr. Collected are (1) the types and versions of the browser used, (2) the operating system used by the access system, (3) the website from which our website is accessed (the so-called referrer), (4) (5) the date and time of access to the website, (6) the IP address, (7) the internet service provider, (8) any other information that can be used in case of a cyber attack on our website.
When using these general data and information, INFARMASI LTD does not draw any conclusions about the data subject. On the contrary, this information is needed to (1) create the right content on our website, (2) optimize the content on our website, (3) provide quality access to the information, (4) provide law enforcement authorities with the information needed to prosecute in case of a cyber attack.
Therefore, INFARMASI Ltd. statistically analyzes the anonymous data and information collected, with the aim of increasing data protection and data security and ensuring an optimal level of protection for the personal data we process. The anonymous data in the server logs are stored separately from the personal data provided by the user.
5. Ability to communicate via the website
The INFARMACY Ltd. website contains information that allows for quick electronic communication with us, as well as direct communication, which includes submitting direct information by email using a form on the website. If a user contacts INFARMACI LTD by e-mail or by using the contact form, the personal data transmitted by the data subject will be automatically stored. Such personal data voluntarily transmitted by the user shall be processed and stored for the purpose of communication with the user. These personal data are not provided to third parties.
6. Deletion and blocking of personal data
"INFARMACY Ltd. processes and stores the user's personal data only for the period of time necessary to achieve the purpose or for the period of time provided for in the regulation.
If the purpose of retention is not applicable or if the retention period set by the European legislator or other competent legislator expires, the personal data shall be blocked or deleted regularly in accordance with legal requirements.
7. Consumer rights
7.1. Right to confirmation
Each user has the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed. If the data subject wishes to exercise this right of confirmation, he or she may, at any time, contact us.
7.2 Right of access
Every user has the right to receive at any time information about his/her personal data stored and a copy of this information. In addition, in accordance with the Regulation, the user has the right to request access to and information on:
- the purposes of the processing,
- the categories of personal data concerned,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
- where possible, the envisaged period for which the personal data will be retained,
- the right to request the rectification or erasure of personal data or the restriction of the processing of personal data,
- the right to lodge a complaint with a supervisory authority,
- the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4) of the Regulation, and the envisaged consequences of such processing.
The user has the right to receive information on whether his/her personal data is transferred to a third country or an international organisation. In this case, the user has the right to be informed of the precautions taken in relation to the transfer.
If the user wishes to exercise this right of access, he or she may contact us at any time.
7.3. Right to rectification
Every user has the right to request, without undue delay, the correction of inaccuracies in his/her personal data. Taking into account the purposes of the processing, the user has the right to complete incomplete personal data by providing an additional declaration to that effect.
If the user wishes to exercise this right of rectification, he or she may contact us at any time.
7.4. Right of deletion
Every user has the right to request the deletion of his/her personal data without delay and we are obliged to delete them without undue delay when one of the following reasons applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or processed,
- the user withdraws the consent on which the processing of his or her personal data is based, in accordance with Article 6(1a) or Article 9(2a) of the Regulation, and where there is no other legitimate ground for continuing the processing,
- the user objects to the processing pursuant to Article 21(1) of the Regulation and there are no legitimate grounds for the processing or the user objects to the processing pursuant to Article 21(2) of the Regulation,
- the personal data have been unlawfully processed;
- personal data are collected in connection with the provision of services referred to in Article 8(1) of the Regulation,
If one of the above reasons applies and the user wishes to request the deletion of the personal data stored by INFARMASI Ltd, he/she may contact us at any time. A member of INFARMACY Ltd's staff will promptly ensure that the erasure request is complied with immediately.
Where the controller has made the personal data public, it shall, in accordance with Article 17(1), erase the personal data provided to third parties, taking into account the available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the personal data which the user has requested to be erased. The employees of INFARMACY Ltd. will arrange the necessary measures in each case.
7.5 Right to restrict the processing of personal data
The user has the right to request the restriction of the processing of his/her personal data when one of the following applies:
- the accuracy of the personal data is contested by the user, giving the controller the possibility to verify the accuracy of the personal data,
- the processing is unlawful and the user's data contravenes the erasure rules and requests the restriction of its use,
- the processing of personal data is no longer necessary, but is required for the establishment, exercise or defence of legal claims,
- the user objects to the processing of his or her personal data in accordance with Article 21(1) of the Regulation.
If one of the aforementioned conditions applies and the user requests the restriction of the processing of his/her personal data stored by INFARMASI Ltd, he/she may contact us at any time. The employee of "INFARMACY" Ltd. will restrict the processing of such data.
7.6. Right to data portability
Each user has the right to receive the personal data he has provided to us in a structured electronic form. The user has the right to transfer these data to another controller, provided that the processing is based on Article 6(1a), Article 9(2a) of the Regulation or a contract in accordance with Article 6(1b) of the Regulation.
In addition, when exercising the right to data portability in accordance with Article 20(1) of the Regulation, the user has the right to transmit personal data directly from one controller to another, provided that this is technically feasible in accordance with the Regulation.
To establish the right to data portability, the user can contact us at any time.
7.7. Right to object
Any user has the right to object at any time to the processing of personal data concerning him or her on the basis of Article 6(1) of the Regulation.
"INFARMACY Ltd." will not process personal data in case of objection, unless we have legitimate grounds for processing that override the interests, rights and freedoms of the user or for the establishment, exercise or defence of legal actions.
If INFARMACY Ltd. processes personal data for direct marketing purposes, the user has the right to object at any time to their processing for this purpose. This concerns profiling related to direct marketing. If the user does not want their data to be processed for direct marketing purposes, we are obliged to comply with this request.
7.8 Automated decision-making, profiling
Each user has the right to refuse automated processing, including profiling, which produces legal effects concerning him or her or similar substantial effects on him or her, provided that the decision is not necessary for the conclusion or performance of a contract between us and the user.
7.9. Right of withdrawal
Each user has the right to withdraw his/her consent to the processing of his/her personal data at any time.
If the user wishes to withdraw his/her consent, he/she can contact us at any time.
8. Shipping information
For the fulfilment of the consumer's order and the so-called distance contract, which results from the electronic order and/or payment, we use the services of the courier company Econt Express.
We transmit the personal data of the courier company: name, surname, telephone number and address, in order to be able to execute the user's order and/or collect the payment, if the payment method "cash on delivery" has been selected, which is also collected by the courier company upon delivery of the ordered products. The company strictly complies with data protection regulations. More information can be found at http://www.econt.com
9. Data protection provisions regarding the use of Google Analytics on our website
We have integrated a Google Analytics script into our website. The purpose of this tool is to collect and analyse data about the behaviour of visitors to the site: which pages they visited, how often and for how long they viewed a sub-page. Web analytics are mainly used for website optimisation and ultimately for cost-benefit analysis of Internet advertising.
Google Analytics is owned by Google Inc., 1600 Pkwy, Mountain View, CA 94043-1351, USA.
For web analysis via Google Analytics, we use "_gat. _anonymizeIp". Using this application, the IP address of the user's ISP is shortened by Google and anonymized.
The purpose of Google Analytics is to analyse the traffic on our website. Google uses the data and information collected to evaluate the use of our website and to provide online reports.
Google Analytics places a cookie on the device of the user visiting our website. The definition of cookies is explained above. The cookie allows Google to analyse the use of our website. Every time you visit one of the pages of our website where the Google Analytics tracking code is embedded, your device's web browser will send data to Google Analytics. During this process, Google receives personal information about the user, such as IP address and location.
"The cookie is used to store information such as the time of access, the location from which it was accessed and the frequency of visits to our website. Each time you visit our website, this personal data, including your IP address, will be provided to Google. This personal data is stored by Google in the USA and the company may transfer it to third parties.
The user can disable the use of cookies on our website at any time by adjusting the browser used accordingly and thus permanently deny the storage of information from cookies. Such a setting in each browser will prevent Google Analytics from storing a cookie on the user's device. In addition, cookies already used by Google Analytics can be deleted at any time by the settings of the browser and/or application of the user visiting our website.
The user has the right to object to the collection of data generated by Google Analytics on the use of this website and to the processing of this data by Google. To do so, the user must download a browser add-on from https://tools.google.com/dlpage/gaoptout and install it. Through JavaScript, this add-on will disable Google Analytics from providing data and information about your visit and behaviour to Google. The installation of the add-on in the browser is considered an objection to the processing of personal data. If the user's device is reinstalled, this add-on will need to be reinstalled to disable sending information to Google Analytics. If the browser add-on is uninstalled by the user, a new installation and activation of the browser add-on may be required.
Additional information and the applicable Google Privacy Policy can be found at https://www.google.com/intl/bg/policies/privacy. The information collected by Google Analytics, its processing and storage is described in detail at https://www.google.com/analytics.
10. Data protection provisions regarding the use of Facebook
On our website we have links to the social network Facebook.
A social network is an online meeting place on the Internet, an online community where users are able to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging views and experiences or allow users to provide personal or business information. Facebook allows users to create profiles, upload photos and communicate with each other.
Facebook is owned by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the user lives outside the United States or Canada, the data controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
On each page of our website there may be a link to our Facebook account and/or Facebook plugins. It is possible that the device from which the user is visiting our website may prompt the user to install a Facebook add-on and/or mobile app. An overview of all possible Facebook add-ons can be found at https://developers.facebook.com/docs/plugins. During this process, Facebook is informed about the subpage of our website that the user visited.
If the user is also logged in to Facebook, Facebook detects this and collects information related to the user's profile on the social network. If the user clicks on one of the Facebook links/buttons embedded on our website, the social network stores this information, which it associates with the user's personal profile there.
Facebook always receives information about the visit to our website when the user is logged into the social network system, regardless of whether the user clicks on one of the Facebook links on our website or not. If the user does not wish this transmission of information to Facebook, it is recommended that the user logs out of his or her social network account before visiting our website.
Facebook's privacy guide is published at https://facebook.com/about/privacy, which provides information about the collection, processing and use of personal data by the social network. It also explains what possible settings Facebook offers to protect users' privacy. It describes various configuration options that disable data transmission to Facebook.
11. Data protection provisions regarding the application and use of Instagram
We have embedded elements and links in the Instagram service. Instagram is a service that can be described as an audiovisual platform that allows users to share photos and videos, as well as distribute them to other social networks.
Instagram is owned by Instagram LLC, 1 Hacker Way 14, Menlo Park, California, USA.
When you visit one of the pages of our website, the website has an embedded Instagram component, which may send information to the social network about the user's behaviour on one of the pages of our website and/or receive an invitation to install a social network component or mobile application.
If the user is simultaneously logged in to Instagram, Instagram records the duration and visits to each page of our website and associates this behaviour with the user's social network account. This information is collected whether or not the user has clicked on any of the social media buttons on our website.
Additional information and the applicable Instagram data protection regulations can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy.
12. Data protection provisions regarding the application and use of Pinterest
This website has embedded elements of Pinterest Inc. Pinterest is a social network - a meeting place, an online community that allows users to communicate and interact with each other in a virtual space. The social network can serve as a platform for sharing opinions and experiences or allow the online community to provide personal or corporate information. Pinterest allows users of the social network to post collections of images and individual photos, as well as descriptions on virtual pin boards (called Pins) that can be shared by other users (called comments.
Pinterest is owned by Pinterest Inc., Inc. Brann 808, San Francisco, CA 94103, USA.
When visiting our website, any subpage on which a Pinterest element (Pinterest plug-in) is embedded, the internet browser on the user's device may send an explicit invitation to install the social network's element or mobile application. More information about Pinterest can be found at https://pinterest.com. Pinterest receives information about which specific subpage the user has visited.
If the user is logged in to Pinterest, Pinterest tracks the browsing on each subpage of our website and associates this information with the user's social network profile.
The data protection guide published by Pinterest, which is available at https://about.pinterest.com/privacy-policy , provides information about Pinterest's collection, processing and use of personal data.
13. Legal basis for the processing of personal data
Article 6(1b) of the Regulation serves as a legal basis for the processing of personal data by obtaining the consent of the user for the specific purpose of processing his/her personal data. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, where the processing operations are necessary for the supply of goods or services, the processing is based on Article 6(1a) of the Regulation. The same applies to processing that is necessary for pre-contractual measures, for example in the case of enquiries about our products or services. The legal basis on which the processing of personal data is required, for example for the execution of tax operations, the processing of personal data is based on Article 6(1b) of the Regulation. In rare cases, the processing of personal data may be necessary to protect the vital interests of the user or another natural person. The processing of personal data may be based on Article 6(1b) of the Regulation. This legal basis is used for processing where the basis of processing does not fall under any of the above legal bases, if the processing is necessary for the purposes of our legitimate interests or those of third parties, unless these override the fundamental rights and freedoms of the user.
14. The legitimate interests pursued by the controller or a third party
Where the processing of personal data is based on Article 6(1), the Regulation is the lawful approach under which we process personal data to enable us to provide a quality service for the benefit of the well-being of current and future customers.
15. Period for which the personal data will be stored
The criteria used to determine the retention period for personal data are the legal frameworks provided for in the Regulation. After the expiry of the period set out in the Regulation, the data concerned shall be deleted in accordance with the established rules if they are no longer necessary for the performance of a contract or for the conclusion of a contract between the two parties.
The provision of personal data in case of a contractual relationship between us and the user, their processing and storage, as well as the rights arising from the Regulation are defined in this Privacy Policy.
We clarify that the provision of personal data may be required in part by law (e.g. tax legislation) or may be the result of a contractual relationship. If necessary for the conclusion of a contract, the user must provide his/her personal data for this purpose, which will be processed by us in accordance with the procedure set out in the regulation. Refusal to provide personal data may result in our inability to enter into a contract, provide services or goods.
