PRIVACY POLICY
“Hometex.bg” collects and uses the information for the purposes of:
direct marketing and sales;
fulfillment of contractual obligations to Users
Notifies about new products and services related to Hometex.bg
“Hometex.bg” processes the personal data of users on the basis of a contract concluded between the User and “Hometex.bg”.
The user agrees to the processing of his personal data for the purposes of the generated documents and marketing of products and services by marking a check box.
The user can withdraw the given consent at any time by marking a checkbox located in his profile after logging in
Users’ personal data is stored for a period of 5 years.
Rights of Users
Each User of the site enjoys all the rights to protect personal data according to Bulgarian legislation and the law of the European Union. Each User has the right to:
Information (in connection with the processing of his personal data by the administrator);
Access to your own personal data;
Correction (if data is inaccurate);
Erasure of personal data (right to be forgotten);
Restriction of processing by the administrator or personal data processor;
Portability of personal data between individual administrators;
Objection to the processing of his personal data;
The data subject also has the right not to be subject to a decision based solely on automated processing, including profiling, which gives rise to legal consequences for the data subject or similarly significantly affects him;
Right to judicial or administrative protection in the event that the data subject’s rights have been violated.
The user can request deletion if one of the following conditions is present:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
The user withdraws his consent on which the processing of the data is based and there is no other legal basis for the processing;
The data user objects to the processing and there are no overriding legal grounds for the processing;
Personal data has been processed unlawfully;
The personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State that applies to the controller;
Personal data was collected in connection with the provision of information society services to children and consent was given by the person with parental responsibility for the child.
The user has the right to limit the processing of his personal data by the administrator when:
Dispute the accuracy of the personal data. In this case, the restriction of processing is for a period that allows the administrator to verify the accuracy of the personal data;
The processing is unlawful, but the User does not wish the personal data to be deleted, but instead requests the limitation of its use;
The Administrator no longer needs the personal data for the purposes of processing, but the User requires them for the establishment, exercise or defense of legal claims;
objects to the processing pending verification of whether the legal grounds of the administrator prevail over the interests of the User.
Right of portability.
The data subject has the right to receive the personal data concerning him and which he has provided to an administrator in a structured, widely used and machine-readable format and has the right to transfer such data to another administrator without hindrance from the administrator to whom the personal data data is provided when the processing is based on consent or a contractual obligation and the processing is carried out in an automated manner. When exercising the right to data portability, the data subject has the right to obtain a direct transfer of the personal data from one administrator to another, when this is technically feasible.
Right to object.
Users have the right to object to the administrator against the processing of their personal data. The administrator of personal data is obliged to terminate the processing, unless it proves that there are compelling legal grounds for the processing that take precedence over the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims. In case of objection to the processing of personal data for the purposes of direct marketing, the processing should be stopped immediately.
Complaint to the supervisory authority
Every User has the right to file a complaint against illegal processing of his personal data to the Commission for the Protection of Personal Data or to the competent court.
Obligations of the Personal Data Administrator:
The personal data administrator has the following obligations:
Processes data in accordance with the principles of personal data protection laid down in the regulation, being able to prove this (accountability);
Ensures data protection by design and by default;
Notifies the supervisory authority and the data subject in the event of a breach of personal data security, as well as documenting any breach of personal data security, including the facts related to the violation, its consequences, the actions taken to deal with the violation;
Conducts a data protection impact assessment;
Implements appropriate technical and organizational measures to ensure data security, such as:
Pseudonymization;
Encryption;
Ensuring ongoing confidentiality, integrity, availability and resilience of processing systems and services;
Timely restoration of availability and access to personal data in the event of a physical or technical incident;
Regular testing, assessment and evaluation of the effectiveness of technical and organizational measures;
Cooperation with the supervisory authority for the protection of personal data in fulfilling the obligations arising from the regulation.
Prepares and implements internal procedures regarding acceptance, examination and response within one month to requests from Users to exercise their rights as subjects of personal data.
Maintaining a register
Hometex.bg maintains a register of processing activities for which I am responsible. This register contains all the information below:
the name and contact details of the administrator
the purposes of the processing;
description of categories of data subjects and categories of personal data;
the categories of recipients to whom the personal data have been or will be disclosed, including recipients in third countries or international organizations;
where possible, the deadlines for erasure of the different categories of data;
where possible, a general description of the technical and organizational security measures,
The administrator of personal data uses the services of a personal data processor – “SuperHosting.BG” OOD, Sofia, Iztok Quarter, Dr. G. M. Dimitrov Blvd. No. 36, EIK 131449987.
The data processor does not include another data processor without the prior specific or general written permission of the controller.
BODIES REGULATING THE ACTIVITY
The authorities regulating the activity of “Hometex.bg” are the Commission for the Protection of the User /CCP/ and the Commission for the Protection of Personal Data (PCPD), with the following coordinates:
For KZP:
Website: https://kzp.bg/kontakti
• tel: 0700 111 22
Email: info@kzp.bg
• address: city of Sofia, Slaveykov Square, No. 4A, floors 3, 4 and 6
For CPLD:
Website: https://www.cpdp.bg
Tel: 02/91-53-518
Email: kzld@cpdp.bg
• address: Sofia 1592, Prof. Blvd. Tsvetan Lazarov” No. 2
DISPUTES
Consumers can use the European Online Dispute Resolution (ODR) platform available at / http://ec.europa.eu/odr / – a single access portal that allows EU consumers and traders to resolve disputes between themselves .
Alternative dispute resolution (ADR) between consumers and merchants is an out-of-court conciliation proceeding on a voluntary basis.
General conciliation commissions help to reach an agreement between consumers and traders in disputes about contracts for the provision of services.
The general conciliation commissions are determined on a regional basis, and the General Conciliation Commission with headquarters in Varna and the territory of Varna region, Dobrich region and Silistra region is competent to resolve disputes between “Hometex.bg” and the User;
The consolidated list of recognized ADR authorities of the Member States of the European Union can be found at https://webgate.ec.europa.eu/odr/main/index.cfm?event=main.adr.show