Privacy Policy

We respect the privacy of the personal data of our website users. This includes data of our clients, participants in surveys, various promotions and research, our partners and subscribers to our email newsletter.

This Privacy Policy (“Policy”) sets out the rules under which the personal data of individuals using the website www.TehnoMag.net (“Site”) are processed. 

It complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ( GDPR ) on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“Regulation”), which entered into force on 25.05.2018, and the Bulgarian Personal Data Protection Act (“PDPA”).

---

I. DEFINITIONS USED

1.1. “Personal data”  means any information relating to an identified or identifiable natural person;

1.2. “Data subject”  is a natural person who can be identified, directly or indirectly. In our case, these are the visitors to the site;

1.3. “Processing of personal data”  is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

1.4. “Controller”  means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. In our case, this is the site owner;

1.5. “Data Processor”  means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller;

1.6.  In this Policy, the European Union is referred to for short as  the “Union” .

II. DATA OF THE ADMINISTRATOR AND RELATIONSHIP WITH HIM

2.1.  The Administrator within the meaning of Art. 4, para. 7 of the Regulation and Art. 3, para. 1 of the LPDP and this Policy is the one who determines the purposes and means of the processing of personal data.

2.2 . The Administrator of your data for this site is:Trading company “AZPEKS-OOD”, UIC 131479119, duly registered according to the requirements of Bulgarian legislation with address: Sofia 1421, ul. Gorski Patnik №13;

2.3.  The contact details for the Administrator are as follows: 

• Office address: Sofia 1309, Sv. Troitsa Residential Complex, Tsaribrodska Str. 70;
• 02 422 422 8 
  0884 38 68 78

III. PURPOSES OF PROCESSING PERSONAL DATA

3.1.  We collect your personal data when you register on the site and place an order.

3.2.  This is done for the purpose of:

• Providing our services and fulfilling orders (contracts concluded remotely);
• Establishing contact and correspondence in connection with the execution of orders;
• Providing customer support (we may collect additional information from you to investigate and answer your support questions);
• Responding to inquiries;
• Personalizing your access to the site;
• Analyzing user demand and improving our services;
• Preparation of anonymous statistics on the use of the website;
• Keeping accounting records and fulfilling the requirements of the Accountancy Act and other regulatory acts;
• Conducting direct marketing;
• Renewal of subscription services, if any.

IV. CATEGORIES OF PERSONAL DATA THAT WE PROCESS

4.1 . Your personal data is collected when performing various actions on the site, namely:

• Order (online or by phone) – name, postal address for delivery and telephone number, and/or email address for contacting you. If you have requested an invoice as an individual, we are obliged by the Accountancy Act to also request the payer’s personal identification number.
• Contact Us (Contacts ) – email address or phone number and name. Optional data are city, company, position.
• Subscribe to our e-newsletter  – email address and name.
• If you want to use your Facebook registration  as a way to log in to the site , we will collect your Facebook number, Facebook name, Facebook email address, and gender.

4.2.  The data processed when ordering are collected on the basis of the performance of a distance contract to which you are a party or to take steps at your request prior to the conclusion of such a contract.

4.2.1 . When placing an order through the site, the data fields that are mandatory are marked and must be completed. All other fields are recommended, but are not mandatory to complete.

4.2.2.   The mandatory personal data to be provided that guarantee the conclusion of a distance contract are:  the names  and  postal address  of the recipient. In the case of a requested invoice as an individual, it is necessary to indicate  the payer’s personal identification number.

4.2.3.  Failure to provide this data will make it impossible to conclude a distance contract and perform the order.

4.3.  In all other cases, you provide your data voluntarily and at your consent and discretion.

V. PERIODS FOR RETENTION OF YOUR DATA

We will retain personal information as follows:

• E -store customers – we will store their online data for a period of 5 years after the last login to the site.
  
• E-store customers who have requested an invoice – we will store the issued invoice for 10 years after its issuance, starting from January 1 of the following calendar year, in accordance with accounting and tax laws.
  
• We will store documents printed on paper for the purpose of registering and reporting sales (goods receipts, packing lists, acceptance and delivery protocols) and containing personal data for a period of 5 years, in accordance with accounting and tax laws and regulations.
  
• We will keep a register of submitted complaints , in accordance with Art. 127, para. 2 of the CPA, within a period specified by the CPA.
  
• Newsletter subscribers – we will store their online data for a period of 1 year after the last access to the e-newsletter or until they wish to unsubscribe.
• In all other cases, we will retain your personal information for as long as necessary for the purposes of:

• Providing products, services and information you have requested;
• Manage the preferences you have made and the rights you have exercised under this Privacy Policy.

VI. WHO HAS ACCESS TO YOUR DATA?

The responsible party controlling the processing of these data is the Personal Data Administrator. He determines who, what data and under what conditions may have access. 
The categories of recipients to whom personal data may be disclosed are: 

6.1. Certain employees of the Administrator who have undertaken a confidentiality commitment and are familiar with the legislation on personal data protection and comply with this Privacy Policy. 

They receive personal access to them through a personal identifier and password, which is documented in a special register of actions. 

The technical and organizational measures thus introduced by the company guarantee that employees process only personal data that are necessary for a specifically defined purpose of the processing. This refers to the volume of personal data collected, the extent of processing, the period of their storage and their accessibility.

These measures ensure that by default, without specific intervention by an authorized individual, your personal data is not accessible to other individuals. Employees with access to the technical means are obliged to treat the information as confidential.

6.2.   Personal data processors  under a contract between the Administrator and the Processor may also be companies providing accounting services, IT services, couriers, forwarders, carriers, persons providing marketing cooperation, advertising services, consulting, auditors, lawyers, banks, as part of the refund procedure, etc., who process personal data only on the instructions of the Administrator, unless the processing is required by applicable law;

Personal data processors are obliged to provide sufficient guarantees for the implementation of appropriate technical and organizational measures in such a way that the processing takes place in accordance with the requirements of the Regulation, as well as to ensure the protection of the rights of Data Subjects. 

6.3.  Your personal data may also be disclosed to  third parties if this is provided for in a regulatory act, including to state authorities in respect of which there is a legal requirement to provide certain categories of personal data; 

6.4.  When fulfilling orders abroad, the Administrator is required to disclose your personal data to  a third country , which may not comply with the requirements of the Regulation.

VII. CHECKING, CORRECTION AND DELETING PERSONAL DATA

7.1.  According to the Regulation, you have the right:

• to check at any time the accuracy of the personal data held by us;
• to update them;
• to delete them completely (the right to be forgotten);
• to withdraw your consent to the processing of data that we have received based on your consent.

7.2.  The exercise of these rights on this site is possible through  the personal control panel,  which is provided to each registered user and is accessible after logging in to the site. Access to your account is protected by a password. You are responsible for keeping your password secret. You can change the information in your account at any time.

7.2.1.   Through it, you can check and edit your data, as well as delete your registration completely.  

7.2.2.   By deleting your profile (registration) on the site, you also delete your order history, depersonalizing them. This means that they will remain as records for statistical purposes, but will no longer be linked in any way to you. .  

7.2. 3 .   You can delete your profile on the site no earlier than 30 days after the last order.

7.3.   Subscribers to the e-newsletter can withdraw their consent at any time by unsubscribing from receiving it. This can be done using the link placed in each of the messages sent or from your personal control panel.

7.4.  Partial data retention when deleting the account can be done in the following cases:

• If the data subject has requested an invoice, their data will be stored in the invoice itself for accounting purposes for the period provided for the purpose.
• If the data subject has subscribed to the e-newsletter or any other service provided by the site, only the data necessary to provide the relevant service will be stored online.

7.5.  In the event of the expiration of the terms for storing personal data online, the profiles of the subjects of this data will be automatically deleted, and their orders depersonalized.

7.6.  In the event of deletion of personal data by the Administrator (respectively Processor), the relevant individual will be notified by sending an email.

7.7.  Your other rights are:

• to restrict or object to the processing of your personal data;
• the right to data portability, in case they are processed by another Administrator;
• the right to file a complaint against the current Administrator and the manner in which

which your personal data is processed;

7.8.  For any questions regarding your personal data and their processing, you can contact us via the contact details published on the site.

VIII. OTHER

8.1. Changes to the Privacy Policy
If we decide to change our privacy policy, we will post the changes on this web page.